Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
File:                     635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa (raw, json)
Hash identifier:          jptRUIei/9/pQIflEBFdFDs3ynW/v9jxJOVZoCQspX8=
Subject key identifier:   58:50:05:16:21:77:2D:AC:D1:9A:80:BB:2E:4E:21:FF:6A:38:84:D8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D73BE9A5C11A696697FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:73:be:9a:5c:11:a6:96:69:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7ec14e65-52c3-4b2b-b946-1b327a559323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:4c:b6:96:f0:45:83:de:e3:86:52:bd:f5:
                    74:99:bc:a7:09:b9:5f:39:2d:35:b2:21:2c:ed:05:
                    a6:9d:a1:b2:6e:1e:70:c3:86:b2:38:71:a9:c5:59:
                    b6:b4:7e:cf:f8:3e:16:1c:10:e1:8b:63:20:81:eb:
                    75:46:54:45:b7:98:ed:5f:f6:2b:cc:b4:2e:0e:6e:
                    0b:20:f3:64:92:5f:d4:1b:14:ab:80:00:f9:ab:eb:
                    4a:2e:49:c7:c3:f4:e5:64:d1:94:fb:9d:e2:71:4b:
                    29:37:a0:0f:82:f9:8d:dc:fd:35:2b:68:37:08:ca:
                    00:79:88:f9:04:95:83:f0:39:af:fc:1c:06:d7:03:
                    9f:f2:60:5d:57:45:04:a2:f4:51:82:dd:1f:21:8c:
                    8a:14:a4:7a:c3:85:de:1c:cb:61:48:75:3a:a2:0f:
                    98:93:77:f0:75:a6:ac:1d:73:4a:50:bc:56:88:07:
                    21:f7:8d:39:d4:57:6b:d0:d8:c9:16:a3:a4:d7:1f:
                    09:d0:40:a7:f4:ea:b6:b3:fe:6e:f4:f9:7a:44:6c:
                    b0:42:11:9d:3c:28:b8:7e:29:80:30:a6:5c:e7:2b:
                    27:59:72:65:5f:8b:fb:a6:d9:ed:58:f4:1a:aa:4d:
                    34:4d:35:3e:9a:c5:05:64:1d:7f:10:dd:90:02:ba:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:50:05:16:21:77:2D:AC:D1:9A:80:BB:2E:4E:21:FF:6A:38:84:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:d3:cf:40:fd:0e:24:48:a9:69:2b:4b:69:fe:57:be:9d:f7:
         4b:bc:10:14:f2:eb:23:22:9b:08:fa:20:49:e9:03:c3:d9:ba:
         2b:4e:f4:3a:11:d5:4b:33:96:1b:8b:14:9e:3b:2c:63:4f:f7:
         10:f8:40:fa:af:1f:22:16:4d:28:b6:b1:d3:84:5f:43:23:d7:
         3b:9d:28:79:bb:eb:1e:87:e6:25:f1:2e:73:3c:6e:40:70:05:
         1e:85:76:6b:ff:48:7d:13:be:a1:c0:a5:44:0b:18:be:1e:2e:
         44:4a:d4:e5:01:db:06:4e:91:4d:0c:f2:fd:1c:4c:21:ba:a3:
         0b:2e:dd:19:ff:2c:2d:00:9c:6c:e9:c0:f4:77:f8:b1:df:dd:
         18:df:00:cd:fa:b2:82:75:4f:f8:2b:cd:85:30:7e:ce:0b:1f:
         d1:e5:bb:0e:96:02:49:90:bd:2b:08:47:ff:4a:cb:2c:3a:65:
         97:26:f2:1a:a8:a4:34:eb:2d:72:6d:8a:93:f3:67:f8:7b:81:
         66:4e:0e:8a:fd:5d:e5:c9:a5:61:f3:34:73:19:d0:c8:84:b3:
         9f:87:10:b4:85:35:46:46:19:f1:a6:56:72:2d:34:a0:ba:76:
         fb:f8:45:8b:4b:c2:0d:44:f5:cd:c3:d2:af:02:20:1e:f0:c4:
         d8:b8:d9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:39 2024 by rpki-client on console-ams.rpki-client.org