Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa
File:                     6d02bb79-bd14-3045-b676-fd4335e3f038.roa (raw, json)
Hash identifier:          vD+/WRsNz1yFutmeyZFww6tNm/ULWUyw2XXfmKM51pI=
Subject key identifier:   50:43:C8:70:EF:59:A1:2B:4C:D7:54:BB:25:9E:27:E4:D1:6F:9F:BB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DC3AC3A7F1DF51BCE6280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:c3:ac:3a:7f:1d:f5:1b:ce:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=81b64962-0d31-4173-bc72-bc6324806559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:db:2c:ee:e0:7e:fa:2f:40:b9:85:dd:7f:
                    19:fe:87:0f:3b:9a:32:a5:70:79:76:5a:77:02:2f:
                    e8:33:95:6b:07:ed:c0:21:df:70:3b:26:2d:71:8c:
                    18:fb:a3:83:f4:af:d3:de:bc:f2:32:22:61:cc:02:
                    36:3d:22:08:87:45:4a:6b:00:a2:11:91:65:1d:a9:
                    22:ed:e3:22:dc:cd:82:59:03:fa:81:73:b3:cd:ef:
                    d1:e3:8a:ea:b7:36:d8:bf:ae:bf:87:07:a6:13:b6:
                    ef:ec:fd:eb:48:73:a2:1b:e0:c0:35:b5:21:cc:cc:
                    83:e8:76:2d:42:0b:46:5d:02:a1:50:3e:62:6b:f6:
                    ef:f4:70:13:22:6c:3a:f3:7f:39:5d:da:e7:91:9e:
                    4f:55:8f:88:b9:b9:37:86:39:9c:5e:02:62:97:01:
                    5f:3a:2e:6a:3d:fe:f1:cf:9a:cb:44:4f:cf:43:32:
                    45:4e:41:21:fe:7a:19:90:b9:59:08:17:d0:44:41:
                    0d:9e:0a:52:4a:bb:35:09:79:58:99:ef:26:6d:4c:
                    d0:c9:54:dd:1e:4a:1d:10:59:2a:01:69:af:b9:8d:
                    19:da:46:44:3d:7b:20:47:b6:f9:72:8a:2f:ce:99:
                    75:02:52:13:58:a9:0e:c2:9a:a3:7c:a1:81:cd:4e:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:43:C8:70:EF:59:A1:2B:4C:D7:54:BB:25:9E:27:E4:D1:6F:9F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:41:45:a7:19:48:cb:c6:1e:1a:34:95:1d:43:38:3a:3f:df:
         55:01:a4:ac:af:37:ce:67:64:60:54:4c:02:da:5c:0f:90:16:
         bb:cf:09:78:55:e9:71:4d:87:75:99:e5:25:6b:e9:27:df:a3:
         ab:05:99:59:68:5f:b8:46:de:e8:9e:ea:a5:84:4d:b6:5c:04:
         13:c0:45:45:d6:d0:1c:5f:61:a0:0d:e9:4b:16:e0:47:ed:6a:
         d6:01:1e:15:68:bf:78:8b:4b:ed:aa:f5:27:d7:f4:3d:89:58:
         66:44:5d:b3:64:e8:f4:49:eb:f7:74:92:b5:58:e4:c9:62:86:
         2d:96:6c:91:90:a3:6d:1f:a4:78:72:6b:f9:a7:d3:35:db:e6:
         07:3b:42:03:59:9c:29:b2:0d:73:89:97:f2:00:7b:21:0d:38:
         ae:1f:40:f8:84:4f:a3:fa:84:29:49:ed:0b:90:ff:5d:5e:7b:
         21:80:f1:11:0f:2d:99:4c:ca:3e:8f:08:7b:6c:83:d7:df:aa:
         36:81:c6:92:b6:12:1b:5d:3b:c4:bf:93:1b:11:7f:d8:4a:cb:
         85:9b:ae:70:f5:56:19:b1:49:99:a3:ea:ff:6b:72:b2:dd:30:
         0d:e3:e5:1b:a2:7a:9d:53:14:a1:b4:f9:8b:29:fc:cf:92:88:
         63:2a:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:38 2024 by rpki-client on console-ams.rpki-client.org