Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20230742-cfb0-3758-8abb-461d27d24c04.roa
File:                     20230742-cfb0-3758-8abb-461d27d24c04.roa (raw, json)
Hash identifier:          QHc3uz1ALJ4iujY1MR3yyu9XWfJizY80I0OZIo4GJmw=
Subject key identifier:   D1:97:45:AC:67:6D:BD:5F:19:11:2D:9F:B9:A9:75:52:D4:03:79:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3ED80DE5B183EAE445C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20230742-cfb0-3758-8abb-461d27d24c04.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3e:d8:0d:e5:b1:83:ea:e4:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=43d4d524-2f07-4335-877b-6c8a4f63a253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:f1:b1:da:aa:14:a2:e0:46:c8:3f:b3:3e:
                    10:09:1e:47:5f:e0:90:57:90:ec:9d:80:c4:96:32:
                    f9:a9:10:dd:1d:97:59:7f:10:b9:45:3d:d9:c4:d4:
                    12:dc:47:52:f5:f0:e0:65:ee:bd:b6:2b:08:36:2c:
                    ba:0e:65:2b:38:f3:38:55:ed:cb:33:50:f1:5b:1b:
                    27:50:45:46:5f:ce:91:e0:57:0e:8b:e2:86:11:94:
                    ad:c4:d5:c7:45:cb:70:a2:17:a7:88:60:8a:c4:04:
                    f4:7f:0b:9e:50:cc:ab:b2:68:27:b3:2c:c0:d0:21:
                    82:6d:02:7e:18:bd:59:c1:fb:8f:51:11:dc:4f:95:
                    16:78:df:42:34:22:83:be:48:f0:12:95:e2:5a:8c:
                    ae:0f:8a:93:e2:1b:a5:1f:39:15:09:be:02:86:71:
                    9a:d2:7b:60:d2:86:82:73:16:84:92:db:14:e7:5a:
                    0a:33:9a:7c:f9:bb:42:0b:98:04:e8:e7:21:8e:35:
                    eb:3f:cc:9b:84:83:68:7a:11:28:05:1c:f4:f1:7a:
                    1e:82:1e:60:01:cd:74:bd:d4:10:a4:9e:7e:29:a2:
                    8a:ac:61:a1:8c:ae:af:6f:e5:4f:8a:8d:d0:3d:57:
                    da:3d:8f:cd:0a:f9:14:90:bb:41:ff:ff:1b:5a:17:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:97:45:AC:67:6D:BD:5F:19:11:2D:9F:B9:A9:75:52:D4:03:79:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20230742-cfb0-3758-8abb-461d27d24c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:26:98:c1:57:30:5a:7d:f6:e1:52:98:f3:10:32:42:e2:c9:
         91:c9:e4:46:3b:a7:28:1d:0e:87:c8:06:08:30:3a:f8:b4:6a:
         6a:9b:83:bb:81:2e:10:95:3a:6b:af:14:21:1a:52:43:a8:4b:
         77:e1:3d:da:d8:5e:df:e6:63:08:66:2d:aa:11:2f:2b:9b:ed:
         09:62:ac:3e:5a:82:68:5b:3f:d9:ec:ee:e3:c5:a9:74:af:ed:
         68:04:84:3c:a5:12:a5:5e:9a:f3:de:25:fb:b4:33:13:59:4c:
         5f:fa:29:2a:61:39:02:8f:9c:48:29:d0:09:a9:dc:e0:33:bc:
         17:2b:5b:c5:71:ea:5a:75:37:88:7e:41:9c:e3:81:60:9d:1d:
         ff:b3:b0:ed:36:f3:1a:e2:09:d1:b0:d3:ae:18:56:e4:f5:c6:
         6e:b2:8c:46:74:97:0f:ef:1f:43:ad:43:e5:a8:00:27:86:22:
         ac:9f:39:3f:70:c8:30:21:c7:3d:b5:f0:fd:50:72:10:2e:37:
         b4:cc:ff:99:5f:f5:3f:79:46:90:8c:b5:bf:67:f6:7a:42:17:
         6f:1a:73:a1:de:f8:9a:f4:5b:fb:1c:52:c3:b2:c8:53:bb:ac:
         aa:89:ec:fc:f3:3d:6c:3c:e1:7e:e3:ae:7d:52:9e:87:9b:4c:
         59:b1:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:36 2024 by rpki-client on console-ams.rpki-client.org