Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/45b34569-b505-3e29-b451-7e8aef524407.roa
File:                     45b34569-b505-3e29-b451-7e8aef524407.roa (raw, json)
Hash identifier:          9N4z77CPaOIMsqUJGg2bykViGEuTId+NMk+yHLW1Ov4=
Subject key identifier:   C0:B7:D0:D2:14:0A:FE:65:2D:6D:92:19:B2:F2:54:B9:A7:D0:DA:6D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC5D903BF1572F35F0780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/45b34569-b505-3e29-b451-7e8aef524407.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c5:d9:03:bf:15:72:f3:5f:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=30163a0c-8817-408a-bfe6-874e2a01b75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:f3:9e:22:ab:81:e4:88:66:80:af:49:ee:
                    aa:74:07:d2:ed:32:ac:6d:33:03:ef:2e:04:b2:d5:
                    60:34:a6:48:26:9c:22:8f:6b:64:f5:09:b4:9a:4d:
                    d0:d0:28:10:b6:c6:74:bb:0e:e4:0b:4b:6c:e9:85:
                    82:e2:48:50:98:b5:1c:22:d0:39:e7:02:55:fd:98:
                    09:06:ea:55:5e:08:b5:dc:77:1e:f6:d5:27:aa:58:
                    28:80:7d:8c:ee:f2:99:3b:46:29:ab:50:36:d1:51:
                    3c:c1:26:63:e6:6f:38:d5:d9:2f:c0:fd:20:35:cf:
                    bf:78:1e:6c:2e:67:ee:b2:89:ec:42:d2:29:d6:94:
                    75:41:8e:0c:26:8b:ef:c0:80:7c:95:83:84:cd:ae:
                    5c:ab:a4:55:a3:b7:28:fd:39:a8:01:01:5a:48:64:
                    44:27:af:3b:e0:61:a1:bc:a0:46:74:1f:9c:5d:8e:
                    f9:3a:8c:07:e0:37:9c:38:51:e5:15:d8:a8:f1:42:
                    41:38:9a:72:3c:1e:07:6b:1b:26:7f:71:ab:ec:b0:
                    25:48:2a:17:76:c1:4a:15:bc:e7:b0:09:7e:4d:25:
                    a5:7a:bb:3b:d6:76:7b:79:66:d4:72:c8:e8:56:95:
                    98:b8:e0:fb:8b:9b:e0:2f:65:76:89:8b:f8:4a:2f:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B7:D0:D2:14:0A:FE:65:2D:6D:92:19:B2:F2:54:B9:A7:D0:DA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/45b34569-b505-3e29-b451-7e8aef524407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:24:0a:71:26:46:01:db:f1:cb:a7:f5:37:c2:79:07:c4:
         be:57:82:c9:fb:0a:34:d2:2f:da:21:7b:e9:cc:62:d1:ab:87:
         16:32:b8:94:f2:e8:ff:db:e6:dc:6a:ae:ba:1a:6f:fc:3d:28:
         27:9d:4c:25:6b:f1:4c:f7:a2:47:0f:71:d9:10:d6:50:5a:7a:
         f2:00:68:8f:87:ad:92:de:42:67:cc:45:89:bc:b6:d0:2b:b2:
         49:ac:6b:85:7e:53:21:97:0b:98:ab:cf:ea:9d:e9:b7:4f:5e:
         2d:b5:fd:a1:34:19:ed:31:df:14:58:7f:ff:cd:eb:10:0e:62:
         d7:f0:48:18:60:d2:0d:05:ae:d3:c6:92:49:4e:20:3f:8b:6b:
         22:38:d1:7b:08:86:e3:42:2c:1d:c4:43:86:50:29:f9:f3:d7:
         c4:99:08:bb:0c:c1:b0:66:5e:9a:ff:fe:5e:c8:0d:ff:0e:d3:
         9e:7b:a2:44:68:97:d9:d7:d3:b8:6c:ad:64:46:88:2e:c7:4a:
         d8:48:5a:44:1e:0b:df:8b:67:d8:f5:c2:ef:6f:48:86:e1:1c:
         ac:7b:c1:4c:cd:56:ea:d2:77:f9:77:4c:66:90:af:e8:42:92:
         ed:64:e1:8d:ca:6c:ca:a2:68:9f:af:26:61:ba:10:d7:e7:b0:
         b8:63:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:38 2024 by rpki-client on console-ams.rpki-client.org