Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7fd685c-77e9-3301-94ff-ea0639aec29d.roa
File:                     e7fd685c-77e9-3301-94ff-ea0639aec29d.roa (raw, json)
Hash identifier:          b2gytrPm6U1MgIItrCYHLmTRfklvuMwj015UOI5poK8=
Subject key identifier:   F7:92:7D:2E:62:C2:4D:A4:72:B6:EA:7B:5A:7C:E7:90:A5:21:A9:05
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C84BFC4009F1301515F22380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7fd685c-77e9-3301-94ff-ea0639aec29d.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        70.32.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:fc:40:09:f1:30:15:15:f2:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=12c4d3f3-8774-4ada-a4f8-1c291d192c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:5c:78:82:4a:a1:58:68:d6:8d:88:e6:5a:
                    c8:3a:f2:5e:46:b6:e1:1e:d7:b0:7e:97:94:81:4c:
                    12:af:1f:4d:ad:ca:b2:6a:9f:3f:2f:86:f3:b4:fe:
                    3d:fd:d9:f2:ae:a7:79:a7:75:23:9d:04:ad:07:1b:
                    ca:1c:08:83:d9:04:3f:20:75:95:0a:68:dc:0a:2f:
                    ff:4d:3e:1c:c0:67:97:b3:9f:64:5a:4d:a0:ed:f6:
                    03:1b:a1:71:fc:47:9d:bd:72:f4:9b:04:d4:3f:7c:
                    b6:c0:b8:20:cf:ae:5b:98:04:fd:05:a3:4b:56:68:
                    a6:e4:75:25:36:0a:1e:67:c1:df:01:10:26:aa:84:
                    f2:a8:b2:68:87:1e:77:ac:81:f2:de:11:a1:97:ec:
                    1e:bc:27:22:c7:65:6c:eb:03:96:03:a5:f6:91:37:
                    ec:42:b2:ad:31:da:0b:83:5d:fe:49:50:5a:d6:17:
                    ad:57:fb:97:1d:5b:09:36:97:aa:37:8b:2d:09:97:
                    71:51:27:24:92:74:d8:90:60:f2:33:81:c7:3a:50:
                    d3:d9:dc:91:9b:14:8d:be:d3:36:88:a7:91:b3:b9:
                    8a:ab:87:ba:a7:d3:57:24:65:67:e5:52:9f:5d:fb:
                    64:b3:4b:16:9b:e4:41:ec:51:50:c8:3c:74:6e:c6:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:7D:2E:62:C2:4D:A4:72:B6:EA:7B:5A:7C:E7:90:A5:21:A9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7fd685c-77e9-3301-94ff-ea0639aec29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:88:7c:82:41:65:3b:8a:3d:6f:87:85:4a:67:33:cd:4d:85:
         7d:cf:aa:55:10:16:d6:c0:bb:35:0e:ba:31:94:d3:c9:1e:49:
         4f:40:bb:ec:f8:c9:07:a0:b8:0a:07:8e:d3:85:d7:c1:9e:5c:
         a7:c2:fd:07:e4:45:e5:a3:5d:46:d3:52:e1:89:5e:30:19:5d:
         de:7d:ff:44:e7:e3:e2:50:2f:be:a2:fa:89:38:e3:02:7e:f9:
         45:49:cc:3d:c3:dc:f4:04:2f:96:77:10:dd:85:2f:48:ca:1c:
         4b:c3:81:58:e9:e7:be:fa:63:7a:00:cb:a3:f9:48:67:d5:a0:
         b0:4d:29:a6:be:2a:8d:07:fc:d9:da:b8:9d:98:2d:a1:b7:db:
         1d:0f:98:48:0a:cd:fc:56:f8:0a:a4:8f:35:83:75:f4:c0:47:
         f0:4b:aa:a6:65:18:cf:24:10:69:d4:dc:45:3c:7a:f7:c8:65:
         7c:d0:08:d5:36:89:f5:b9:78:33:1d:e1:5f:df:f6:23:57:b9:
         94:14:70:81:ef:1a:a7:ad:b4:ab:3c:f4:a8:fe:5c:da:be:c4:
         03:5b:5b:67:ea:b0:38:26:67:53:05:03:c3:d8:a1:8d:59:46:
         cb:11:c6:d9:f5:dd:a8:1d:10:e6:23:9f:6f:84:da:2f:10:21:
         f2:8e:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:55 2025 by rpki-client