Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5805eb65-1cfe-3e81-8adb-3564e39a085f.roa
File:                     5805eb65-1cfe-3e81-8adb-3564e39a085f.roa (raw, json)
Hash identifier:          wwswbA8Q94zo6VRhcyUNdu+UxGlGfPs0qVvWj2GeZtQ=
Subject key identifier:   9C:DD:FD:35:54:2A:EB:22:A8:03:07:41:9C:A4:7A:AF:54:0F:89:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7C5A45ADD340E3A4E040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5805eb65-1cfe-3e81-8adb-3564e39a085f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7c:5a:45:ad:d3:40:e3:a4:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=fa0567cc-e218-4566-ad65-9d39790a6980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:58:0b:cf:8b:16:82:1e:9e:61:97:ea:ee:
                    74:95:a2:a2:1d:28:83:bb:cb:92:46:d1:d7:08:59:
                    12:06:ed:d5:dd:a2:7e:7e:4e:14:aa:d0:54:e0:2e:
                    6b:f7:d9:e3:5c:b4:80:08:88:7a:c0:e3:43:fc:e2:
                    bf:b2:c2:2c:23:85:fb:36:8e:56:be:b6:f6:37:73:
                    ec:20:c1:53:de:7f:60:5c:c4:40:f4:69:50:61:e3:
                    81:e9:06:fa:9f:fe:8c:c5:54:e4:11:2e:d3:07:cb:
                    99:a1:19:21:bf:de:da:28:29:52:11:96:01:aa:b6:
                    fe:96:bb:15:07:f4:2d:11:ee:72:6a:6e:cb:bb:f5:
                    fc:31:8c:de:e8:78:c4:6d:e5:c7:ed:54:c6:e5:a1:
                    b4:2c:c1:ed:09:34:97:60:18:28:4c:68:b6:4a:7e:
                    54:33:d0:a6:39:af:1e:88:df:41:42:af:56:87:bb:
                    0b:1b:ae:31:e4:59:34:56:e2:20:37:aa:17:2e:24:
                    0c:88:5a:fd:02:8c:39:f9:9f:c6:53:9d:cd:32:b7:
                    3b:77:c9:0e:eb:45:52:48:63:34:26:b0:06:1b:53:
                    6d:71:c5:a0:57:64:c2:f7:e1:80:1d:b8:82:8d:f0:
                    f2:69:9c:49:67:2f:52:a0:f5:6a:6a:4b:b9:e3:ef:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DD:FD:35:54:2A:EB:22:A8:03:07:41:9C:A4:7A:AF:54:0F:89:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5805eb65-1cfe-3e81-8adb-3564e39a085f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:23:d6:db:f2:73:a8:93:94:2d:dd:bf:9e:f8:c9:41:d3:77:
         88:3c:0b:fc:25:49:0a:90:71:29:22:fd:1b:00:65:a7:96:8e:
         bf:1d:fa:d4:50:d6:06:0f:59:78:11:86:b6:8b:70:66:69:ce:
         82:66:62:15:b4:55:58:9a:cb:36:29:6b:9f:ed:eb:22:7e:86:
         d8:bf:cf:f9:a1:f0:ac:8b:c8:91:4a:d5:bc:d3:87:78:57:28:
         31:2e:78:c3:5a:0f:08:e3:f1:e9:fd:61:35:f4:a1:fc:02:d1:
         77:f9:76:fb:e6:c1:fe:7d:16:75:52:fe:f2:e1:d0:1f:96:c9:
         76:67:28:88:37:67:20:f4:0c:33:eb:ce:db:62:18:99:85:21:
         73:ba:2b:78:86:e5:b9:c6:a5:44:ef:f0:50:27:c0:20:0a:d4:
         cb:3c:9f:3a:d2:21:02:7d:5c:a5:29:90:0f:3a:71:d3:94:ea:
         6f:7f:2e:c0:8a:b9:80:23:30:a0:77:9f:69:a1:e7:2b:4e:30:
         e9:c6:16:c6:ac:b6:a1:46:cf:b1:40:4a:49:e1:a7:58:d6:13:
         9e:23:d1:4b:2e:72:9e:06:3b:d8:c9:4a:44:13:48:c9:cc:f6:
         7e:79:0a:38:82:76:0f:e3:da:3c:10:e9:f1:cd:27:f0:d3:b5:
         27:7b:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:34 2024 by rpki-client on console-fra.rpki-client.org