Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37beb17e-fc30-3251-a4d7-0df203d9ee57.roa
File:                     37beb17e-fc30-3251-a4d7-0df203d9ee57.roa (raw, json)
Hash identifier:          jx/z5VaWB2/Gub9Nm9PTwbOKg/GWoZ8WPjPa2YAdih0=
Subject key identifier:   4C:48:BD:A0:DA:F0:A7:EF:F9:18:58:C2:3A:B1:CF:87:42:6F:B0:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7A0D02FDCA5B3AC931C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37beb17e-fc30-3251-a4d7-0df203d9ee57.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7a:0d:02:fd:ca:5b:3a:c9:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=61dd3054-7711-4442-8f44-533930b4e9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:fa:fe:28:d5:35:15:2d:2b:f9:9a:16:f0:
                    cd:52:82:05:8f:dd:06:13:b3:4d:69:08:65:d3:0d:
                    d9:e4:38:68:ba:6e:d7:d6:74:dd:4a:dc:e1:21:a9:
                    0c:c0:65:d2:17:a2:29:44:a8:4c:24:f6:cd:0d:c4:
                    37:32:f5:49:6a:41:52:64:60:87:1d:72:97:ac:54:
                    fd:2c:36:61:ac:76:e3:39:ab:ec:1a:d4:bb:f4:a8:
                    82:6a:ff:5a:49:cd:63:e0:7b:69:7c:72:78:58:30:
                    29:2d:11:9a:4c:80:39:66:9f:8d:fe:eb:32:db:12:
                    bb:81:81:f1:a2:df:74:1e:0b:76:6c:b8:75:82:a8:
                    05:6d:3d:a2:c6:72:95:83:4a:f3:98:a4:e7:e7:6b:
                    8e:cf:af:4a:77:e6:81:33:93:6d:1a:ec:0a:14:d2:
                    d4:5e:18:56:1f:8e:a3:a4:40:0c:d7:d8:05:69:c8:
                    5f:8d:bb:13:44:0e:b9:d9:72:08:e5:0d:f5:06:96:
                    09:2a:13:cf:4b:ee:db:11:db:9b:f5:93:50:82:dc:
                    2f:f1:6c:cc:4c:c3:ca:3f:27:d4:77:2d:ef:b4:78:
                    5d:3e:1a:7e:82:dc:db:7f:22:13:ac:3f:c1:f2:fb:
                    c7:35:1e:5f:10:64:c5:8a:03:be:c9:c4:67:07:81:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:48:BD:A0:DA:F0:A7:EF:F9:18:58:C2:3A:B1:CF:87:42:6F:B0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37beb17e-fc30-3251-a4d7-0df203d9ee57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:4c:9f:37:8c:71:08:23:33:a5:ea:c8:c6:31:d2:89:8b:
         b4:f4:5c:ad:68:4e:ee:b7:be:43:8a:10:90:c8:22:b9:31:34:
         66:32:f5:a7:63:73:27:a3:87:c6:35:24:6f:4c:ce:d4:7f:c5:
         af:71:42:50:00:ff:ea:62:d3:d0:0a:f4:d3:67:15:a0:e0:64:
         7c:3b:23:b7:76:d9:e3:ff:19:17:e9:3c:95:f9:46:08:ac:14:
         c0:ff:2a:19:e6:20:3c:74:7f:d9:cd:c3:46:d1:b9:37:ec:94:
         e0:53:70:99:c7:ed:17:e3:ff:4f:79:b4:b5:26:06:4c:f8:2a:
         d5:0e:a6:db:d8:7a:de:e1:c6:14:f0:64:5b:a9:d8:6c:a2:28:
         10:d3:f9:09:a4:95:bf:d4:0f:d5:d8:1e:28:4d:fc:c3:a6:e0:
         40:3b:e7:aa:c5:57:f2:43:5d:46:d4:25:dd:07:0f:5b:01:75:
         61:e1:0a:bf:5a:22:34:2b:4d:76:ff:94:bf:7f:5f:57:27:49:
         9a:fc:ae:59:aa:f5:7f:08:67:ed:36:23:69:34:bf:5f:28:13:
         a2:d0:63:aa:cc:48:40:e8:ad:62:a9:75:7c:f5:0b:d6:76:9e:
         2b:8f:95:8e:08:7d:59:38:83:c8:bb:1f:98:cb:e7:02:fe:4f:
         e5:8d:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:59 2024 by rpki-client on console-ams.rpki-client.org