Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50277244-12c1-3a9f-97c3-0e2913828da8.roa
File:                     50277244-12c1-3a9f-97c3-0e2913828da8.roa (raw, json)
Hash identifier:          hbCLUmHlae0N+ACOzf92LpMMk6e1H6t/8aHHtTVIXT0=
Subject key identifier:   71:C5:B0:7B:56:9F:81:13:ED:95:9C:AA:47:BF:76:B3:70:5C:A8:21
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58196E8F77DA18ECA50CB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50277244-12c1-3a9f-97c3-0e2913828da8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:96:e8:f7:7d:a1:8e:ca:50:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=2f324da7-0923-473b-becb-8b721f882433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:55:02:84:3f:83:e7:26:c0:d1:09:69:d6:
                    bc:73:43:77:ff:7e:3c:ec:11:3d:c4:8e:4b:b9:c8:
                    a2:ca:62:b8:7a:fd:49:bf:45:de:d7:58:dc:04:6f:
                    84:7b:4f:39:02:b2:55:54:8e:d2:d1:4a:7f:7c:fa:
                    9b:fc:e3:22:5c:03:df:56:e2:4c:48:be:37:17:91:
                    d8:7a:37:8d:c0:df:a5:cd:75:fe:c8:ce:57:ed:c6:
                    bf:df:ce:a2:4c:78:cc:af:b0:9b:64:f8:3e:fa:94:
                    3f:e9:e4:01:fc:54:b3:4c:cf:53:ce:10:0d:70:7d:
                    17:9c:f7:87:a3:4b:00:1e:36:cf:7d:da:32:59:69:
                    01:ef:8a:8b:22:fb:ad:c0:27:82:97:70:05:e9:83:
                    f4:3b:99:9e:54:f6:7c:f2:48:57:ea:74:65:64:89:
                    d9:08:24:6c:e3:9c:18:40:0e:15:f9:e3:bc:7d:a5:
                    8a:6b:a2:f9:44:05:9d:80:c4:94:01:97:2f:f0:75:
                    82:a4:31:66:b3:3e:a2:b6:7c:a8:a5:07:23:de:07:
                    7f:ef:ef:5f:23:26:15:09:c9:28:9d:9f:55:74:ae:
                    d0:cf:78:86:cd:e8:56:a2:0b:81:d8:3a:5a:de:e0:
                    e9:db:7d:6e:48:0d:ea:ba:13:1b:cc:19:c1:ba:18:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:B0:7B:56:9F:81:13:ED:95:9C:AA:47:BF:76:B3:70:5C:A8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50277244-12c1-3a9f-97c3-0e2913828da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:82:73:8d:18:73:d3:f6:81:b1:14:3c:73:68:d9:cc:89:2c:
         dc:03:8a:e3:c1:38:66:7f:a5:46:08:15:36:72:c1:8c:31:d2:
         11:d4:da:fc:46:64:99:a9:0b:b7:8a:82:15:5d:83:17:ae:d5:
         9a:8d:94:27:ec:2f:1c:58:67:74:9f:62:2e:97:94:7a:a6:bb:
         43:d0:b5:60:76:c1:07:bf:5f:a6:50:f7:cc:a7:51:8b:11:be:
         4d:a1:c0:78:eb:fe:1b:a2:c5:a5:cf:77:85:42:96:c3:8d:00:
         fa:f0:2d:a0:4b:0c:f2:a4:6e:cd:96:2c:12:80:81:f0:b4:ae:
         42:bd:ac:36:6c:4b:de:d6:1c:77:e2:4c:9b:31:68:94:77:38:
         4f:1f:9e:ee:53:d8:16:41:cb:90:4f:2c:de:03:13:a6:54:23:
         dd:94:10:41:e7:b0:33:69:96:0b:24:90:60:6d:93:7e:fb:5f:
         50:12:ed:fd:3f:2c:48:e2:ab:74:2c:19:d6:12:68:81:1a:64:
         49:5a:25:73:a9:dd:8c:8c:a5:19:83:82:d9:53:79:89:62:e8:
         54:87:ff:0f:dc:ae:61:f0:2a:23:9a:37:06:e8:da:db:34:bf:
         ed:87:7c:79:a6:77:c3:65:d8:1f:99:e1:26:53:26:97:3c:65:
         5e:10:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:22:52 2025 by rpki-client