Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2030f960-d302-3a5b-8a73-59d09381e291.roa
File:                     2030f960-d302-3a5b-8a73-59d09381e291.roa (raw, json)
Hash identifier:          6N1UP1FDcowphYxZaANN5SVv9fBKFFrh+A4Fs7ddgLs=
Subject key identifier:   CD:31:E3:35:1F:70:61:B9:B5:11:15:8A:AF:DD:DE:96:7D:84:40:95
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ABF48805352F894457F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2030f960-d302-3a5b-8a73-59d09381e291.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     40306
IP address blocks:        70.41.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:bf:48:80:53:52:f8:94:45:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=19a1d8d6-4bdb-4961-936c-043eab9a54a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:11:36:7e:a2:12:35:98:69:2a:a9:b0:70:
                    9d:77:4a:57:8d:e4:7d:95:5d:71:5d:12:03:06:0c:
                    10:01:55:d5:3a:df:37:bf:90:43:4b:f3:23:0d:0a:
                    9d:90:e7:be:09:1d:d4:fa:f4:33:61:8a:56:86:a2:
                    e5:22:e7:2f:35:17:4b:41:56:dd:e3:50:7e:82:9e:
                    a9:fc:94:d1:b7:77:1d:73:20:77:5b:b6:fe:1b:1a:
                    50:b4:f0:f3:e6:c3:fe:c9:c0:4e:82:01:5c:68:78:
                    28:f7:93:a4:94:87:e5:a8:59:3d:ad:00:ea:2b:68:
                    8d:b4:06:0a:72:e0:4e:dd:72:fc:6e:69:e7:df:0c:
                    de:10:fe:0a:46:04:f5:7f:77:19:49:0f:08:aa:a1:
                    20:28:7f:7c:eb:e4:b7:97:5b:64:bb:cf:06:6a:55:
                    d5:89:d2:d9:ac:18:1d:ae:2a:63:bb:ee:d3:a0:81:
                    1d:a6:c5:e8:c3:f6:ed:a1:76:f6:77:b1:ba:d7:20:
                    a7:42:ae:be:10:f0:bc:6c:f6:10:3e:1f:0e:eb:55:
                    58:38:15:dc:6e:73:19:c6:fe:d4:65:78:3e:bd:c1:
                    c0:73:83:89:a1:ae:f2:ab:d8:53:df:1f:1e:4e:fc:
                    b4:83:49:8e:3c:af:d3:18:e5:b3:98:28:7d:f8:82:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:31:E3:35:1F:70:61:B9:B5:11:15:8A:AF:DD:DE:96:7D:84:40:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2030f960-d302-3a5b-8a73-59d09381e291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:45:42:fb:e1:ef:6e:7d:9b:30:3d:a1:9c:d9:86:83:cf:
         48:27:a9:2e:c2:c0:55:da:50:2c:64:65:77:6a:11:2f:76:16:
         3a:02:31:70:6c:b8:04:fe:f1:9b:33:df:73:20:d5:ad:ab:b0:
         bb:dd:f3:31:f8:e6:af:bb:81:75:53:1a:a6:d7:d8:64:8d:a3:
         bf:29:22:24:f1:94:5c:01:e3:de:9c:26:65:c4:0d:17:d3:a4:
         36:86:2e:eb:27:f4:fc:46:e7:f7:70:42:3a:c4:66:e1:ee:ee:
         76:ba:d4:a2:50:d1:31:cf:ec:37:e3:a4:d3:9d:12:ef:25:d9:
         15:dd:3d:12:03:06:89:6b:c9:b6:e7:bc:05:85:20:29:ad:72:
         e9:e1:ab:80:9a:ac:15:19:1e:72:fe:b0:5c:9c:d4:50:33:50:
         4a:b7:5d:1a:8b:9a:23:45:af:3b:af:c5:4c:37:56:72:8b:d8:
         b2:a2:7f:39:db:57:b3:39:0d:33:04:68:10:82:8f:e7:dd:31:
         28:d0:fa:03:a1:62:2a:3b:b9:ac:d2:a5:73:50:c5:f4:47:b3:
         fe:16:2a:cb:5a:d0:ab:c6:6f:ce:59:c3:13:77:67:0e:f0:a7:
         e5:bd:5c:f8:3a:c5:a4:2b:eb:b8:50:0a:b6:c2:ba:c3:81:47:
         78:56:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:08 2024 by rpki-client on console-fra.rpki-client.org