Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/301e0510-0821-3494-97b1-70c885d40776.roa
File:                     301e0510-0821-3494-97b1-70c885d40776.roa (raw, json)
Hash identifier:          R3pCV+HHOE9qI2HqbY4j+bU7uyDLU30a8DMznWoucmM=
Subject key identifier:   DB:E9:A4:26:5C:5A:75:8A:5F:42:08:C0:1E:50:0E:41:33:11:79:24
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E46BE13EC29E8168CD5F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/301e0510-0821-3494-97b1-70c885d40776.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:46:be:13:ec:29:e8:16:8c:d5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=97aa1e05-ba35-4be6-8705-58338af7d1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:60:bd:d4:69:9f:35:ed:e4:9a:fd:6c:25:a1:
                    29:c8:68:f5:91:3f:ec:3c:08:9b:d7:d6:d2:8d:55:
                    a3:d7:56:57:bf:fa:3d:50:e4:75:18:d6:c8:fd:6d:
                    0d:2f:59:3e:99:5e:d7:74:65:13:34:ac:18:fc:4a:
                    ba:b3:6a:33:34:39:be:c5:69:78:45:e8:83:65:6b:
                    ef:c6:67:be:23:f6:b4:91:f5:02:e1:bf:f3:d0:6d:
                    88:09:96:80:19:b5:13:a4:1d:bc:69:90:89:18:5c:
                    be:57:7d:54:c1:46:47:b0:4b:79:9f:0c:85:56:46:
                    19:f6:e0:b8:50:94:e9:4e:11:83:0b:af:b5:9c:35:
                    ce:50:db:f9:fa:c2:b5:fe:98:08:cd:ed:6e:a7:a8:
                    6a:af:3a:8f:6e:d1:c0:71:48:b4:37:2d:a1:5b:e6:
                    fa:78:99:58:b9:0e:fc:bc:e4:9b:d5:75:3e:fd:0b:
                    f5:cc:00:f4:61:2f:44:c8:61:e8:e9:d4:95:49:28:
                    49:32:e0:a8:0c:28:cc:7c:17:37:a4:6f:d1:0d:dd:
                    68:83:d9:ab:a8:38:d6:73:d1:78:12:1f:16:bf:64:
                    e8:eb:a3:f2:6b:8b:28:5b:ab:25:77:c0:9d:82:7d:
                    75:3a:81:09:63:4b:09:f4:4d:ab:fd:4e:22:e6:dd:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E9:A4:26:5C:5A:75:8A:5F:42:08:C0:1E:50:0E:41:33:11:79:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/301e0510-0821-3494-97b1-70c885d40776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:6c:8f:00:1e:ed:08:32:0d:26:fb:85:f7:36:06:89:82:
         c8:1e:46:21:e8:b5:92:20:bc:88:42:3f:b4:99:c9:40:96:5d:
         af:81:1c:33:d1:6b:5d:26:9a:88:6e:7a:90:7c:fd:8d:a7:15:
         49:4f:46:0a:6d:95:79:91:11:2e:c9:22:29:9d:f1:2e:c9:79:
         33:29:87:37:a7:f4:34:8d:7d:7a:3f:75:0f:d4:83:43:15:07:
         b5:a7:d4:98:3a:31:97:d3:be:09:94:95:96:2f:ce:16:11:47:
         99:58:31:b4:f6:82:52:4a:95:33:d9:85:19:66:de:d6:cd:73:
         32:22:4e:78:04:c0:18:2d:c8:5d:fd:d3:6d:0c:ee:3f:88:a3:
         4d:75:59:9d:ab:2f:10:5e:55:f4:04:33:9c:b1:09:6f:ca:6f:
         0d:77:08:65:2d:8e:c9:b1:05:17:be:df:22:76:24:28:ac:ff:
         71:ab:96:e3:e9:64:34:2e:d2:d4:2c:c4:24:f5:3b:a0:e3:35:
         93:b0:f5:76:ce:e6:1f:97:35:19:2e:ec:66:5f:db:8b:23:c7:
         bb:47:8f:04:ba:bb:e7:64:59:12:47:f8:75:2d:46:9d:c8:34:
         7b:28:6d:ff:7c:40:ea:95:08:e9:da:9c:5b:e8:f9:99:49:79:
         bd:7c:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org