Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa
File:                     a6cb1347-1871-37e3-b974-20f869f40c52.roa (raw, json)
Hash identifier:          ucKKuAfGBZCHgDvXqRVVXeL5p8HVL7s6MoLZ9wL+EAk=
Subject key identifier:   51:84:0E:8D:51:1C:10:B5:FC:49:6A:4F:40:4E:B2:1A:6E:7C:E0:1E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E44DF69C93A4FF3184E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:44:df:69:c9:3a:4f:f3:18:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9059efc9-2483-4895-826d-941a0b5bb4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:bc:94:d7:a2:79:e8:e2:36:57:ad:28:8b:
                    54:0a:a7:21:99:fe:9f:56:0c:8b:33:39:a5:2b:08:
                    3e:3f:cc:f5:92:c1:34:40:b6:cf:b4:b8:a8:11:97:
                    79:48:39:f4:b4:74:80:c3:2e:84:ce:f0:45:2e:c2:
                    65:fa:69:14:3c:1a:66:e0:ad:8f:0a:d5:44:4d:c7:
                    18:28:8f:c1:ee:5e:9a:f6:49:7a:bb:d6:1f:bd:fc:
                    4f:11:55:ae:3e:19:4c:3b:a2:c9:b0:dd:60:4f:c8:
                    99:cc:55:0d:24:fb:e0:b0:bd:6d:1e:22:00:f4:ba:
                    37:01:de:91:5a:ca:16:a7:28:c2:14:3f:8b:d3:b7:
                    b7:19:6e:e0:f9:b1:b6:e2:78:56:92:08:06:a4:a3:
                    5a:25:4e:35:ec:ad:2c:fd:fe:b0:a7:d3:81:00:d7:
                    bc:bc:3b:e5:ea:03:b1:ff:3e:7c:ea:4c:88:b4:15:
                    6c:6f:79:72:42:a9:3a:6d:39:1e:50:8d:49:50:25:
                    36:0f:bd:95:fb:36:59:36:89:25:a6:06:07:ff:43:
                    0e:e0:af:ec:f7:5f:ee:ee:93:41:6e:bf:2a:00:d6:
                    e1:67:8d:55:83:06:e9:dd:37:72:d9:04:ff:e0:d3:
                    2c:58:89:e3:2c:3c:32:5e:db:22:b2:ac:65:cc:84:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:0E:8D:51:1C:10:B5:FC:49:6A:4F:40:4E:B2:1A:6E:7C:E0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:b1:e0:df:e3:8e:03:99:1e:e2:b3:1c:93:0a:39:65:0c:
         44:02:50:65:ba:65:96:e8:32:02:26:c2:30:42:ea:9d:b1:0d:
         a9:b9:d6:76:a2:58:c9:2f:6f:c0:9a:60:05:21:cb:b2:c4:eb:
         20:cb:18:57:f2:e0:89:91:96:ad:da:06:42:7b:6b:6d:da:2a:
         4d:2b:c8:18:3e:ed:c0:be:e3:ff:92:21:6d:b8:00:15:59:44:
         48:fe:3f:4f:fb:5a:93:dd:1e:fe:36:07:ab:91:c6:62:68:12:
         db:22:4f:f9:d1:d9:23:51:62:1b:17:72:a5:c2:39:2c:6a:5f:
         ae:22:6c:3b:55:c0:4c:ac:ad:e6:26:21:51:e9:db:5a:63:6c:
         a8:bd:16:10:66:dc:9f:4d:b7:e2:a2:3e:6c:ac:07:e6:61:30:
         63:ac:a1:90:c1:6e:a7:ed:2a:12:ca:8a:e1:22:3c:c1:3e:2f:
         c9:d1:94:29:ad:1a:83:a6:a3:17:27:6a:44:12:e2:5b:9c:15:
         01:dd:28:71:3c:f3:77:0a:7f:40:14:af:ac:8c:87:24:97:33:
         97:9b:b2:67:99:c5:2f:c0:25:5d:1d:f9:8f:e0:cf:cd:8e:7c:
         0b:36:f3:8c:0e:c2:55:8e:b1:16:0b:9c:02:cb:be:75:5a:4b:
         d1:56:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 17:52:06 2024 by rpki-client on console-fra.rpki-client.org