Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa
File:                     8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa (raw, json)
Hash identifier:          wlGW4wIaAK2uZHJf0gNsYPSNTactfd0dkDuEw8nM8YU=
Subject key identifier:   55:38:47:5D:91:4C:46:E2:CE:11:F6:92:62:DD:ED:A6:1F:48:87:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B807DA90EF15CAAF74210
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        70.16.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:80:7d:a9:0e:f1:5c:aa:f7:42:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=da5b86fd-2169-47ad-929a-dfd201f6bde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:53:87:5a:c4:f9:fe:e3:29:d7:62:d4:84:
                    44:2b:a0:f3:73:91:eb:55:7d:c9:39:d0:15:1a:26:
                    55:35:06:f9:d1:c1:05:07:b1:3f:c9:1b:46:db:10:
                    20:6c:79:ed:83:11:a3:c3:3b:94:ce:4d:f6:06:b1:
                    25:47:1a:3a:b7:a0:32:89:e4:e3:aa:94:33:49:4f:
                    58:2f:8d:f7:3b:c5:85:e5:33:49:70:b8:30:1f:fd:
                    8f:87:1e:2c:6d:7b:f3:7e:89:91:9c:6c:3b:02:8f:
                    a0:e7:16:62:07:b2:a5:99:94:ac:e7:69:b3:26:4f:
                    81:29:91:f0:1e:81:3a:71:b4:9d:7d:8f:25:35:6b:
                    e5:62:14:7b:e2:e4:4d:e1:ae:d6:0e:55:e0:6d:69:
                    c9:ba:0a:17:c3:2b:6e:1f:f0:ce:e8:b2:d3:46:43:
                    63:d1:ab:87:46:63:37:44:90:75:33:56:c2:68:dd:
                    21:bd:58:7c:91:d8:5b:51:0b:80:a7:d6:44:9b:51:
                    d6:7b:e5:69:aa:11:bf:97:40:ca:c8:6e:77:1d:18:
                    58:9c:d3:51:ce:70:0e:77:4e:99:80:bc:eb:88:18:
                    a5:3f:7a:24:06:d3:62:3a:be:b8:e1:fe:c6:5b:49:
                    73:07:78:9c:ad:5f:14:60:8c:1e:4a:f1:31:2c:dd:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:38:47:5D:91:4C:46:E2:CE:11:F6:92:62:DD:ED:A6:1F:48:87:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.16.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:6f:6e:18:51:66:a7:16:f2:a0:09:d0:7e:9f:74:b7:9f:09:
         77:57:89:a4:b2:ba:05:24:aa:84:de:89:a9:a2:b0:23:b4:b6:
         48:a9:9b:00:e5:86:53:89:c6:f4:fd:a1:db:6d:74:3c:66:89:
         c8:ce:d4:3b:d4:8c:53:89:1d:9c:d2:20:aa:fa:b8:f4:8a:b0:
         40:6e:7d:4e:94:29:63:2f:78:34:cb:df:90:c0:71:52:9b:e1:
         5e:f1:ed:43:33:e2:02:b0:c3:0d:2e:da:e1:e8:2f:82:12:3f:
         d7:41:29:65:19:78:e8:ca:b9:8e:71:9a:da:62:fd:a5:fd:08:
         bf:4e:c7:45:f5:8f:2b:61:78:0f:b4:5c:fe:a1:fc:09:fe:0d:
         9d:62:d9:5b:b4:35:ec:ca:61:37:b9:83:ca:c0:c2:c3:e7:ef:
         0e:25:ac:04:e0:3d:10:a5:96:af:79:4d:64:ba:5f:eb:50:31:
         bb:8e:56:2f:5d:ab:42:4e:0c:06:13:50:c4:79:8c:7e:b1:42:
         07:9b:48:a0:90:60:f4:d1:2c:c9:0b:c6:00:de:e8:03:aa:28:
         70:9d:d4:a0:8a:3a:70:4e:20:f9:8a:dc:96:80:02:eb:0e:d6:
         8f:d9:3a:32:9e:9f:40:8a:b8:5b:19:6e:bc:ca:25:25:61:88:
         5c:83:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:38 2024 by rpki-client on console-ams.rpki-client.org