Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6289786b-cfb6-3d96-929c-15b3bdfa2cb2.roa
File:                     6289786b-cfb6-3d96-929c-15b3bdfa2cb2.roa (raw, json)
Hash identifier:          3wT6p9lmpWt+kEMH3RzVAyD9YjXm/arR4oLu2EWAoSs=
Subject key identifier:   EC:2A:E8:1E:51:D9:6D:85:B1:8D:0C:73:ED:D9:81:38:3E:B8:49:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DFC871BF735220BB9D700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6289786b-cfb6-3d96-929c-15b3bdfa2cb2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:fc:87:1b:f7:35:22:0b:b9:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=319b6d9c-cb54-49a9-affd-5efc1824bb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:b1:0c:41:fa:49:3e:92:87:28:34:d2:6f:
                    94:63:83:d7:1f:45:59:e5:ef:0b:17:f3:2c:d2:70:
                    34:5b:62:fc:23:68:06:d3:f0:69:04:1f:30:af:a1:
                    99:75:62:d8:db:c2:4a:6e:f7:95:45:01:99:27:b3:
                    47:3f:96:d0:93:03:fd:15:01:3e:92:57:9a:94:1b:
                    db:a0:6f:3c:44:41:12:4b:7e:b1:83:e6:1e:39:27:
                    ed:1f:63:0b:71:42:8d:ed:a0:e0:73:18:55:41:3f:
                    1f:e7:ad:c7:4e:57:dc:5b:2b:5a:d4:9d:5a:2c:da:
                    25:7f:de:63:c5:b6:d7:2d:ca:b3:fd:39:06:7a:39:
                    82:31:34:63:3e:6c:d0:08:e0:dc:0d:7f:63:65:21:
                    d4:5b:c3:61:f3:74:83:7d:67:46:43:22:d7:71:17:
                    da:a5:2f:50:e4:e5:9d:e2:97:d9:48:1d:00:da:ac:
                    6f:04:6b:dd:1e:fb:d2:e4:f6:f0:17:af:4d:54:90:
                    9e:1b:3f:18:c2:69:26:77:98:c6:d0:af:a9:a0:28:
                    c3:a8:42:87:9a:50:1c:00:52:9c:f7:74:64:5a:16:
                    60:95:81:46:b4:4d:9e:2f:19:26:c0:3e:a8:19:2c:
                    29:5c:52:12:16:a6:01:d9:51:1e:21:08:73:b7:87:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2A:E8:1E:51:D9:6D:85:B1:8D:0C:73:ED:D9:81:38:3E:B8:49:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6289786b-cfb6-3d96-929c-15b3bdfa2cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:77:ab:83:44:ad:ac:25:d4:cd:33:b5:ee:29:11:4e:d0:
         2b:c3:c4:0b:31:58:5d:8c:c2:35:18:67:9b:1b:9b:a7:f8:b3:
         a8:9e:ce:53:4f:8a:f6:8e:c7:a2:36:77:6e:c9:85:c7:08:be:
         eb:af:7b:82:d4:eb:dc:61:4f:e0:85:ed:4c:fa:66:1a:dc:04:
         fd:42:aa:bc:3a:dc:7e:5b:3e:ca:b7:08:3d:de:c1:b5:77:58:
         99:5b:83:ba:40:bd:9f:19:8d:27:c8:1d:61:be:90:67:0c:8a:
         98:5c:e9:9e:c1:8d:7e:2c:99:20:09:c7:2c:54:50:2f:26:eb:
         ae:7d:e0:03:6a:46:ed:9f:27:41:6c:32:44:df:ca:a9:cb:e5:
         5a:1f:33:3a:ca:52:fd:ca:ea:e1:3a:8b:c9:b9:89:3d:fd:c9:
         15:dd:16:2c:f0:f9:3d:28:e5:0c:46:25:c2:ec:86:6f:c2:dd:
         27:cc:e3:d6:00:18:67:98:f9:38:fc:6b:b0:66:26:a4:e2:71:
         a4:fc:b7:11:ec:04:f9:30:79:a3:a5:2f:6a:73:46:91:e9:49:
         88:9d:f3:6a:9e:26:e0:da:53:61:d6:4e:3e:39:fd:99:7e:72:
         02:30:67:f6:6d:55:6d:cb:65:02:c7:03:96:a3:4d:5a:e4:c1:
         40:0e:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:04 2024 by rpki-client on console-fra.rpki-client.org