Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa
File:                     c918711b-7341-3714-b9f1-a993bd3d5a62.roa (raw, json)
Hash identifier:          3xhoi2841tFXCUfEBf5haCcJofnSD4aGLobQcgZTcak=
Subject key identifier:   43:DE:0D:20:1A:C6:DF:5D:01:C9:CF:EE:EB:F6:C9:FD:C0:14:D5:EA
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F43285844F0354E18AF65A133D242C000
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     19905
IP address blocks:        70.35.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:4e:18:af:65:a1:33:d2:42:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=b77b3330-7b19-4868-bc32-2b27dce2665e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:b0:02:1b:8e:03:ac:54:b5:16:61:27:7f:
                    bd:f0:94:ff:5f:11:d0:6e:f2:93:60:7c:3e:78:c5:
                    a4:05:7d:b8:fb:e9:61:6b:73:c3:4e:35:a3:fb:f7:
                    c8:63:a3:b7:7f:c1:c3:62:a1:06:0e:a4:2a:a9:ba:
                    5c:68:a3:f3:0b:9e:24:c9:ab:e6:2f:19:91:fe:57:
                    2d:76:15:a2:72:83:48:52:fb:b7:fd:f0:86:e8:22:
                    31:d2:c9:45:6c:9f:c0:ba:68:90:a3:08:b1:84:c3:
                    17:6f:fa:ba:a3:e7:5a:6e:dd:ce:1c:07:a6:66:9c:
                    55:06:a9:2b:51:09:8d:e8:8a:1c:b1:0c:c1:be:ba:
                    02:63:31:6f:a6:18:36:d6:60:11:bc:a0:21:30:bf:
                    c3:93:69:62:e7:66:f7:5e:86:01:67:63:14:ec:6b:
                    a0:f9:51:1c:d7:07:2f:43:71:f3:29:8d:f6:eb:04:
                    7f:80:5d:7a:0d:dd:89:e7:32:19:b5:5c:fb:65:de:
                    89:39:b0:c4:60:21:61:b1:d0:eb:e8:3e:8b:56:d2:
                    6e:76:b6:65:05:48:6a:f9:33:c9:39:44:53:0e:08:
                    45:13:8c:2e:6c:d2:2a:b6:41:c2:21:37:e2:b1:58:
                    d0:bf:91:57:a7:db:e6:76:0c:f1:a4:50:c1:7e:75:
                    12:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DE:0D:20:1A:C6:DF:5D:01:C9:CF:EE:EB:F6:C9:FD:C0:14:D5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:90:bd:02:50:bd:6e:46:34:5b:5b:7d:52:9d:3c:9e:c9:02:
         5c:e1:de:a1:67:86:3c:db:4a:31:42:44:d0:a9:1e:1f:d0:07:
         0c:9a:64:4c:93:e7:0c:86:0c:77:de:28:27:3c:ca:95:24:35:
         e9:d1:7d:93:97:2c:2e:62:a7:8f:97:53:2e:70:54:e6:ef:71:
         32:fb:0c:3e:68:51:66:c8:c0:a0:45:c9:4d:da:72:a7:38:ba:
         67:db:60:ad:e8:46:6b:62:b3:a6:27:f2:7d:5c:f1:df:c1:86:
         96:11:9e:dd:ad:49:6e:13:1a:77:f9:2a:f4:f1:39:9e:05:e9:
         b0:66:eb:ad:f1:71:2a:40:e6:3f:70:ba:eb:91:5b:a3:82:41:
         2a:b9:5f:33:f7:b6:f0:cb:6b:e5:a2:ac:be:af:b6:fe:cd:16:
         f7:f4:4c:c8:8c:d7:ec:5e:8d:3a:35:05:fc:56:bd:a5:2f:55:
         87:c6:16:1f:a1:58:1a:79:31:3f:a5:b6:78:83:98:38:f8:82:
         01:f4:c2:fe:32:1a:61:e5:76:60:90:c5:27:57:f5:56:e5:c8:
         7a:9c:1d:02:ce:e5:58:ee:a7:16:54:7d:38:e5:d7:6b:9a:54:
         a9:70:b3:e8:2c:52:ca:f7:b2:d1:9e:e6:d1:c5:a1:be:a6:93:
         9b:09:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:55:47 2024 by rpki-client on console-fra.rpki-client.org