Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa
File:                     46e286ff-ba5d-357f-b2c0-8ae233476de2.roa (raw, json)
Hash identifier:          OFD3x81bLtVGm30how/6e+pKfsmEYrBMjDsgNXAhers=
Subject key identifier:   74:83:97:70:0B:51:69:78:71:95:B7:1D:45:B4:7A:99:8B:97:28:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3DE276DF35F79866E303
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3d:e2:76:df:35:f7:98:66:e3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c790b7ba-d7d1-4a30-97b9-c929cdea7632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:22:ee:17:f3:c5:0b:ec:06:45:b9:c1:d7:
                    b5:bd:41:0c:a1:31:78:ef:f5:2f:35:b8:80:59:14:
                    34:fe:21:08:7f:e3:55:ac:cb:42:b8:88:02:c7:8d:
                    fa:7f:bb:f6:55:fd:82:be:41:b7:71:8c:5f:35:34:
                    dd:c7:1b:df:db:dd:89:35:a9:20:e6:8e:1c:74:42:
                    d6:a0:7f:0c:2f:ac:83:94:1f:50:c7:2b:d5:b5:af:
                    f8:65:34:6c:37:39:34:b0:3e:be:fe:dc:b4:ed:e6:
                    2e:74:bb:85:95:0b:32:ae:d6:86:31:e0:b6:6b:bf:
                    57:c3:3e:ff:00:cc:4b:39:bb:ca:b8:9a:1c:c8:ff:
                    ec:3b:62:ac:34:37:53:4b:61:30:54:ff:a2:6d:55:
                    7a:3c:83:90:ad:f8:13:12:72:6f:1a:a5:19:09:0f:
                    b7:d0:ba:d0:a1:f2:4c:ae:d8:e4:38:b6:8d:22:98:
                    6c:65:07:0d:b3:c2:72:ae:f0:c4:65:06:96:63:27:
                    10:3c:70:85:3d:fc:09:7f:c6:74:c8:a6:cf:17:bb:
                    3b:17:9e:16:4c:74:a9:33:cc:7e:12:84:9a:53:04:
                    ff:77:1c:61:8a:e8:2b:a9:e2:97:a8:de:a4:bf:38:
                    43:f6:9b:66:e9:36:82:07:04:24:13:fa:16:56:ff:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:83:97:70:0B:51:69:78:71:95:B7:1D:45:B4:7A:99:8B:97:28:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:41:20:f5:b0:ad:32:9e:22:ff:29:4f:35:31:22:98:f8:be:
         97:95:6b:b6:45:f9:a0:0a:1e:63:1a:4c:6e:4c:19:71:c9:24:
         5c:68:41:55:70:35:29:a4:4f:96:8f:62:db:1c:24:44:37:f7:
         6c:7a:f0:ad:ed:e1:ad:02:dd:72:77:4e:5e:f4:60:c0:a6:c5:
         ea:bc:54:2c:f1:db:9c:a7:43:9e:30:b5:37:9f:49:6c:3e:e9:
         3f:a4:d0:83:83:9c:9e:06:62:8f:17:d3:23:19:46:b8:d2:b8:
         d0:25:1c:20:79:5a:13:18:97:c3:0b:3c:3b:e8:15:e2:32:80:
         8d:52:52:21:56:f1:51:97:2d:77:3f:e2:6b:f0:16:a8:f0:31:
         e1:ee:d0:45:2b:d3:e2:db:80:fd:36:b4:13:83:3b:8c:a8:72:
         38:1d:3e:61:7f:c3:c5:20:2b:34:4d:b1:92:b0:f7:43:10:fe:
         c5:12:db:4a:92:d9:f3:48:d3:49:f0:e3:b6:2c:09:19:3c:eb:
         f1:28:6d:5f:fb:76:01:0f:1b:dc:ae:2a:c3:c5:78:72:46:c6:
         dc:73:ae:a8:d5:bd:cc:a5:36:a8:ad:fd:e4:e6:76:ce:a1:85:
         78:0e:15:dc:d7:ab:e8:a2:c7:b0:62:7a:f4:a0:11:5f:9e:47:
         27:df:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:08 2024 by rpki-client on console-ams.rpki-client.org