Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c287d3b-817a-3e4d-a3e3-e1228c2a1dc2.roa
File:                     6c287d3b-817a-3e4d-a3e3-e1228c2a1dc2.roa (raw, json)
Hash identifier:          sWU+EFmc7VlKDlmdVHBHMjZrjR0jrPvi8Tko4A6z7J0=
Subject key identifier:   22:5F:93:0A:C1:5C:0F:E7:4C:ED:AB:82:6A:9F:0A:CD:E1:19:C1:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A2B490E22B8FF8D92A080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c287d3b-817a-3e4d-a3e3-e1228c2a1dc2.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     40306
IP address blocks:        70.41.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:2b:49:0e:22:b8:ff:8d:92:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2daeacfc-28ad-4254-88f7-e0b5b9e26633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:53:e6:0f:18:0f:19:88:55:5b:9c:b1:06:
                    cd:c7:d3:90:5a:e7:cf:28:bb:12:0b:96:65:85:df:
                    15:af:06:37:1a:c9:47:3f:e9:e7:59:03:ca:eb:6d:
                    f5:f2:d7:26:68:5b:15:27:f3:54:53:3d:d1:87:ed:
                    c4:89:c1:40:f7:83:39:b0:6e:57:46:5d:19:56:6f:
                    ff:c8:32:29:bf:73:c0:75:5b:de:a0:c9:94:d8:53:
                    91:83:1a:b0:ad:52:07:6d:a1:10:c6:72:ab:f7:9b:
                    b4:29:cc:41:4f:e9:b6:78:ca:02:af:d8:a2:63:9e:
                    c3:75:6a:8c:ad:2d:41:ac:ca:dd:49:ed:18:f5:50:
                    d0:87:ec:cc:06:5f:fc:1d:0a:0f:97:1d:33:40:73:
                    a4:67:ae:0f:45:d2:a4:c3:9e:09:fb:1f:98:81:69:
                    0d:fa:4c:4a:6d:93:6c:d7:33:b9:43:e3:39:bd:2b:
                    46:ed:dd:2d:92:e7:e9:40:18:45:87:d0:85:3a:13:
                    a2:6e:86:04:78:d2:96:11:84:39:5a:7d:76:16:93:
                    65:6c:b4:31:58:f9:87:ee:ac:5f:25:be:77:1e:36:
                    b8:e4:39:a4:e5:23:63:af:d7:d5:ee:02:8c:42:eb:
                    eb:1c:bb:c7:f4:4f:20:af:6e:33:b3:0d:7d:20:bb:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5F:93:0A:C1:5C:0F:E7:4C:ED:AB:82:6A:9F:0A:CD:E1:19:C1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c287d3b-817a-3e4d-a3e3-e1228c2a1dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:10:08:7c:77:0c:44:be:7f:45:a6:68:f3:7d:57:65:2e:
         b1:f9:81:13:01:e8:8c:0d:e0:95:b1:0e:94:8c:e7:ea:1b:fe:
         20:83:87:fa:20:3c:3e:41:58:e3:0c:21:47:d1:99:98:55:af:
         2e:e2:c5:6a:14:93:4e:36:b3:9b:0b:05:84:d4:d1:5f:a9:c1:
         dc:a5:85:4e:81:2a:ea:08:b5:64:44:1f:ca:39:fe:f6:a5:87:
         29:65:86:8b:38:34:a9:23:5a:ab:3c:79:45:99:10:48:65:7a:
         7e:14:32:5d:62:a5:01:5a:d6:78:89:d7:53:fc:3b:48:aa:d2:
         88:73:88:76:3b:07:52:4c:bc:96:f3:c5:b8:5a:98:e1:96:fd:
         db:82:42:e7:ac:46:c1:de:0e:d7:be:1c:67:79:d6:74:d8:f3:
         37:03:bb:6b:33:82:b8:1a:2d:96:70:95:3c:f5:52:0a:0b:dc:
         ba:c6:9b:9d:ba:d2:95:b7:7c:6e:b7:b1:76:1e:22:9b:f9:00:
         bd:7e:55:5d:ab:fc:1f:94:0f:b4:f5:42:01:75:e2:ee:ad:c7:
         09:76:87:5e:0b:49:32:db:1f:f9:7f:35:71:66:09:d2:dc:79:
         5b:ee:32:25:cc:41:3a:34:08:f9:0b:d6:ad:c4:13:87:ff:80:
         1c:1e:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:56 2024 by rpki-client on console-ams.rpki-client.org