Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2df3649d-8619-3594-acbb-3e761208f3ea.roa
File:                     2df3649d-8619-3594-acbb-3e761208f3ea.roa (raw, json)
Hash identifier:          24aigMNoB3z6cjDKyQOg1663qa/f3UvvTcH4iLU//WQ=
Subject key identifier:   ED:0B:2B:5E:F1:74:F9:4E:26:E3:71:E7:7E:BD:11:58:74:FD:49:6F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819C3DFCC3B2565BE80900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2df3649d-8619-3594-acbb-3e761208f3ea.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:9c:3d:fc:c3:b2:56:5b:e8:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6d05895d-e38e-4e84-9f4b-47ec6eecf73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:1d:fb:a9:8a:a6:b1:a7:3b:39:65:cd:1a:
                    46:d0:24:d0:36:32:db:2c:1e:c3:40:5f:7b:18:c7:
                    68:70:52:09:40:4f:50:11:94:61:cf:5c:84:81:2b:
                    78:df:d9:a9:f8:59:9e:b0:8b:ec:0c:fd:22:97:9c:
                    da:15:d0:34:9a:dd:f0:8b:35:46:7c:c8:b5:cc:9e:
                    cc:e8:ca:d6:9f:90:dd:d3:72:57:d9:32:72:a7:34:
                    a9:2c:8b:67:d3:2c:cc:43:17:91:cc:18:90:a4:5d:
                    ec:01:af:83:e0:5d:7f:65:bc:9f:6f:68:16:42:11:
                    80:51:0d:6c:b9:a2:fb:c2:67:74:a1:e0:02:48:b2:
                    11:b1:b4:d6:d4:ab:8f:47:40:91:4a:b6:f1:30:16:
                    fb:ab:27:67:02:aa:ee:54:9f:33:bc:c8:7c:6f:59:
                    37:a1:5d:57:00:ef:ae:e7:d4:5f:f4:35:b8:74:5e:
                    69:35:a2:81:54:8d:4c:c1:58:d6:ad:59:dd:77:77:
                    1c:ce:96:f2:e2:0b:8d:cc:40:d2:47:98:43:d3:8d:
                    dd:6a:1e:0d:5f:3d:85:0d:4c:d5:60:3e:e8:64:19:
                    b6:27:1e:9d:74:b4:77:05:e9:0e:43:d7:e8:24:28:
                    83:52:3d:5b:66:16:76:bc:4d:c6:f7:be:2d:c2:0f:
                    90:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:2B:5E:F1:74:F9:4E:26:E3:71:E7:7E:BD:11:58:74:FD:49:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2df3649d-8619-3594-acbb-3e761208f3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:9b:2c:66:80:38:b1:4e:6b:ee:a9:85:2e:37:51:23:87:
         c8:03:ae:b5:c8:83:18:0f:cf:b6:fe:7b:42:fb:27:ad:d7:3c:
         22:51:c8:a9:e3:5e:43:c8:7f:70:9c:94:1f:e6:df:ff:ac:81:
         17:2f:c9:09:68:e8:42:be:57:25:21:10:8a:6c:32:dc:26:06:
         27:36:2c:90:34:6e:30:12:6e:71:fa:9c:df:71:d4:4a:31:26:
         fa:67:ae:b8:9c:24:4f:d0:d3:76:44:d4:50:77:13:7f:07:ac:
         f4:72:af:25:e8:1c:31:05:cd:df:09:ef:2a:40:56:ef:e8:cb:
         b9:47:00:7f:f2:72:72:f9:45:1e:c0:7c:28:80:4f:3e:15:b1:
         be:d9:87:58:e4:ec:bc:c1:9f:07:f4:fd:db:9d:5d:a1:37:93:
         b9:ae:4f:19:d6:11:3d:62:a7:c8:bd:cc:7e:32:2f:77:c7:03:
         01:9e:31:3e:d0:19:66:b5:e8:dd:30:c9:02:c2:e4:4a:82:31:
         74:c9:ab:79:72:e6:48:8c:c3:1b:94:70:f5:7d:02:8f:36:4d:
         98:2c:9e:ef:2a:ef:1d:1f:72:a6:ed:d3:e0:23:85:b3:6c:1e:
         e3:5b:68:48:8d:d7:de:a5:d5:d2:0e:ec:ec:7a:93:c4:c1:78:
         f7:38:62:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:39 2025 by rpki-client