Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa
File:                     3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa (raw, json)
Hash identifier:          JXv7E3ei0ruSkBuK5MIJgVQcX87HNYETfOOvUOwFKSY=
Subject key identifier:   0C:55:DD:B2:3C:E6:85:FE:94:9A:A4:CE:D0:A1:67:A6:E2:E1:C2:39
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCABB92E5CE6ADA867880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ca:bb:92:e5:ce:6a:da:86:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f54bf8c4-38b1-49de-9bfc-9c9fd9638712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:8c:4e:5d:99:78:68:0d:b8:04:fa:70:9f:
                    3f:ad:c8:7a:d0:d5:bf:b2:50:ad:90:9f:e6:c2:4f:
                    77:1b:64:0b:5c:fd:4e:63:7c:41:7b:c6:d8:cd:31:
                    ba:4b:ef:98:02:94:8d:eb:ac:34:b7:fa:48:d3:a6:
                    55:88:07:72:6a:c1:0a:24:e0:5a:ba:e8:bf:92:d1:
                    5d:99:b9:21:62:e4:9b:fe:b9:62:c2:22:16:94:73:
                    ec:f4:63:32:63:1e:89:cc:0f:55:f2:f2:ac:5d:86:
                    f7:3f:5e:98:92:b4:85:94:7c:8c:79:3c:c4:36:13:
                    ac:cc:67:75:5d:8d:67:33:84:0a:84:8d:e6:9e:d6:
                    be:f7:da:21:ec:47:6c:b9:8e:19:19:c6:f2:6c:db:
                    12:8f:91:8c:26:bf:94:a9:06:ba:4d:4a:27:27:d5:
                    f6:00:fa:54:d3:8a:b7:76:e9:63:91:27:f4:a3:c4:
                    61:c8:44:01:9f:92:5d:82:3f:ad:0e:f8:a2:1b:ce:
                    e1:ee:93:e4:2d:1f:9c:61:7c:f5:d3:92:2f:b3:e7:
                    b5:18:a9:4d:95:ff:d4:0e:32:a6:a5:4a:a3:f5:42:
                    dd:ea:fa:0c:a5:1c:70:d3:2f:5d:89:65:13:9f:dd:
                    9a:0c:0d:32:cb:24:49:48:2f:8c:28:a0:ca:b6:f8:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:55:DD:B2:3C:E6:85:FE:94:9A:A4:CE:D0:A1:67:A6:E2:E1:C2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:87:f4:de:3a:59:af:c1:54:11:21:7b:92:b6:1d:87:7b:48:
         8e:19:19:fb:9d:8a:dc:b0:8a:e4:d3:5c:aa:3b:03:07:4e:81:
         66:20:28:8e:08:65:0a:21:c5:27:65:12:12:df:1f:6f:f1:fe:
         22:c0:1a:a5:c2:e9:7d:2f:65:dc:62:bc:5b:b1:5c:f0:90:37:
         34:d7:2e:cf:ec:29:b9:5c:6c:56:a3:a8:11:23:90:55:61:6a:
         4d:2b:32:e1:9b:2c:6f:75:a8:9c:ae:01:05:04:47:3c:bc:0b:
         0a:a1:d3:5e:2d:b1:92:86:4f:9e:68:4a:d2:86:1a:96:8d:dd:
         c1:b7:ac:7f:2d:89:36:f9:9e:fe:d6:11:fa:4d:c9:77:b5:53:
         47:3d:55:19:dc:87:11:83:6a:10:b4:a7:f8:ad:a0:8a:a8:e0:
         78:3f:df:2c:23:74:52:2c:94:49:40:95:a9:cf:5e:32:4c:a2:
         73:ef:be:66:ff:67:33:ee:9b:4e:98:5a:39:b3:d8:16:de:f3:
         26:4d:39:7d:b8:77:13:44:39:60:de:a5:0d:0f:dc:68:28:39:
         10:7c:ce:e5:56:eb:62:86:43:96:f7:a8:44:93:61:2f:33:37:
         07:32:33:b7:1a:8c:f4:c0:05:ae:47:ff:e3:ef:8c:da:cb:09:
         be:0c:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org