Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa
File:                     3c8c920b-c526-3c5f-9275-8f041f85fd59.roa (raw, json)
Hash identifier:          R6Ra+v6TPbqQfp3pfPb+sOYVLV50THAckZwGYAPe4ns=
Subject key identifier:   99:8F:24:58:67:30:8B:9D:C2:BF:64:B8:DF:EC:37:42:1C:33:93:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD5D97A03BD5523F2A3E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        70.106.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d5:d9:7a:03:bd:55:23:f2:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=9a7a4521-9172-4f0f-9206-b7b1afd4be8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:d8:30:ca:ea:e4:f2:37:f3:0b:f0:b0:31:
                    d3:63:fc:64:4d:df:91:d6:5a:1d:bc:65:40:e9:40:
                    50:c6:ee:f4:55:96:1d:e0:80:d9:e0:88:f9:e7:f7:
                    36:16:78:c4:b4:5d:29:fa:3c:98:32:62:18:7a:91:
                    34:50:e1:9b:52:9d:a4:ae:d5:75:bb:8a:9b:d9:c1:
                    e7:5d:e1:ef:b6:af:b9:b5:51:8c:56:de:94:f0:69:
                    52:91:ff:47:12:41:c6:eb:9d:58:27:06:66:b7:b9:
                    5d:eb:0f:47:13:94:35:53:cf:ac:81:f6:d0:db:6f:
                    15:a4:c2:5f:be:a3:ee:0e:c3:fd:94:7b:19:95:9f:
                    8c:e6:d8:99:b1:53:a8:f8:41:de:5f:22:db:d0:23:
                    0c:a9:10:84:15:25:61:07:67:12:5c:38:de:fc:4e:
                    7a:8d:2a:54:38:ad:84:8c:32:c6:3c:5b:1e:69:db:
                    10:dc:78:7c:c1:74:9d:1a:e0:7a:7f:b2:9f:75:99:
                    ab:6a:fa:3f:ef:be:63:5c:17:5a:55:f7:03:08:0d:
                    4e:cc:f7:2e:5a:68:b4:0c:81:b1:f6:13:16:2d:6e:
                    e0:8e:57:88:72:64:83:e9:ae:d5:39:d8:32:be:c5:
                    ed:72:dc:ba:5c:ac:89:d2:4b:30:84:bd:11:a0:77:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8F:24:58:67:30:8B:9D:C2:BF:64:B8:DF:EC:37:42:1C:33:93:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:73:ff:e4:6b:ad:51:17:e7:af:e1:dd:ae:39:ae:df:20:bc:
         55:bb:28:81:09:b7:37:4e:f5:0c:f7:46:7a:b9:43:52:d0:31:
         2b:6f:ea:40:0a:bb:e4:b7:43:0c:59:6d:e7:1e:82:0b:7a:65:
         ec:74:26:d3:d7:bb:41:3e:9b:b4:e0:01:8f:a8:10:03:a5:f9:
         71:44:2b:96:ab:ef:d5:e2:13:16:6a:b9:f7:e6:07:8c:65:b3:
         39:d8:af:72:31:32:13:11:83:17:cc:02:a7:b3:e3:f3:de:3a:
         bc:2d:7d:b4:a7:1f:3a:7e:a0:8f:56:bf:32:5c:c8:4b:2f:c3:
         08:e3:c2:80:29:32:40:2d:b3:41:56:03:a3:5c:0a:08:ea:ad:
         8b:d6:46:b8:11:6a:2e:be:3c:73:c3:23:6e:9f:94:da:6b:8b:
         34:b7:21:84:86:43:65:d3:a5:b9:70:35:22:9a:03:6d:fa:45:
         90:dd:81:1b:e3:53:44:67:66:35:31:64:45:bb:a0:e6:e0:df:
         d1:91:68:30:dd:85:82:a7:ee:23:da:b2:cf:b7:b0:78:61:60:
         82:69:e1:a5:15:3f:2b:67:a5:83:fa:55:4b:a4:81:4f:19:ac:
         4e:09:a9:fe:f8:56:44:63:6f:bd:9e:78:e7:2d:b9:47:12:fa:
         a7:b0:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:23 2024 by rpki-client on console-ams.rpki-client.org