Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63018bc9-f033-3d0a-bb66-1b80b6527407.roa
File:                     63018bc9-f033-3d0a-bb66-1b80b6527407.roa (raw, json)
Hash identifier:          HRA+vEUZ1gPoO/q13RZv7LSgW21Piy9W/rsTsMKvcng=
Subject key identifier:   A4:97:71:EB:87:BB:8E:36:50:59:D5:03:D9:F3:1A:58:A8:7E:D3:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF7D5C3E2BBD82A87D680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63018bc9-f033-3d0a-bb66-1b80b6527407.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f7:d5:c3:e2:bb:d8:2a:87:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=10df4a73-7554-4129-9b37-2f7b7213ae43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:63:36:2d:08:eb:69:17:a1:b9:56:23:90:
                    83:55:b1:5c:3b:44:f7:8c:31:4f:09:60:5c:3e:b8:
                    01:70:22:cf:83:2d:53:50:0d:c9:a8:ee:42:c4:4d:
                    40:ba:35:a0:39:54:d0:d3:6f:10:4d:99:09:0b:57:
                    95:d5:ae:3c:0f:18:c8:e3:19:31:38:75:1b:35:63:
                    15:5f:5b:5c:d0:54:24:9f:2d:d6:26:34:e3:1e:da:
                    33:ce:f8:c3:19:0a:e9:81:40:b3:7c:c3:bf:bd:1c:
                    5c:e8:b2:11:e3:b2:67:25:2c:7a:71:78:14:e0:1b:
                    00:b5:44:e5:87:a6:a6:75:c3:8f:25:e8:91:ef:45:
                    c1:be:c8:69:09:8d:f2:92:a9:e3:0f:d7:5d:76:9d:
                    84:1b:69:79:a9:92:1b:c7:e0:68:47:d3:9c:04:93:
                    4a:d3:ff:81:db:02:b7:2f:9d:1e:db:c2:a5:cc:f8:
                    78:7c:e4:63:fc:a7:c8:9c:20:f3:1a:53:f2:61:8b:
                    a8:74:9b:3a:e9:3e:18:0f:5d:d7:54:ac:8d:2c:c0:
                    65:fd:c6:29:e7:f4:d3:61:c6:8f:90:da:73:23:c1:
                    ba:9f:4e:3d:6c:ea:96:e8:5e:20:89:24:15:3d:ea:
                    07:04:d2:7b:53:da:7e:bd:c7:0f:dc:e2:bf:c0:23:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:97:71:EB:87:BB:8E:36:50:59:D5:03:D9:F3:1A:58:A8:7E:D3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63018bc9-f033-3d0a-bb66-1b80b6527407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:99:27:bb:fc:91:fc:76:7b:11:20:7e:8b:26:ae:e5:6a:
         2e:b9:4f:7e:10:bb:8f:68:18:49:20:2d:03:3c:a7:f6:5d:16:
         e4:da:33:a7:7e:f4:e1:c4:7f:fb:7a:90:ba:fc:30:e7:1a:8b:
         a6:cf:78:12:de:ec:8b:70:9a:7a:09:50:79:9e:f5:69:a1:43:
         49:e3:7d:26:95:da:ca:65:58:27:88:74:c8:97:20:67:0a:35:
         f7:db:0c:57:4c:6b:69:1b:de:0f:68:6d:52:1f:6e:1e:27:20:
         fa:f0:ba:83:c2:ab:1e:b6:ea:60:48:c1:83:d3:69:53:97:c1:
         99:26:d6:49:93:7c:04:31:83:e1:93:da:03:a4:9a:3f:0f:24:
         dc:60:8f:a8:b5:e1:76:c5:a1:a2:d9:56:dc:ae:a2:ad:2b:1b:
         20:62:38:10:33:e7:95:7f:a1:4a:74:27:58:2b:86:45:4a:35:
         7d:20:9c:02:33:35:06:aa:63:63:4e:df:2b:a3:1b:0f:f3:8a:
         31:88:6a:b2:d0:63:9e:79:77:22:8e:5e:e0:52:4d:7a:2c:cf:
         13:d4:eb:01:d2:36:8a:9b:1b:8c:5c:20:f3:a6:40:ca:1c:7c:
         dc:bc:2a:88:9c:06:8e:a9:19:8b:c6:14:70:23:9e:07:14:c5:
         03:b9:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:12 2024 by rpki-client on console-ams.rpki-client.org