Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa
File:                     1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa (raw, json)
Hash identifier:          CL6Md6/1iDzVCVNnBZn4szbXKaH00ZpURCbBTuBnpSQ=
Subject key identifier:   73:3C:5C:06:3C:63:08:47:7B:C3:EA:CF:CF:8B:9F:6A:8B:E4:84:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B10DB45EA5255C951DF70
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:10:db:45:ea:52:55:c9:51:df:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cf25c640-5833-447b-be87-74c19a142eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:32:e9:b7:eb:03:00:a5:86:4b:da:24:2f:
                    7c:6f:7b:e9:b5:3c:4b:b8:2e:ed:13:c7:d4:ea:11:
                    20:e7:f4:38:4a:2f:d7:75:77:61:d8:de:16:c2:77:
                    38:55:17:2e:e9:23:d8:98:af:22:d3:ac:db:c0:9b:
                    d5:b8:3b:59:1e:ac:b2:67:98:1f:9e:bc:45:d2:af:
                    40:ab:3c:48:e9:e0:c8:e5:ee:88:46:8b:a9:82:b3:
                    3b:f1:25:98:1f:80:d6:cf:aa:96:fb:b6:e9:36:85:
                    56:6d:88:ac:66:52:72:86:7a:3f:83:14:4f:3e:35:
                    b6:cb:66:d6:3b:b0:6d:93:b7:a7:c4:54:5e:0e:63:
                    73:11:7b:df:fe:a6:31:87:9c:43:c7:83:9c:0f:4b:
                    5a:1f:b0:7e:db:79:7d:64:61:6f:48:e6:9b:cc:ef:
                    64:a7:32:23:23:cb:fe:c5:54:d0:cd:3a:16:72:be:
                    e4:45:7b:f3:91:57:52:4b:dc:ae:03:0c:40:e0:15:
                    c5:40:3b:02:7b:63:37:0e:2c:0f:76:44:9c:52:06:
                    eb:64:f3:5a:8c:68:a3:df:fa:5c:b4:bb:1c:88:75:
                    7c:f3:64:86:c4:b5:45:db:ee:de:dc:02:d2:bb:ce:
                    fc:2e:16:3a:e6:3d:8b:ee:64:97:d0:9b:bc:c9:74:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:5C:06:3C:63:08:47:7B:C3:EA:CF:CF:8B:9F:6A:8B:E4:84:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:21:c9:ca:a0:3e:63:43:a5:f7:59:85:d6:a2:06:17:c9:ea:
         ac:c5:d4:93:5d:c2:e2:56:29:46:d4:cc:c3:df:c6:57:e5:fc:
         72:71:25:5c:46:b9:f5:bb:38:2c:a2:4a:31:35:97:5c:1f:93:
         ed:e2:12:f8:cb:3f:22:5f:87:99:a9:10:e6:85:4b:c4:7b:24:
         9a:d2:c1:b3:a7:0c:7d:4c:9a:ed:66:90:ca:37:32:4a:4b:20:
         be:f7:00:3e:19:df:58:45:a2:23:09:8d:fd:92:28:74:24:33:
         7e:f7:87:80:77:3b:bf:a5:ce:e1:37:47:84:6d:d4:96:e5:60:
         ae:0c:81:53:7f:2e:ab:fb:c5:14:1a:66:31:80:44:5b:5b:56:
         cc:f6:02:32:cb:4c:37:d9:3d:cb:89:00:e5:05:ee:8a:b8:32:
         d7:f2:d5:36:1e:c5:f0:6b:4b:79:26:90:93:68:6c:d2:00:76:
         ee:b9:0d:99:b7:78:4f:e5:db:ac:a5:86:f2:41:a2:9e:c1:19:
         05:46:1d:74:ba:4b:20:a7:d2:f1:ca:06:e4:fa:14:8f:1c:a7:
         aa:2c:70:4f:7a:6d:34:ba:ca:22:2b:a7:3b:45:3b:d4:72:a9:
         15:ce:ee:1a:a8:92:30:ee:5c:fa:bc:08:a1:e4:f8:64:75:77:
         fc:02:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:06 2024 by rpki-client on console-fra.rpki-client.org