Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
File:                     3ac6c564-59d7-31eb-8b66-a27be99aa706.roa (raw, json)
Hash identifier:          ndGgpMfjLR5aKNvuv/KDs3uWXjZiBvsZCNOHF56h/vc=
Subject key identifier:   59:B9:10:D4:A7:8E:D7:09:25:0B:5F:D6:71:DF:EE:00:01:58:46:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ACAF4875D5DF7B3EF6800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ca:f4:87:5d:5d:f7:b3:ef:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=bf6529a5-5af4-40d5-87b0-b61498121d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:57:a0:4e:f9:28:cf:a7:99:ac:e5:cc:55:
                    f7:ab:4b:16:f6:9b:71:32:0a:0a:75:88:d9:7c:95:
                    d4:9b:88:28:90:eb:87:6b:a5:a6:ea:9e:87:61:45:
                    35:0c:ec:51:09:de:6b:cf:17:53:a9:64:16:52:b5:
                    4f:88:2e:3b:2a:98:e2:70:05:a6:f1:57:04:b1:9a:
                    1f:78:cc:be:9d:ae:0e:69:f5:c5:59:0c:0c:6f:20:
                    8b:f6:ad:7f:2b:8d:cb:7e:99:0b:a9:42:4a:57:cf:
                    b5:55:f7:ba:ff:89:33:c8:1e:4d:d7:96:c5:77:57:
                    89:26:33:63:12:42:65:32:af:2b:a3:aa:da:80:6e:
                    c6:16:03:ee:6a:c9:77:ce:28:db:30:a3:30:98:82:
                    a2:f6:84:80:6f:eb:9e:72:cd:34:9d:d8:cb:a4:07:
                    89:c7:d4:30:57:64:ae:6e:3c:0d:fe:22:f3:d5:54:
                    33:55:b9:eb:b3:fb:e1:73:99:ce:d9:f1:06:01:10:
                    21:03:95:1c:00:30:ac:9a:19:3a:21:7c:0c:b8:4d:
                    1b:f0:39:3a:b3:24:65:46:f9:b2:ca:f1:6c:35:a2:
                    02:c8:ed:ae:2c:85:c0:ce:63:60:e2:31:9a:56:fb:
                    24:0e:2f:68:5e:98:d5:d5:84:9e:37:83:5c:f6:79:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B9:10:D4:A7:8E:D7:09:25:0B:5F:D6:71:DF:EE:00:01:58:46:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:98:7a:e9:39:81:b0:0a:fd:46:32:f4:f8:5e:9b:be:8d:78:
         b9:37:cc:80:35:ca:c2:b2:03:6a:1a:80:45:49:07:93:90:5c:
         dd:fb:a3:49:24:58:3b:6b:5d:bf:98:4e:b9:a9:03:1e:b4:3a:
         d0:28:81:4c:8b:98:dd:8e:f0:7b:8a:a8:c5:b4:02:22:55:3a:
         b5:95:61:7e:9e:1c:9d:40:6a:68:3c:15:3e:90:a1:dc:3e:0e:
         b8:db:91:0c:43:38:14:e1:c4:ba:b4:c4:dc:59:b3:50:2a:33:
         5b:34:18:df:c5:11:7c:da:96:f8:35:a3:5b:af:40:77:0c:b8:
         cd:55:f1:6f:9b:c3:12:61:a8:1b:e0:fc:bd:81:f3:f0:25:b3:
         30:6b:53:13:e2:9d:39:b3:e6:d5:96:a4:73:16:8c:0e:f0:41:
         f5:39:e3:53:b8:db:8b:b6:f4:33:ba:44:cb:1d:2a:d1:37:8d:
         07:54:e3:b4:c5:93:26:de:ea:3e:af:7e:7b:11:7a:43:98:57:
         a1:b7:13:11:78:cf:c1:b1:11:67:9b:a9:b7:82:79:c9:21:08:
         d4:67:66:82:77:a6:d3:cb:5d:5c:0a:6c:9d:ca:6f:78:ff:78:
         a5:4a:54:c2:5b:cc:65:14:59:4c:1a:2b:dc:3e:18:2e:07:9a:
         5e:98:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:22 2024 by rpki-client on console-fra.rpki-client.org