Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08d14efb-9f20-3316-88ef-5665a877db97.roa
File:                     08d14efb-9f20-3316-88ef-5665a877db97.roa (raw, json)
Hash identifier:          dKz/SqibB4Vg5c2NJX4H2AEyPXQVPyq5Q4jRXAuGlVw=
Subject key identifier:   2E:17:F1:17:D5:6C:1C:E3:BA:46:A0:07:21:4B:FF:EF:84:97:A8:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF8CA4A1C99103C0C1300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08d14efb-9f20-3316-88ef-5665a877db97.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f8:ca:4a:1c:99:10:3c:0c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=87235124-12e4-4998-b6a0-7b0df2bd956d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:92:a9:80:00:96:8e:49:34:70:f5:d1:aa:
                    cc:53:cd:f0:2f:04:84:92:f6:f4:8a:dc:16:17:6d:
                    d5:b6:05:65:2a:61:f2:f7:0f:06:12:af:95:bb:5b:
                    b8:ca:14:2c:7c:ed:b1:45:4c:0c:98:61:e9:35:87:
                    57:fd:c3:74:b9:e4:69:40:ea:5b:f6:57:ae:25:52:
                    52:c6:fa:fd:2a:c2:2f:61:05:77:f2:53:63:86:de:
                    a8:b9:f9:ba:5b:2b:4e:16:6f:ee:e1:d5:25:3d:22:
                    6d:ec:64:6c:cc:50:4a:e3:2e:b2:9b:c4:8a:ec:2e:
                    98:27:f5:40:ed:b2:9c:6a:b7:eb:36:c4:36:b3:95:
                    ae:49:c5:03:6a:fe:75:fd:0e:06:1e:7c:db:1d:25:
                    6f:4f:ca:6a:b7:47:ab:29:3b:31:7c:6c:3b:ca:42:
                    31:7e:db:59:3d:85:d9:d2:47:37:2b:3f:3f:cf:a5:
                    17:0c:f7:b7:ed:27:19:67:f9:31:dc:8f:51:64:da:
                    bd:54:11:42:73:a3:28:7e:a4:2b:87:4e:22:a2:4a:
                    9a:9a:70:00:14:ba:b7:cb:13:84:4e:f3:1a:0f:a6:
                    0a:37:d8:36:50:f9:36:9d:86:87:bd:0a:a9:3a:01:
                    45:66:5d:d1:47:72:2c:1e:0d:06:a5:9c:e9:29:f3:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:F1:17:D5:6C:1C:E3:BA:46:A0:07:21:4B:FF:EF:84:97:A8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08d14efb-9f20-3316-88ef-5665a877db97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:66:1f:ca:e0:5d:6d:83:85:93:4b:04:55:87:0d:0e:a8:
         c1:fd:eb:b9:f4:f0:19:2c:70:ce:00:0b:6d:b0:47:ff:d9:21:
         81:de:fc:81:1c:02:21:56:e1:5b:e4:7b:3b:99:99:cc:9c:fe:
         6d:eb:1a:46:20:60:f0:ea:33:20:79:e8:61:37:81:75:83:1a:
         07:11:b2:32:5a:21:e6:30:00:17:78:46:d6:ce:4d:a0:82:f8:
         b6:b0:83:92:9e:3d:8c:69:98:9e:9c:dd:d1:4b:dd:9c:23:8f:
         d6:00:03:95:fd:c4:99:15:50:de:f2:5d:2a:65:0c:6a:bc:26:
         07:e1:3e:91:1d:02:71:75:ce:8e:26:e7:fe:c7:2d:a0:eb:b4:
         ed:60:af:70:27:e0:e4:ba:38:e2:28:91:aa:04:08:5a:da:e5:
         37:9e:a5:2b:a4:61:4b:6d:20:1b:8e:12:cd:e8:9c:b2:8d:71:
         0c:5f:4e:29:f2:03:3c:cb:3a:e9:15:17:1e:22:1f:71:5b:cc:
         5a:2e:2d:45:6c:dc:d7:50:df:98:03:ec:6b:ee:a0:f8:69:d3:
         1f:35:80:07:a0:de:48:d5:a0:2a:d1:2f:25:a6:2a:90:f1:3e:
         b2:84:ea:8a:2c:c4:90:24:95:2b:cc:43:3f:b6:55:bc:2f:59:
         51:e8:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:28 2024 by rpki-client on console-ams.rpki-client.org