Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa
File:                     39487b0b-22aa-390d-96e4-c72ab53e1c06.roa (raw, json)
Hash identifier:          M8bXR11txC+eb7Zoptj48Mj7rdu8Ua/kXho9OleNAUw=
Subject key identifier:   72:44:1A:82:45:EC:08:A6:2C:D6:F6:C1:33:9C:CD:C9:71:15:D9:F4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ACD3A36821ABD9FEBEFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:cd:3a:36:82:1a:bd:9f:eb:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=fc2b7aee-e7c8-4a66-b97e-af61fbf1b5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:d1:37:25:4b:53:91:0d:06:7f:56:2f:b3:
                    13:c1:03:d5:5c:59:b2:fc:05:72:25:b3:ca:cd:96:
                    1b:64:96:6a:bc:68:82:c8:98:d6:c9:b5:9b:13:c9:
                    30:c7:fb:dd:17:f3:15:2e:40:91:61:e6:bb:3f:da:
                    b2:9e:7a:e8:ea:04:ad:31:d7:8f:c0:25:d7:3e:08:
                    73:88:f1:ca:a5:46:9b:d7:51:e2:e9:37:ca:d4:3b:
                    7d:d4:f8:38:b3:e5:6f:96:1b:8b:55:19:54:51:6d:
                    50:36:f8:64:24:75:e1:fa:de:d4:0e:dc:4c:67:0d:
                    30:7d:6f:96:7d:22:aa:a7:1b:f8:20:55:36:cb:10:
                    5d:90:8c:2c:e1:05:59:28:aa:c5:c9:1d:b9:83:71:
                    71:68:43:06:d9:0e:39:3e:4e:12:d2:0b:3b:c1:a6:
                    2c:6c:67:a9:28:58:da:c6:d3:b4:9f:7e:42:2b:d4:
                    be:99:b5:e6:8d:7d:11:b9:b2:f6:cc:dd:91:62:25:
                    9d:48:5b:01:e9:c0:84:6f:5f:52:27:11:d4:a2:7e:
                    c5:eb:c7:4c:fd:79:d7:83:fc:47:25:01:ba:dd:95:
                    e6:13:fe:85:cc:b9:4c:e9:ef:ab:1b:23:23:42:75:
                    20:b2:8b:17:0d:bf:b8:e7:84:e2:9c:f7:02:f2:75:
                    e5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:1A:82:45:EC:08:A6:2C:D6:F6:C1:33:9C:CD:C9:71:15:D9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:52:e4:01:88:d1:ce:65:35:7c:c8:13:22:5c:ed:dc:bb:
         ab:91:cb:1b:21:b6:62:f5:e3:ef:ab:ee:a8:41:a2:2e:4e:2c:
         c9:a9:01:c7:07:d6:62:a4:c2:ea:c0:03:d4:70:f8:93:62:8e:
         81:bc:31:fa:a7:de:78:09:4a:0d:4c:95:17:46:ff:24:e9:9b:
         c7:7c:d7:15:e8:5c:fd:33:a1:94:11:6a:58:cb:80:00:c7:79:
         82:1b:ff:e6:4a:02:c5:1c:63:3b:22:b2:c5:9f:7f:29:fb:0c:
         78:4a:16:14:94:63:07:af:e7:7d:14:b6:52:00:ea:f5:0e:a1:
         e0:d6:cb:5c:58:7a:5b:bc:90:06:89:31:46:9a:1f:08:d7:0c:
         8c:9c:c2:25:c2:e0:ff:e9:c4:67:c3:9f:c5:51:d7:bb:7a:96:
         38:15:0c:2e:0c:8d:4d:b3:86:ad:39:86:ed:dd:7f:b2:14:7b:
         b6:0b:ae:6b:3e:6d:df:b7:74:55:81:0a:c0:5d:f6:63:f9:2b:
         a4:ed:9f:64:38:a7:90:19:7e:4b:3e:b5:ca:f9:42:d6:43:89:
         c2:37:98:81:b2:cd:80:1a:10:2b:17:36:66:99:4c:a6:bc:66:
         88:1a:4f:a7:7f:3a:45:2d:42:b0:c2:4e:aa:5c:57:fc:ac:5a:
         6c:af:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:17:04 2024 by rpki-client on console-fra.rpki-client.org