Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/211f3321-560f-3a2b-8d66-b8dfee188a5b.roa
File:                     211f3321-560f-3a2b-8d66-b8dfee188a5b.roa (raw, json)
Hash identifier:          q9p0IBteGm6oRf8Ncbmy4TFuY9dLBo6QgD7ebeKVAA4=
Subject key identifier:   84:78:6C:AD:B4:36:38:AE:08:D9:23:40:FE:55:92:22:34:DC:5A:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3B3628BB361ABFFB7920
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/211f3321-560f-3a2b-8d66-b8dfee188a5b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3b:36:28:bb:36:1a:bf:fb:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=dccd8afd-de50-4806-9c16-5e192bf60173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:68:2d:b4:56:88:e9:a3:44:b3:b3:6b:80:
                    72:0d:c6:c3:c4:d9:15:64:42:d0:f8:6b:cf:f2:46:
                    e0:8f:42:7c:85:18:21:9c:e4:88:a1:4a:92:84:bd:
                    3a:79:10:4d:96:7e:d8:8d:88:08:95:b3:d7:65:13:
                    3d:0d:cc:88:ed:ce:5d:49:3a:fc:74:f6:0e:46:d7:
                    29:57:c6:55:a5:39:1a:0f:ac:a9:a4:d7:09:f6:94:
                    29:ed:e3:26:76:a7:01:11:bb:9b:59:98:96:9a:a4:
                    c6:88:e1:1c:a1:73:17:9c:a9:6b:4f:be:95:cf:f4:
                    12:9d:48:6a:03:8b:59:a2:a4:05:7a:19:73:4a:68:
                    3c:6f:46:12:ab:06:cc:4e:bf:14:f0:12:86:63:6e:
                    ad:69:05:12:1d:20:05:39:08:12:4d:60:e4:9b:31:
                    ce:a2:f4:d7:69:9f:ec:61:e8:35:d2:df:94:b0:55:
                    14:9f:2d:2a:eb:a9:a2:af:81:7e:ce:15:a6:f6:95:
                    7d:4d:5a:8e:83:e1:79:05:98:64:88:1f:dc:2a:1f:
                    e5:fd:35:d0:53:ba:1f:d2:d2:3f:80:bd:9d:b5:28:
                    51:00:f6:c0:98:5f:57:41:01:67:ce:38:84:88:b8:
                    b4:77:ed:8b:79:b1:2e:73:59:a4:ad:4c:c9:1e:56:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:78:6C:AD:B4:36:38:AE:08:D9:23:40:FE:55:92:22:34:DC:5A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/211f3321-560f-3a2b-8d66-b8dfee188a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e7:58:6a:cc:dc:69:d0:d7:71:19:9e:97:70:10:02:88:fd:
         42:bb:4a:61:9f:d3:c5:fd:96:37:5e:f4:53:2e:5e:11:a2:8b:
         41:09:a7:32:72:58:93:2f:de:24:a9:e5:68:ce:02:86:3b:3d:
         66:71:de:59:d4:de:2a:ff:ae:13:40:6d:cc:8d:e7:77:de:bd:
         78:13:aa:05:7f:2f:c4:e6:78:99:f5:96:ca:8e:1f:f3:90:3e:
         bb:4a:27:93:a1:86:97:c5:6e:fa:50:c8:fd:6d:dc:1e:89:b5:
         39:6c:fa:37:d6:09:36:d6:fc:08:c6:41:e6:a1:ac:d7:33:89:
         b1:98:1a:05:eb:73:6e:2f:47:9b:2f:0a:01:45:9c:05:12:08:
         be:ee:a1:6d:0b:13:79:fe:d1:64:fa:c1:cd:2c:f6:e0:e0:19:
         5f:d9:9d:aa:c3:6d:67:33:a9:d1:01:a0:48:be:1d:18:68:1d:
         99:83:34:6d:2a:d0:83:17:83:1e:07:41:62:34:11:10:10:d3:
         0d:36:06:03:ce:71:94:af:5a:ed:25:82:0a:3d:ec:17:ef:39:
         a0:7d:73:78:81:63:94:13:ef:8b:c8:1e:2f:bc:2d:5b:51:3d:
         8c:ad:05:a5:6d:c8:13:e2:fa:bc:b1:c8:3c:35:57:90:19:85:
         f4:8e:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:18 2024 by rpki-client on console-ams.rpki-client.org