Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a535ffd-3ab9-3f6e-8176-13e380c77eea.roa
File:                     6a535ffd-3ab9-3f6e-8176-13e380c77eea.roa (raw, json)
Hash identifier:          Uy8MOPq0PpabWRtwYap1KUbWABNeL8AVVSMkIg/v+uU=
Subject key identifier:   77:64:11:26:CE:C3:D8:34:36:F7:65:F9:AF:E1:A7:FB:E9:EB:9E:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D803B648FB17279802380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a535ffd-3ab9-3f6e-8176-13e380c77eea.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:80:3b:64:8f:b1:72:79:80:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c71f7f63-dee1-40c6-b725-ede7982ac12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:0c:3c:76:8e:5d:78:ac:eb:b8:e3:ee:5c:
                    90:b9:f0:2e:2f:4d:09:18:b5:7e:fc:15:de:3a:56:
                    3e:ae:16:01:e8:3e:f0:f8:a6:2d:a3:63:3b:a5:26:
                    8a:e0:8d:6a:cf:c4:17:8d:45:6e:d6:b5:91:20:cf:
                    72:fa:48:9c:66:b1:9a:22:3e:dc:20:f9:0e:29:47:
                    fd:2f:76:16:20:3c:61:d6:94:e0:79:e1:03:d4:41:
                    24:4a:44:4f:3b:c7:3e:70:83:58:5e:42:97:af:dd:
                    f5:99:a6:42:69:1b:8a:fd:a9:bb:e0:71:f8:f7:b8:
                    ac:b6:46:1a:14:c3:20:9f:53:c9:d2:7f:f8:33:a6:
                    5a:94:94:45:02:2d:12:23:a5:d6:c7:c7:6f:83:4a:
                    a9:cc:1c:19:2e:61:2e:03:5d:6b:a5:97:7d:8a:ab:
                    be:7b:cd:03:53:9d:08:24:19:f5:ab:4b:64:1f:d5:
                    57:5e:ee:12:6b:08:d8:7b:47:b2:a6:ea:a0:fb:31:
                    d5:9a:84:7d:1b:2f:05:a8:a3:36:8d:af:47:fb:f8:
                    01:21:38:f2:28:13:33:b2:e4:e9:aa:81:34:3d:32:
                    6a:f6:8b:de:00:0e:f6:a2:c3:36:f9:17:82:29:f2:
                    88:0c:6a:e8:68:b6:ef:f1:0f:90:62:50:20:81:ff:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:64:11:26:CE:C3:D8:34:36:F7:65:F9:AF:E1:A7:FB:E9:EB:9E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a535ffd-3ab9-3f6e-8176-13e380c77eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:3c:ff:8c:d1:51:3f:f2:88:4a:ff:2f:58:37:2f:b7:b1:52:
         de:8d:3f:9d:e7:bb:9f:19:4d:94:2c:48:ef:e1:b8:37:d4:73:
         b7:04:a2:11:ff:4a:53:95:4d:d2:c4:c5:c4:64:f3:d6:30:56:
         04:66:dd:3f:73:70:ea:cb:2a:64:ff:fb:ee:23:6f:c4:e4:05:
         39:16:6f:0b:43:e2:28:ac:ce:f5:7e:90:52:e9:3c:b6:c5:33:
         ca:7d:f0:40:f9:53:53:3e:3f:44:11:b7:bf:46:dd:9f:7d:d2:
         75:1a:68:06:ed:d7:b8:99:47:85:a2:5c:26:6e:b6:ee:f4:be:
         fe:67:e5:92:90:4b:2c:44:06:4c:72:87:7b:21:d9:df:8b:62:
         40:0c:01:ff:d7:7f:3f:e3:0c:c8:0a:50:5b:74:7b:50:fa:89:
         2f:ba:e1:7e:18:eb:8c:4a:06:49:35:54:97:d7:1a:bd:3d:74:
         4b:ca:25:8e:ab:40:88:f1:16:e1:70:ff:15:74:bd:7b:20:53:
         21:d3:9f:21:52:07:f9:67:c8:a6:44:1c:68:30:70:07:e9:74:
         97:0f:43:0c:78:69:ca:b6:1c:32:a4:fd:74:87:9e:9a:f4:f1:
         8b:9b:12:7f:16:83:1b:29:c5:ae:14:60:c6:eb:7c:70:19:14:
         31:bc:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org