Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b65eabc-3b55-3464-96c6-935b7c2c6b09.roa
File:                     6b65eabc-3b55-3464-96c6-935b7c2c6b09.roa (raw, json)
Hash identifier:          pEgIrbHKOBwsd1HjhuUa4d6ri/Hsguh6FslgOicLYsI=
Subject key identifier:   D7:E0:5E:2C:15:8F:63:3C:77:D8:3F:7E:A1:C2:AB:98:3F:13:47:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D7A337B2335EBDED9BC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b65eabc-3b55-3464-96c6-935b7c2c6b09.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:7a:33:7b:23:35:eb:de:d9:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6b902394-4cc4-48c5-b1b1-c6e59d4c4b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:67:c4:8d:c6:fc:1d:b9:00:41:c2:79:46:
                    68:aa:76:aa:f2:3b:23:fd:8b:3d:6b:f1:71:f7:b6:
                    61:29:55:97:67:6e:2c:c8:9d:67:b5:21:f7:f4:c5:
                    87:93:f7:a4:00:bf:27:9e:0c:e1:72:d3:98:55:08:
                    94:11:4d:ad:ff:16:bd:51:dd:f7:5a:b5:35:06:53:
                    54:aa:84:57:82:a2:6c:72:70:2f:fa:cb:27:09:4b:
                    25:ba:8a:fe:e7:c5:28:f4:43:e8:e1:06:51:48:9d:
                    c2:44:12:fd:3c:72:5b:30:36:7c:ce:c9:5d:e3:49:
                    d9:3b:d5:5a:6d:24:bb:41:41:ad:7c:4d:89:81:62:
                    d1:20:2e:35:50:c2:a9:6f:3f:00:6c:92:ea:d6:2d:
                    74:90:71:65:5c:0d:45:d4:a9:3c:26:0e:90:74:42:
                    34:fb:6f:84:e2:5e:76:4c:62:ed:55:2e:5c:c7:a0:
                    42:67:a2:a3:0c:ee:b4:e2:87:ea:21:6a:71:7a:f4:
                    0d:d3:26:12:65:f2:dc:f8:53:4e:ba:e2:2b:af:81:
                    34:6b:05:96:ea:f3:f7:92:a2:21:a2:6b:1f:01:2c:
                    80:7d:3c:90:d7:98:8a:3d:b9:4d:7a:53:8b:51:86:
                    c8:23:4e:31:3d:e5:fa:b8:5c:4e:9d:de:fe:39:d8:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:5E:2C:15:8F:63:3C:77:D8:3F:7E:A1:C2:AB:98:3F:13:47:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b65eabc-3b55-3464-96c6-935b7c2c6b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:13:75:30:6a:8a:6c:d8:eb:d3:5d:eb:a4:5b:4e:e7:25:16:
         03:48:b2:83:52:23:59:d1:eb:d9:37:6d:ff:59:59:03:51:cc:
         99:57:41:2d:d3:f2:90:b5:ae:48:03:0d:23:74:a4:cf:b4:99:
         83:ee:57:b1:5b:31:82:23:21:66:69:62:98:98:8c:b0:3e:cd:
         46:c6:d7:b8:f2:b5:ea:a3:a5:cb:e1:fa:3f:01:c5:9f:81:49:
         af:22:3f:5e:b9:3f:45:b1:a1:64:b8:dc:c9:50:3f:92:cc:24:
         b4:93:74:01:00:3b:03:27:37:fb:55:90:e0:64:9a:80:f6:d7:
         ec:63:44:56:ee:92:45:16:22:25:e9:5c:6a:d0:38:2c:4f:43:
         c7:91:d9:a0:26:c5:9f:60:5b:b5:36:76:6d:38:03:82:c9:0b:
         2c:25:be:de:6e:bf:54:e8:db:a3:3b:91:e2:81:26:d2:87:37:
         b2:fc:1a:24:58:a6:4d:d2:bc:78:01:48:2a:85:a6:07:0a:a8:
         cb:a3:0a:c5:f5:f2:7c:6e:44:b7:42:a2:fd:dc:bf:62:f5:83:
         69:e8:d8:50:64:f2:b9:89:4b:f7:1a:c7:75:36:a8:1c:03:25:
         28:6c:41:78:db:3e:69:4e:cb:e7:f7:51:f1:25:67:65:97:80:
         c2:7b:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org