Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa
File:                     3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa (raw, json)
Hash identifier:          GmDWk3kAI1SwTXenulXSKUeLt0gbKIOczMLbtM2210U=
Subject key identifier:   22:91:BE:7E:09:1C:EA:D0:04:6B:5F:FC:0B:B9:EA:5D:8F:8C:05:1F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEEAB044852AA7550D5C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     40306
IP address blocks:        70.41.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ee:ab:04:48:52:aa:75:50:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=4521af6b-ad7c-4a6f-9ab6-8f398742d22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:51:bf:c2:95:f7:1f:15:60:d4:8b:e3:e5:
                    59:46:a0:eb:78:cf:07:e7:a1:f9:48:ca:c5:5e:92:
                    94:6a:06:af:eb:31:ef:9c:13:8f:53:41:52:52:2d:
                    ec:30:47:ff:6c:bb:47:04:90:32:57:b0:f9:0c:69:
                    5d:0f:01:47:2f:73:56:46:ac:d8:2d:17:0b:f0:d9:
                    8f:9f:ab:41:bb:ac:a9:0c:b2:fb:96:13:db:ee:97:
                    07:c8:e0:e3:40:5b:2b:df:a0:f1:db:b4:a7:fe:c3:
                    3f:53:c0:6c:75:b7:b6:17:98:53:a4:05:9c:d6:b9:
                    7c:03:cf:19:dd:6a:3b:af:d3:8a:80:65:54:fa:98:
                    24:d6:f6:54:14:f8:9a:d7:8e:56:64:b6:6f:8e:82:
                    5d:18:e7:a7:b1:c9:07:ab:81:90:7c:29:40:e8:d8:
                    f7:1d:96:5d:2a:ab:2a:4d:98:59:49:98:8f:16:f5:
                    65:84:77:59:ce:4a:c8:1a:3e:92:68:b3:4b:33:20:
                    9a:01:cd:45:da:09:cf:43:c8:23:4e:ed:74:12:ff:
                    19:2c:07:e1:9f:82:40:67:5b:e0:5f:81:ab:c9:a8:
                    69:7b:af:d6:e0:a7:14:34:7f:da:77:8c:d2:c7:cb:
                    99:57:ba:3e:90:5a:2f:7f:c6:41:c2:c1:2d:32:4f:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:91:BE:7E:09:1C:EA:D0:04:6B:5F:FC:0B:B9:EA:5D:8F:8C:05:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:c1:e5:e8:7c:27:e9:bb:30:0a:1d:e5:fe:23:d8:17:b2:
         12:b5:5d:f4:d0:1f:4e:ad:d4:18:21:9a:f5:ad:d0:ba:da:07:
         0d:1d:fb:ba:2e:d6:cd:f9:6d:a1:ba:52:04:7d:93:53:bc:29:
         e3:cc:0a:b7:7d:ae:0a:95:1e:52:eb:b5:b1:e6:2b:95:32:dd:
         f1:79:39:f8:ed:93:19:eb:86:f7:9e:b9:50:5c:74:fd:21:19:
         95:fe:ca:35:c9:bf:e6:6d:dd:ed:10:9d:0b:1f:6c:6d:de:6b:
         84:57:bd:0a:e0:4a:02:b7:00:11:8d:3f:07:9a:81:fa:77:43:
         62:53:8e:36:c7:4a:64:ed:95:25:2e:14:ea:37:96:ed:c7:26:
         a0:60:84:6e:98:3f:ae:7b:c2:17:ad:57:dc:40:a9:ad:b0:92:
         c8:0e:cc:39:ee:dc:0e:d2:07:de:a9:de:1d:d0:45:67:0e:24:
         94:f9:50:df:54:9b:c8:d7:c2:0b:bd:47:ae:7f:82:61:9d:08:
         d0:5b:9d:c3:9f:b2:c9:b3:4b:8f:b5:94:c8:33:98:a3:ab:53:
         33:0f:61:dd:a2:10:1c:d5:cc:b0:0b:1e:b9:b5:20:68:c3:55:
         51:e8:b6:56:e0:e8:1c:7b:29:08:ed:5c:60:32:36:21:4b:56:
         5f:88:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:02 2024 by rpki-client on console-fra.rpki-client.org