Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb45af3c-36ad-3cee-bcf6-2f34d0722063.roa
File:                     eb45af3c-36ad-3cee-bcf6-2f34d0722063.roa (raw, json)
Hash identifier:          zNCTc7H+wVT3NrDBz56lNqink+76sJvtRRgGkknK2A8=
Subject key identifier:   8E:B8:F0:1F:94:48:AE:84:DB:C0:4D:C2:66:4B:1D:30:9C:62:D8:84
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E7093769B4A829FAA47A680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb45af3c-36ad-3cee-bcf6-2f34d0722063.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     19484
IP address blocks:        70.32.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:93:76:9b:4a:82:9f:aa:47:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=5e1a0642-d48f-4aa2-9811-e23c2ce6f0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:4e:a0:8e:be:3d:3f:b5:e8:46:46:52:61:
                    41:8f:61:05:3a:38:45:b0:f1:2f:ff:ae:ab:8d:2f:
                    fd:a1:41:f7:40:5a:a6:7d:09:e2:3b:4c:70:04:e1:
                    df:6c:ce:46:77:0e:38:e6:78:23:3a:ff:42:b0:1c:
                    56:4f:c8:2c:3b:f1:c7:d3:dd:b6:4d:ec:e2:9e:29:
                    0d:0c:a7:de:23:94:dc:69:f3:6e:55:e1:53:f1:df:
                    96:12:ef:20:19:4e:ce:f0:75:03:1d:75:93:d9:2b:
                    5d:23:58:d0:39:d9:15:16:8d:1b:9e:71:f4:8f:1b:
                    91:df:0c:93:1c:ac:78:d8:12:cd:75:4e:04:b8:12:
                    89:e7:3c:bf:e4:c0:6f:e1:f8:b9:15:3b:3d:90:f9:
                    3a:0a:eb:1e:b4:6c:98:0f:a0:49:c3:db:b8:43:63:
                    7f:66:2d:91:84:9a:ac:38:54:c0:70:cc:5b:93:1d:
                    1b:c7:01:6a:90:14:75:6b:db:a2:d3:f9:e8:76:81:
                    7a:1d:af:c3:47:a6:60:4b:a8:62:da:cd:5f:10:f8:
                    08:98:0d:7f:40:9b:7a:57:c6:8a:bc:3d:c4:c5:a9:
                    8c:45:2f:75:07:43:a3:cb:a0:a2:da:fd:8b:a0:02:
                    51:27:cb:8f:12:11:5a:b0:63:78:76:85:1a:94:3e:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B8:F0:1F:94:48:AE:84:DB:C0:4D:C2:66:4B:1D:30:9C:62:D8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb45af3c-36ad-3cee-bcf6-2f34d0722063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:21:11:e7:9f:7b:ea:c5:6e:5d:72:24:df:c4:8a:a2:f7:
         4c:6e:13:8a:84:7e:dc:14:0b:d1:c9:19:21:f6:3a:75:62:26:
         b6:66:be:f8:df:8b:37:e9:dd:f6:0d:fc:68:dc:95:76:97:4f:
         c3:c4:52:28:9a:4d:42:1f:c2:dc:99:47:f6:9b:52:66:06:f3:
         51:99:03:0a:4a:6d:76:9c:6c:68:a5:17:f7:b9:5e:e9:d5:31:
         93:ae:d1:45:93:dd:b9:9d:13:55:91:11:4b:c4:eb:ba:22:0c:
         77:0f:91:48:bd:c6:57:81:bc:12:eb:04:e1:7d:f9:45:30:83:
         da:f6:b0:9a:a2:ce:1f:ff:de:06:89:3e:4e:e0:c2:b5:77:3a:
         b9:4b:b6:1b:2d:91:be:33:f3:8a:b5:bc:62:73:c7:b0:84:8a:
         37:2d:9d:41:3b:c6:a3:9c:3a:5a:5d:5d:69:3b:5d:e2:7e:96:
         bc:38:57:62:2f:78:b3:95:39:e4:46:48:4a:f5:36:8b:91:14:
         6d:3c:b2:f8:fc:36:4a:9d:cc:a1:5f:ec:24:00:16:0c:83:df:
         be:2d:dd:bb:ec:0e:28:15:54:d9:d3:70:9c:8a:67:6c:44:40:
         0a:11:a7:2c:8d:0f:5e:bc:9f:cf:2d:a4:70:49:3f:c2:3b:59:
         bc:e6:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:31:09 2024 by rpki-client on console-fra.rpki-client.org