Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61c68045-0b56-36a3-8ea2-283636f4d986.roa
File:                     61c68045-0b56-36a3-8ea2-283636f4d986.roa (raw, json)
Hash identifier:          wAGgzQ6GnmQiHsNWBQ2PCNh163P7D2uIHDTbgw0CDCo=
Subject key identifier:   C2:6C:77:A1:C2:29:C4:6E:11:45:94:77:18:5D:FC:4E:16:EE:EA:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF8E9BDD61D60C1A50F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61c68045-0b56-36a3-8ea2-283636f4d986.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f8:e9:bd:d6:1d:60:c1:a5:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=e86dfd5e-e386-4d02-ac0b-f70b2c795684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:8b:7b:bc:a2:de:e9:dd:74:52:09:c1:be:
                    3d:f4:59:68:4e:40:06:fa:7a:44:9f:3d:f5:80:c6:
                    81:64:37:d1:92:ff:4f:0e:09:91:ad:59:a9:12:d2:
                    a5:49:54:c4:d3:08:2f:31:4c:8a:e0:36:7a:30:5f:
                    6b:fc:61:89:83:9f:a4:c9:4d:5f:a3:af:21:2e:dc:
                    32:ff:c4:c2:49:3a:60:c5:aa:23:82:9a:81:14:13:
                    99:a4:d9:52:7d:63:25:86:4a:a1:48:4c:9e:b3:5f:
                    ab:62:ca:ac:a2:3f:40:e7:2d:1f:3e:af:01:8c:bc:
                    d2:83:c5:09:9f:71:6a:83:62:3d:71:d2:b6:b5:18:
                    b7:f1:fc:32:9b:fd:78:7d:21:58:5b:92:3c:7d:b5:
                    12:99:19:6e:b8:0b:5c:05:8d:00:3e:06:5c:ed:9a:
                    86:95:ea:b9:f0:4f:bb:25:6d:f4:f4:f3:5c:16:91:
                    e7:63:75:4b:7b:4d:63:82:38:e2:b4:ea:b4:86:8a:
                    81:f9:fa:10:68:a1:2c:06:b7:03:bf:0c:69:06:0d:
                    26:a7:85:eb:67:81:6e:f0:8f:7d:6e:5f:90:10:95:
                    bc:e4:7c:48:1f:89:2e:a8:78:f5:f0:84:b8:8c:5b:
                    92:28:fe:c3:c9:a8:d9:64:08:3a:a6:56:24:f1:f0:
                    fc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6C:77:A1:C2:29:C4:6E:11:45:94:77:18:5D:FC:4E:16:EE:EA:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61c68045-0b56-36a3-8ea2-283636f4d986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:01:d2:dd:66:fe:c9:19:00:6b:d6:2d:27:e4:65:1d:27:2a:
         04:e1:8e:e0:1b:9c:ac:39:ae:0c:ce:5f:7e:45:8f:ae:c3:52:
         69:d4:93:45:5a:d8:77:d7:1c:df:8a:ff:2c:be:49:05:ff:47:
         b1:b3:01:e0:5b:40:27:9b:01:c8:df:6e:ca:6d:f6:f3:aa:ea:
         72:30:08:6a:17:1f:05:15:2f:e2:1a:7c:31:13:c5:ae:a4:25:
         83:19:00:bc:8b:1c:0e:b3:aa:a5:b6:45:f0:42:20:05:a5:fe:
         46:d7:0a:82:a1:77:2b:4f:67:66:a5:f1:f9:dd:10:a5:9d:d1:
         52:99:e2:2c:1c:01:1e:85:74:ea:8c:a8:69:63:64:c0:f7:46:
         fe:a6:45:bf:65:f6:b6:e6:dd:cf:98:c4:de:d4:b0:de:56:dd:
         46:78:fb:58:41:5a:28:73:29:28:2e:6e:85:e8:69:18:a6:c8:
         85:50:f1:ec:50:5b:ce:14:41:55:0d:e3:be:56:d3:42:02:8d:
         af:bf:70:ce:84:05:ce:e8:ad:3b:ac:32:5b:aa:95:6e:06:39:
         b9:46:aa:f9:8d:68:1d:ec:ab:80:8c:c6:c4:64:e1:41:8f:bd:
         7f:a6:4c:a9:22:46:09:9e:40:c5:64:58:18:8d:3b:54:80:90:
         cb:d9:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:03 2024 by rpki-client on console-ams.rpki-client.org