Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
File:                     65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa (raw, json)
Hash identifier:          C5y4bsvnFPIbkuht2++gSP8z3NgOwd961oAeLaKUaaA=
Subject key identifier:   7C:A3:A7:5F:77:77:91:9F:85:C8:7F:9C:95:48:96:8D:8E:FF:8C:A9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0A5ED3C796954491FEC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:0a:5e:d3:c7:96:95:44:91:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=96defb90-f696-4dd6-85c3-29c958c58e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1f:74:df:57:8f:be:dd:e3:73:9d:5b:d7:6b:
                    34:06:55:d4:2e:3b:16:2d:57:26:df:7a:66:d0:9f:
                    d6:24:4a:be:a2:f1:cb:b3:c0:d4:2f:95:59:c6:0c:
                    d9:db:59:75:57:f6:77:83:a7:01:69:5c:26:2b:f9:
                    f8:96:f5:d9:a0:a4:91:6a:78:67:89:f2:69:f1:9d:
                    31:99:8f:00:bd:73:95:43:ed:28:30:a8:49:45:e7:
                    aa:a3:34:c4:2a:66:91:97:63:51:8b:30:ea:96:66:
                    37:15:8d:ca:f4:46:b2:29:28:a7:c4:65:69:04:30:
                    0e:b4:90:7a:fa:87:3a:3b:a8:13:a4:18:fb:68:84:
                    04:d3:6d:bf:d8:e2:40:96:19:35:7e:b9:1c:04:c1:
                    2d:40:b3:6c:70:65:6c:1f:6a:47:85:9a:88:63:ad:
                    b3:9d:66:3b:1d:ba:ce:8d:a6:2f:13:f3:06:74:5a:
                    77:a4:df:63:08:73:d0:fe:b8:86:08:dd:0f:75:d7:
                    54:91:7a:89:b0:69:4b:3b:5c:82:04:9b:45:93:a9:
                    5d:94:c5:b6:33:76:1b:8d:1d:2d:34:37:67:62:1b:
                    5a:0b:ac:f0:a4:fd:5d:90:c6:c2:7b:84:9d:2f:f6:
                    ec:e7:ae:16:f7:c6:a8:ae:8a:89:10:c5:de:92:e6:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A3:A7:5F:77:77:91:9F:85:C8:7F:9C:95:48:96:8D:8E:FF:8C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:2a:e6:f9:98:f5:d8:a2:fc:ea:e9:53:6d:02:c7:50:26:77:
         46:20:75:3b:10:d3:c5:14:4d:c3:eb:f8:04:97:a4:3b:2e:4a:
         bb:12:87:e7:92:ae:b4:c0:56:d1:bc:17:a2:0c:37:ef:2b:04:
         d8:51:10:c1:4a:cd:d7:51:76:c0:87:6c:8f:36:53:d8:db:53:
         a5:ac:08:d7:4a:89:97:6b:70:d4:bb:21:f7:e4:f5:89:ad:72:
         d5:a8:74:03:dd:0e:2b:18:9c:c1:ff:5e:a8:bc:cf:ba:8a:73:
         03:e5:87:11:7c:2c:c8:14:c7:fc:1d:d3:26:89:b5:92:d5:6a:
         02:bd:8b:10:7f:b9:14:ba:c3:1c:10:f0:58:91:69:26:80:fe:
         b9:52:66:b8:c8:5f:29:8f:8e:76:8b:57:01:63:95:3c:b4:78:
         29:37:4b:f0:70:f3:47:2f:7e:d9:9e:f8:29:ae:2b:62:f5:68:
         3f:c7:a6:5a:09:2a:92:da:5e:d2:c3:3b:0b:cc:f7:3f:72:91:
         82:f8:ac:3e:82:7f:71:e2:f8:f1:79:93:7d:c2:6f:3b:18:7e:
         b3:a4:fc:26:10:a4:a7:93:d5:d3:4b:b3:e1:04:ed:d5:66:f4:
         1f:d9:ec:ae:33:e1:2f:ab:1c:79:07:79:88:76:5b:e2:ad:d9:
         06:5a:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:40 2024 by rpki-client on console-fra.rpki-client.org