Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa
File:                     5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa (raw, json)
Hash identifier:          b0qX7mE2nSEIE+i5jzNQxTy+6aukddMk5JJZB5ITYJE=
Subject key identifier:   0A:39:DB:A3:A8:E5:30:A2:D1:18:85:82:85:8A:97:5B:82:61:AF:31
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF62755FB64459B76B5F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f6:27:55:fb:64:45:9b:76:b5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=28067006-0d91-4dfd-a1d2-0593772d463b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:ce:30:9a:ef:50:f1:51:00:50:51:57:f0:
                    aa:3b:6f:b1:28:65:47:d3:11:7e:c1:c5:21:e2:1b:
                    49:12:7d:66:10:b7:9e:f4:a6:02:7d:0e:66:5b:14:
                    03:77:9b:df:1b:35:d1:97:94:54:74:e0:29:44:03:
                    bc:fe:18:cb:a0:b0:9e:d3:9f:d5:40:1e:50:e9:2d:
                    53:96:f2:e0:ab:02:5c:04:03:3a:72:73:e9:10:63:
                    3d:0f:81:ab:d0:e0:07:17:25:c3:ea:31:40:19:00:
                    de:54:1d:04:50:c4:a6:19:36:82:db:54:92:9d:55:
                    4f:33:b4:81:08:71:2b:bf:c5:82:b2:a9:e2:fa:67:
                    20:e0:21:1d:1e:14:9b:c0:9d:00:40:a7:1d:46:31:
                    f4:32:9e:0e:aa:b4:68:59:dd:b9:22:88:30:46:23:
                    85:ee:0e:cf:d0:48:57:0e:fd:d5:f9:aa:70:ba:7c:
                    7e:e9:4d:6c:1f:f0:81:22:93:37:5c:ed:d1:92:3e:
                    a3:15:47:ec:82:ac:57:67:bb:df:0c:7f:70:0c:04:
                    fd:b4:c9:20:5e:ce:b2:c9:2a:a0:bc:2d:6d:41:f4:
                    a0:5c:d6:a6:a3:56:f2:ff:44:e2:60:2f:c7:c8:37:
                    97:29:a1:d7:cd:92:9e:66:11:44:82:af:21:b9:1c:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:39:DB:A3:A8:E5:30:A2:D1:18:85:82:85:8A:97:5B:82:61:AF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:a6:b1:60:5f:02:6a:d7:4a:1d:1c:9c:b4:e6:16:17:e3:
         1f:90:a4:a2:6d:d2:ae:86:f8:b6:83:76:df:8e:f2:f6:73:a0:
         2b:79:cd:9a:f2:13:6c:4e:3c:15:f3:48:d2:05:bc:6b:1d:34:
         97:31:e3:7c:fa:b7:30:98:07:fa:84:ce:07:a1:59:f4:e4:ec:
         33:b2:c8:50:c6:65:94:02:b5:c0:83:21:c4:46:6d:e0:08:07:
         f2:f0:5d:c9:43:0d:8d:e1:d5:dd:d6:b9:d3:d9:66:68:87:9e:
         23:58:63:e7:f5:84:f9:26:97:4a:1d:29:71:a7:60:0f:1e:ad:
         07:a7:90:85:2a:39:87:b4:ad:42:c9:c2:bf:6e:2c:06:ce:99:
         39:6b:98:3c:99:75:7a:58:af:7e:6e:63:ce:a6:c2:81:6d:0a:
         81:92:68:85:c5:11:07:e9:fd:c5:a6:44:9b:c8:72:61:a9:bd:
         7c:0a:37:e2:19:05:48:91:6f:8a:81:69:64:a4:02:79:7c:a7:
         fa:90:c5:9b:46:b0:dc:3c:e2:57:68:4a:4b:6f:7c:15:92:34:
         d9:ae:4c:d5:99:07:17:03:1b:bd:d6:46:5a:5d:af:38:46:b1:
         31:7c:93:ab:cc:48:04:e0:13:3f:81:de:42:a8:ea:a0:75:40:
         64:ab:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:12 2024 by rpki-client on console-ams.rpki-client.org