Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa
File:                     2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa (raw, json)
Hash identifier:          5uezMYpOSMAOapLOz2m8WUmc39Q46yfK/Snn38zVMkI=
Subject key identifier:   2E:36:4F:64:CC:D7:03:C3:CA:E2:83:9A:EF:02:D9:AC:A7:1C:35:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ABFB22995FBDD39B326AE
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     40306
IP address blocks:        70.41.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:bf:b2:29:95:fb:dd:39:b3:26:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a8bf1e43-a8e9-4ea7-b79f-20f2331e680a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:a4:cd:e5:92:36:f9:1d:d5:70:47:6a:d3:
                    44:cc:2e:a0:b1:f9:62:5b:e6:1c:af:1b:05:5d:8e:
                    06:2b:0f:15:48:46:d7:9e:37:72:a7:2e:02:f7:1c:
                    3d:cc:a1:36:2f:96:dc:d6:d0:ad:48:9e:a4:8e:9d:
                    32:85:c2:8c:3d:c4:e2:08:0c:5c:7b:c3:42:15:5a:
                    f6:b4:74:d3:40:77:e7:49:68:08:df:1b:66:4c:ac:
                    26:9b:60:d7:a3:d2:c2:51:87:a8:93:d9:db:70:67:
                    08:2b:0a:49:48:47:e4:53:51:25:c1:6b:9f:c4:47:
                    46:b9:d9:9b:58:ca:f8:ed:5a:ff:06:86:1c:29:43:
                    65:75:a9:40:dd:89:92:1a:24:89:9e:85:85:d8:e4:
                    8f:8c:52:8b:65:b6:55:a7:c9:22:d9:39:b3:46:9e:
                    19:0e:c4:bb:83:30:5d:09:34:b3:11:c5:33:e4:0a:
                    16:8f:5c:69:01:38:50:1c:88:1e:21:a7:bc:b4:92:
                    ac:92:aa:64:0a:52:b0:75:67:59:ae:46:9c:38:73:
                    99:27:5f:30:89:a9:0d:01:21:24:5e:ea:54:d6:20:
                    a9:e5:1c:c8:9e:e4:33:df:ae:78:85:5c:04:8c:2c:
                    4b:e8:05:b0:27:da:9d:65:59:18:16:66:a5:f6:cd:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:36:4F:64:CC:D7:03:C3:CA:E2:83:9A:EF:02:D9:AC:A7:1C:35:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e2be1ac-f031-3479-bfcc-ec5ca3d9f243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:61:fe:1f:7a:59:71:90:d7:bb:7a:3b:e3:d1:68:0d:53:8e:
         ee:5b:04:b2:ea:03:e1:e7:58:22:40:5c:59:06:ba:cb:db:f0:
         4e:b7:47:4a:80:b3:64:02:e3:89:ad:0d:99:25:20:42:ce:83:
         8c:ff:62:e0:78:61:d6:8e:a4:26:f7:f6:a9:04:d7:44:18:c8:
         66:7e:3e:81:e3:ed:0c:5a:8c:b5:db:99:6b:cf:e5:a2:f7:6a:
         84:b4:c5:f3:b0:ae:6f:57:8c:e0:1b:28:b9:90:e3:4f:a5:72:
         82:4b:45:33:64:09:8b:f1:d3:b7:b0:d6:bd:91:60:9d:75:b7:
         22:c2:a9:2c:6f:a2:ed:24:cb:35:63:47:60:33:d8:32:1f:fa:
         4e:53:36:0a:c2:9a:08:1d:dc:d0:20:2e:4f:00:27:42:62:de:
         9a:53:17:18:e0:15:dc:47:e4:92:6f:f0:f3:67:5a:d5:19:a6:
         a4:14:71:2e:a1:5f:f4:d6:4b:6e:74:85:83:00:23:bb:e3:a8:
         1a:c2:1d:75:2d:75:b7:be:2f:c8:40:20:34:36:b3:3b:94:c3:
         fc:91:a6:de:cb:8b:6b:de:6b:62:e9:0a:a5:23:fc:5f:76:ea:
         21:30:24:b4:b1:e7:8e:fb:d2:a0:2a:ec:b5:a4:83:05:46:27:
         48:35:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:54 2024 by rpki-client on console-ams.rpki-client.org