Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26a8ea07-6f1a-38d4-b695-49b172ea6f5d.roa
File:                     26a8ea07-6f1a-38d4-b695-49b172ea6f5d.roa (raw, json)
Hash identifier:          3q1D7PJM8Rc4ISYwCF3RTNobXUiQp2yPk+dIPcKLZr0=
Subject key identifier:   72:08:A7:08:B2:7F:46:AA:4D:06:DC:9F:3E:86:CD:50:E9:8D:40:AC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0CB5E3FBFFB178F85C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26a8ea07-6f1a-38d4-b695-49b172ea6f5d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:0c:b5:e3:fb:ff:b1:78:f8:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b53a91ed-dcf4-4994-91b8-dc714c9b9adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:66:16:02:12:6d:64:9e:08:17:86:eb:98:
                    8e:fa:3e:3d:a3:72:cd:3e:62:d6:5b:9f:ea:1c:93:
                    94:5f:44:a5:68:21:79:2b:11:0f:8f:04:e8:b6:58:
                    22:15:e1:6b:c2:ac:a5:b0:f7:88:0b:88:48:31:e2:
                    cb:5a:79:e5:42:e0:6e:f6:14:f7:58:bc:9e:9c:a6:
                    a2:d1:a2:4f:8d:24:f9:3d:e2:05:67:24:4e:c4:52:
                    0d:5d:7e:42:18:ae:ed:b1:ff:72:71:fb:50:43:cc:
                    2c:ff:82:be:7a:f1:7c:36:80:1f:e5:b3:c8:cc:18:
                    23:4c:c2:33:b0:89:5e:00:7d:cb:9b:44:7e:04:97:
                    cf:a0:da:f4:6b:81:df:3b:f8:96:f8:5e:da:af:ff:
                    3a:fb:79:d1:fa:2b:f4:3e:a4:a4:d9:ba:87:9b:6e:
                    a4:b8:a4:a5:70:64:1f:6c:a5:70:d2:09:ca:7d:fa:
                    e6:ed:85:2b:e0:50:9e:3f:af:dd:15:49:e8:e4:7b:
                    a2:08:7b:90:00:2d:20:65:8b:55:54:3a:fc:fc:bc:
                    d5:28:57:62:f9:3a:81:29:a0:d2:46:c4:51:aa:97:
                    ea:7a:0d:b2:0c:b2:11:90:64:62:52:2d:ab:07:ff:
                    49:cf:a1:0a:20:53:0d:fe:20:6e:be:ef:fc:e8:30:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:08:A7:08:B2:7F:46:AA:4D:06:DC:9F:3E:86:CD:50:E9:8D:40:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26a8ea07-6f1a-38d4-b695-49b172ea6f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:68:0b:e5:a4:68:f0:e5:01:29:c6:ba:db:5f:e3:50:73:
         1c:19:48:43:7e:2e:09:67:b8:47:6c:4e:89:c1:6b:c4:18:0b:
         20:3f:91:01:81:9b:8a:d6:ab:74:20:9d:cd:cc:af:8c:c3:40:
         84:a1:42:4e:d5:b5:b5:ff:e8:8d:9f:4e:65:a8:4b:71:3f:42:
         56:0b:fc:f7:b9:8e:a4:18:74:06:e2:11:10:a4:6e:1f:86:05:
         36:ff:8d:d9:0b:0a:a5:ce:7a:a8:dd:ce:c8:8c:38:b5:08:da:
         2c:1a:cf:ab:5d:28:2f:c6:d3:bc:9a:b3:41:be:38:32:3e:2e:
         a1:29:21:33:e3:67:9c:7e:b3:44:28:c2:f0:9b:7a:b9:3a:7c:
         4d:a1:fd:84:40:7d:ad:26:8d:28:62:e3:04:e8:26:28:33:3e:
         23:37:6e:0c:a6:6b:cb:2d:65:b4:0d:bb:d9:9b:0d:06:15:42:
         85:c0:16:3b:ef:ca:9e:98:15:f4:f8:f8:0b:26:60:28:83:00:
         b4:99:ed:e0:f8:45:49:cf:f9:d5:82:f7:de:14:f0:73:db:21:
         4a:b0:fc:b2:bb:79:fa:29:39:de:d3:89:42:0b:cc:8b:dc:77:
         cf:c4:15:4e:f5:1e:83:d4:34:9b:f8:aa:92:1b:d1:97:bb:30:
         79:53:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:20 2024 by rpki-client on console-ams.rpki-client.org