Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa
File:                     5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json)
Hash identifier:          YBiwY3xKTy8e6EkHFudj1aa8vyOH3jIeDMWyQue7Rn4=
Subject key identifier:   A4:E6:5E:47:06:71:4E:62:DF:BE:56:23:F5:60:1F:B4:04:1F:B8:A1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B1102514253690AE6EB40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:11:02:51:42:53:69:0a:e6:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=157fa1f6-887e-40c4-acdf-1e1ce54b0377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:34:61:16:0a:97:48:d1:70:68:b1:89:9d:
                    43:8d:a3:91:31:d0:ef:55:5c:6d:86:8a:fc:f4:ce:
                    c5:15:e0:04:08:78:d6:58:00:e2:24:0f:f2:13:c6:
                    28:10:46:f3:01:99:64:ff:71:f5:41:fa:73:73:28:
                    b2:c7:60:b1:02:9a:1c:84:06:1f:3d:53:17:7a:48:
                    7c:cf:b8:1f:5d:bf:2b:04:8e:cc:e4:99:de:28:ee:
                    c7:de:05:61:a9:4d:ef:df:15:39:a5:d5:39:31:a9:
                    89:0b:c1:56:71:27:23:ac:d6:0d:23:f2:2a:78:e4:
                    70:e3:16:73:6a:1c:63:b8:06:38:9e:23:8f:f0:3a:
                    ab:b4:04:5c:8f:b1:0f:30:f0:19:7e:c7:02:d7:25:
                    8c:b3:a9:29:8a:4b:bd:1e:92:27:23:99:87:93:e4:
                    1f:96:2d:c1:4d:b8:14:ba:90:90:9a:24:9d:92:49:
                    18:97:b2:6e:9e:31:93:94:e6:57:72:01:a6:fc:78:
                    e9:ae:6c:e8:5e:d0:b6:f9:14:28:de:82:51:dc:af:
                    d9:a9:66:23:2e:8c:8f:c1:73:d7:2f:6d:16:2b:7f:
                    36:15:4a:86:85:74:01:e2:d9:50:33:31:b3:f8:0d:
                    66:e8:00:70:cf:c1:18:7e:55:0e:7a:84:e3:50:6f:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E6:5E:47:06:71:4E:62:DF:BE:56:23:F5:60:1F:B4:04:1F:B8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:21:df:78:2d:81:02:70:03:12:73:c1:57:b4:95:59:85:ea:
         b5:b6:27:a6:e3:1c:f2:bd:b5:81:a9:1c:db:ef:7b:0d:07:46:
         34:bb:9d:54:1a:19:66:c1:12:d2:c7:4b:e9:7a:3f:89:0d:d0:
         93:72:9c:2f:01:14:82:f4:94:a5:01:cb:b0:e1:a1:53:c2:3c:
         1e:d3:a8:7f:6a:55:de:32:99:20:0e:11:46:f7:6d:19:72:59:
         ed:14:82:b2:39:8e:84:9c:ba:30:ac:25:8a:fd:54:71:c0:9b:
         d8:57:2a:58:c4:b4:76:52:d3:bf:f5:20:7b:12:f7:71:8f:7c:
         4f:55:d2:04:d6:b1:23:b0:00:aa:99:8f:31:83:47:6a:d3:f0:
         f7:ae:18:0c:93:ea:f3:7e:2b:14:ec:f3:bf:97:02:df:84:48:
         01:ca:2d:d1:b3:a4:b3:cc:3b:61:d2:4a:70:fa:00:9e:7e:3d:
         3d:c5:73:e2:f0:9b:82:cb:2f:41:69:40:12:6c:67:6f:a9:01:
         cb:0d:10:93:2a:cf:b7:ce:ff:2b:cf:67:c2:45:9b:b4:41:e8:
         78:5c:12:ee:12:73:8f:fd:78:64:48:9d:8b:fb:6c:f0:52:6e:
         b9:30:d2:03:fa:86:00:fc:ec:c9:2b:6e:81:d9:b7:75:bd:78:
         ce:ef:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:35 2024 by rpki-client on console-fra.rpki-client.org