Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa
File:                     284ff20b-9b60-357c-9299-01e652bbeb85.roa (raw, json)
Hash identifier:          CDjbwvLmMeqYi9hj2EkBj1GHaApWLiRYqduUVb33i1w=
Subject key identifier:   F2:80:C5:07:1E:59:6E:36:79:A6:77:BD:CA:18:4B:E9:B9:BB:79:74
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A72FC090850821B2E5200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:72:fc:09:08:50:82:1b:2e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d80fdc31-a748-4100-85b5-07f6a82cec28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:38:55:57:f3:90:a5:04:59:94:08:98:2c:
                    54:da:04:58:4f:d8:61:15:84:34:71:8c:f5:2b:21:
                    ac:94:2f:56:9a:79:cf:77:25:e3:de:5f:cd:93:7b:
                    1c:4f:26:fb:1f:4e:bd:6e:8a:f6:93:45:e1:eb:4e:
                    a2:0d:66:cf:a3:a2:81:65:2e:d7:23:07:9c:9f:db:
                    d8:60:61:b8:54:0f:02:44:51:68:0d:0f:57:79:17:
                    c3:28:cf:83:e7:28:c3:48:28:07:e7:8c:37:32:d4:
                    12:2e:81:7d:5f:27:91:42:0b:47:a6:af:f5:71:f7:
                    9f:e1:ea:ab:60:92:a4:93:0e:1f:5b:b5:50:7f:b9:
                    98:5f:eb:0f:9a:68:9a:7b:67:91:e2:9f:0f:e7:56:
                    08:7a:69:7c:54:e4:b3:cd:4e:49:1e:80:d8:08:c0:
                    75:24:d5:ad:4d:c3:6d:0c:61:d1:7b:65:0f:30:f5:
                    b6:c0:2e:b7:7d:63:2a:84:b8:b8:77:94:2d:a3:01:
                    66:7f:60:1d:76:78:27:52:e3:63:2b:32:0a:40:ef:
                    e8:b5:ba:68:c8:f9:07:95:c9:98:74:04:dc:18:65:
                    54:52:01:a5:4c:04:00:8f:40:3d:04:8f:e8:cf:77:
                    a1:bf:d0:05:c9:5c:a4:85:05:3f:19:4d:fd:36:ab:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:C5:07:1E:59:6E:36:79:A6:77:BD:CA:18:4B:E9:B9:BB:79:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d2:8b:bf:7e:87:3f:70:d6:ce:da:ff:64:78:c2:52:43:36:
         73:8c:8a:72:93:bf:d1:38:4b:9e:68:b7:ac:61:65:2d:59:98:
         8e:d5:f0:39:b6:e0:26:d5:1d:d6:d6:95:43:ed:3c:00:e1:cb:
         91:a9:d4:6e:19:d0:63:10:14:4a:6f:c9:ea:9f:80:58:34:c4:
         28:c4:f3:51:db:77:b4:53:63:58:ed:e4:0d:0b:5e:80:6e:2d:
         de:54:2b:c5:3b:8a:2e:e2:48:a6:50:4b:33:2f:b2:e1:d3:0a:
         7c:69:31:e7:04:e7:3f:ff:e2:22:bc:f3:a4:8f:d0:bc:c9:e2:
         4b:14:57:f1:1c:c2:4a:59:17:98:87:15:7d:89:a8:93:18:ff:
         2b:c1:59:d3:00:b8:60:5e:d5:66:21:e0:f2:db:d1:6a:2f:cf:
         1a:1c:ca:b3:88:16:df:ec:67:da:c0:25:9f:75:8f:89:f5:b7:
         f4:ba:2d:26:0b:45:bb:a4:68:be:f1:b1:25:e0:7b:42:b2:bd:
         05:ee:a9:de:2a:11:0d:10:28:89:4f:f4:f6:24:eb:aa:21:82:
         77:51:0a:93:01:bf:c3:37:53:04:bb:ba:9e:eb:d5:ae:13:76:
         c5:c5:af:7a:9d:df:4b:d4:92:54:4e:7a:7c:3a:56:aa:2e:d9:
         73:a3:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:12 2024 by rpki-client on console-fra.rpki-client.org