Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa
File:                     45eb4551-7331-33dd-815f-95a7e670d0a9.roa (raw, json)
Hash identifier:          ugro52AgrM8hCj3VAZX7Kcs3flnhw06Veq3QEQ5Uups=
Subject key identifier:   0F:08:84:15:C7:1E:E9:84:E3:CC:D3:0C:07:05:5F:B2:89:B0:BB:CB
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F432858457A48777F85A1BC57D6736600
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        208.70.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:77:7f:85:a1:bc:57:d6:73:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=c2b2039d-ec52-4f2f-a05a-c8847a4ce427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:c6:8d:04:de:44:4c:fa:51:7b:07:f6:f7:
                    90:01:1d:19:4b:17:b0:59:d6:19:e4:68:e5:e0:2f:
                    14:57:78:95:03:43:8d:3a:7f:b8:2d:b1:5f:c6:7d:
                    c1:cd:fd:33:82:be:50:da:80:f8:3d:fb:99:5a:e6:
                    14:5b:2d:c1:44:47:ec:e6:40:42:58:ee:fc:ce:d3:
                    e2:b3:10:c1:db:6d:60:69:70:c1:5d:7c:4b:08:4d:
                    2a:32:7f:1c:65:97:58:97:c2:b6:5c:f9:c7:09:38:
                    95:f4:39:3b:81:43:73:d3:d1:88:cd:0a:cd:9d:35:
                    a6:3b:65:40:01:ff:f9:18:b6:fb:86:a0:23:1d:b7:
                    82:06:e6:e7:e7:69:aa:ca:f1:a9:76:5b:6b:f3:c1:
                    2a:db:d7:30:d3:17:1a:aa:f7:c6:d3:cb:36:6b:88:
                    76:15:db:91:2a:be:7b:30:9d:47:1f:2e:7d:bd:56:
                    8b:7b:28:2e:73:87:24:05:3c:63:34:79:9d:d7:5d:
                    64:07:a4:96:df:a2:e9:80:84:70:b3:0d:28:d4:38:
                    d7:ce:59:56:61:84:20:43:2c:40:17:e3:9d:84:18:
                    d5:d5:a2:71:db:8f:a6:6a:63:b6:ee:d2:5d:69:9a:
                    99:97:00:71:4e:cc:05:64:06:bd:12:28:d9:9f:a0:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:08:84:15:C7:1E:E9:84:E3:CC:D3:0C:07:05:5F:B2:89:B0:BB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:47:ff:d1:39:b7:a3:45:96:24:ce:54:72:c1:a8:e8:3d:fa:
         49:d8:a3:e0:eb:35:4c:f2:e3:70:1e:cb:c5:1a:0d:74:88:ab:
         bd:d6:13:5d:1e:1a:e8:37:30:46:a3:92:0c:50:50:13:ba:d3:
         19:c7:64:54:8f:59:d3:83:fa:b7:9a:a2:f7:15:a1:75:d6:ea:
         6f:8a:dc:08:47:27:94:59:e6:4e:fb:4d:64:3e:4c:d4:fc:49:
         65:c3:7d:43:dd:a5:cc:a8:81:84:0d:be:e9:96:bc:9d:a7:83:
         93:5e:4f:f2:09:de:0e:31:09:17:26:75:a5:20:93:1d:d4:ec:
         45:69:0b:53:08:47:32:3a:c4:57:ea:88:ec:09:bc:7e:f8:81:
         3f:03:a2:d0:09:9a:94:8a:6e:c5:23:95:fa:20:1c:08:7a:9b:
         f1:18:68:a4:44:22:2c:25:79:7c:3c:2b:f4:3a:8c:24:2d:16:
         0f:e2:4c:04:56:cb:3c:b9:ac:11:9c:24:5f:fe:5f:6b:91:9b:
         0d:f1:e3:7a:da:33:65:8d:7e:3e:33:4d:72:b2:0a:3e:6a:a4:
         ef:83:88:aa:94:7d:a9:6d:44:f6:11:0d:9f:8c:60:a0:a2:de:
         15:3e:8a:2c:0f:15:9b:6c:7b:32:ba:d8:89:dc:ab:65:ce:48:
         11:7a:07:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:29:02 2024 by rpki-client on console-fra.rpki-client.org