Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ee604aa-d026-3ec1-8736-82823c2956c2.roa
File:                     4ee604aa-d026-3ec1-8736-82823c2956c2.roa (raw, json)
Hash identifier:          htuic/Y/UGryAgDAI/h5KLmxbZi32yTfgep8WC+SkQA=
Subject key identifier:   E8:7D:0F:67:20:87:B6:F8:07:3D:98:DF:8D:2A:D8:27:7F:26:A5:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DFD00815E6D982157FD40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ee604aa-d026-3ec1-8736-82823c2956c2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:fd:00:81:5e:6d:98:21:57:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=82a66e02-2931-4355-8471-89c4cacc4c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:ff:14:9d:5e:ba:ad:f9:ae:a7:5d:19:0a:
                    54:50:f0:b2:f2:8b:07:cd:71:aa:50:87:ed:bd:5c:
                    19:85:e6:32:11:6f:54:53:3f:61:50:79:7c:fa:1c:
                    ad:e7:68:aa:67:16:3d:51:b8:db:6b:86:f1:6c:95:
                    c6:1b:e2:8c:44:8d:00:92:b5:63:29:c8:42:84:39:
                    9a:01:58:fe:14:9b:8c:50:0b:7e:8b:06:08:5f:68:
                    a4:b0:ac:7e:68:e9:47:b7:77:f7:17:14:f2:d9:69:
                    38:56:6b:af:b8:51:dd:40:3a:c9:e0:90:c1:41:88:
                    c5:c2:d9:e9:71:66:54:5b:40:fc:80:2b:6d:24:da:
                    43:01:3a:70:e8:4c:63:e3:5a:a1:9a:cb:40:0e:f2:
                    a7:d1:5a:4f:3f:04:43:36:5e:c5:fb:ec:5a:35:65:
                    a2:6a:fc:c3:2c:f7:ee:c2:7c:90:96:f5:61:eb:88:
                    1a:08:a4:5e:3a:18:5c:51:2d:7e:45:d5:79:8c:38:
                    86:f2:eb:e8:98:7e:70:85:c4:91:0a:bf:65:bc:39:
                    da:bb:d2:ad:ad:bc:ff:9b:34:3c:b9:00:29:cd:17:
                    86:fc:8d:b6:f3:44:c6:a7:26:69:f9:dc:b2:c1:1c:
                    e9:b1:be:df:bc:9d:9e:7a:ba:b0:bc:6c:1f:79:5e:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7D:0F:67:20:87:B6:F8:07:3D:98:DF:8D:2A:D8:27:7F:26:A5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ee604aa-d026-3ec1-8736-82823c2956c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:25:dd:d9:b2:05:3b:74:84:6d:c4:09:85:b5:61:df:0e:
         52:94:21:0b:7b:40:9b:f7:be:d4:d3:30:fd:62:9f:d3:c9:ef:
         99:4b:ce:dd:aa:6d:a5:97:d4:e1:b6:f8:0d:32:d3:db:7b:e2:
         51:2b:11:ab:62:ab:d2:73:9c:f3:78:4a:7b:47:87:05:a8:62:
         5a:e8:ec:9f:44:32:cf:4f:3f:ef:7a:ab:b6:6a:76:f7:d7:a3:
         17:1c:b9:c8:c2:20:9e:03:6c:65:20:e6:96:67:e3:e5:af:2a:
         cc:74:b7:7d:65:56:e4:90:91:da:f3:06:7d:1e:46:98:e9:2e:
         55:8c:f2:cb:83:33:5b:3f:fa:65:63:25:9c:7e:b0:06:60:6c:
         4c:27:66:b3:fe:56:23:4b:63:6a:81:0b:1c:b3:18:3f:22:22:
         b6:3b:5d:c5:74:f3:c1:5d:39:66:11:84:fa:50:54:78:b5:b3:
         d2:cf:74:71:2c:58:18:86:7d:d7:14:b0:dc:4f:9a:68:f4:41:
         19:20:fe:4b:15:9a:88:ae:79:2d:5e:4e:e8:c6:55:86:31:d0:
         89:05:50:45:37:2e:0a:7c:29:98:82:85:6a:93:a4:ef:e8:9b:
         74:fd:7a:6a:21:6b:a2:38:5a:5a:bc:67:e1:55:ba:0d:cb:35:
         2b:53:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org