Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa
File:                     5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa (raw, json)
Hash identifier:          9eNr44osKVmba/oZJsxv6rtrqt/g5gnm5OlP0N48FVs=
Subject key identifier:   CD:B2:A5:53:15:BE:CB:0C:BC:A7:72:28:4B:DB:F8:BF:72:9C:23:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF945E2077CE944534580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f9:45:e2:07:7c:e9:44:53:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ad567128-18d6-4fc9-b509-a282cd852e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:7a:45:e6:f4:b5:11:e6:b0:0f:43:9a:3c:
                    d3:2a:07:69:eb:21:70:6d:f4:78:65:ff:3c:6e:04:
                    e2:c9:2d:da:72:d6:76:74:a7:5a:a6:53:7d:16:23:
                    70:f2:27:82:02:ce:5f:72:91:3a:f0:34:8a:be:0a:
                    30:71:ab:9d:23:12:10:35:e3:a2:0f:20:e3:61:97:
                    2e:57:81:f5:ba:7f:74:96:de:b0:3e:8f:6a:7a:6f:
                    c1:39:3d:5c:a0:8c:d3:ad:89:8b:d4:73:3c:c8:cb:
                    ec:f0:80:09:2d:21:83:0a:41:9f:fe:12:c1:d7:04:
                    13:e9:c3:a7:d1:6d:6b:0d:24:fa:95:c5:6d:c7:9f:
                    fc:3a:7e:03:56:6d:17:6b:36:1d:fb:b2:4b:50:6d:
                    9e:06:49:1b:50:80:eb:e6:b1:17:b4:6e:ce:b1:b3:
                    8b:95:2f:a7:87:ef:cd:36:bd:15:f5:15:28:d6:c4:
                    5f:9c:15:6c:c2:bf:1a:23:8e:42:f3:31:cc:92:ac:
                    b1:44:0f:d1:cc:3f:3b:9d:f1:7b:20:f2:0a:2d:be:
                    f5:0c:f7:3e:13:5c:d1:de:89:be:00:50:ce:60:ae:
                    78:2d:bc:58:08:0f:31:c9:a1:63:3c:55:1e:c2:8f:
                    96:4f:f1:95:c8:68:ca:66:6f:a5:76:de:e7:f0:3a:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:A5:53:15:BE:CB:0C:BC:A7:72:28:4B:DB:F8:BF:72:9C:23:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3b:17:99:16:77:f9:bc:03:67:04:8d:72:82:05:0c:42:c5:
         00:f1:75:33:eb:9b:55:60:b9:39:7f:35:c5:56:53:34:3b:d1:
         ab:2a:92:87:ee:22:d8:74:79:2c:0a:17:3a:7d:d5:78:8c:69:
         ec:8c:7d:11:18:4d:24:89:5e:dc:77:0a:68:17:fe:05:57:15:
         4c:fc:e3:8d:d9:88:55:2f:2a:ec:3b:5a:6e:29:c8:65:fa:0f:
         f1:46:38:7e:2a:f8:42:a4:04:a6:72:1e:1b:83:de:17:0c:01:
         0a:3f:09:39:eb:76:2e:ca:9a:c5:a3:be:c2:7f:38:3b:3a:11:
         02:f8:91:e6:f8:a4:bc:23:da:e2:8a:11:2c:cf:fb:a9:f0:03:
         1c:f9:31:a9:5b:71:bc:44:fe:d6:c8:60:6e:e8:6f:f7:d0:b1:
         ef:5a:47:3e:98:0e:e1:08:6b:cd:98:93:85:d9:e9:ac:9d:88:
         f3:8d:ec:03:05:a4:6a:51:65:a3:80:48:a0:82:66:b8:15:2a:
         5a:a2:ec:60:4d:d3:e1:af:a0:48:8d:60:8c:1a:13:5e:8d:57:
         3d:90:ff:c5:05:b7:e1:a4:c6:e8:35:7a:ef:36:ca:a8:da:5a:
         ef:dc:e8:78:eb:5d:b6:ad:55:90:b8:63:a0:08:cd:a4:c1:de:
         8a:0d:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:22 2024 by rpki-client on console-ams.rpki-client.org