Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa
File:                     6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa (raw, json)
Hash identifier:          4MWN+SozGPwR6qx7dJM92s7w7idxe7AG9n1LLccoW1k=
Subject key identifier:   B9:C1:77:29:F6:76:88:75:2C:4D:FB:61:F5:33:75:9B:15:E2:84:46
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B066C5BB03F9BFCCA7EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:06:6c:5b:b0:3f:9b:fc:ca:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=dcd9c358-6e59-4504-96a5-58242d98ede5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:ae:4c:74:4b:be:aa:e0:df:75:c1:3f:c4:
                    7a:b3:41:76:fd:3e:dc:fc:f7:be:d7:93:db:d6:bb:
                    7f:4d:dd:dc:1f:de:82:60:8b:c7:6a:27:47:31:54:
                    07:8d:9f:bf:1c:1e:3a:e5:95:1d:fa:ee:57:b1:11:
                    0a:d6:2f:d4:20:50:27:61:ee:e9:60:49:73:00:08:
                    b1:5c:30:06:a8:35:2b:49:4d:eb:fd:9a:3a:a6:ef:
                    bd:36:ec:53:84:7a:6e:6c:e4:c2:d5:5d:78:2b:0f:
                    11:e9:12:17:32:4b:84:b4:08:9f:b8:1c:65:a7:72:
                    f0:76:85:4b:66:14:b3:33:8f:01:42:e0:ad:5e:1a:
                    4c:02:8e:4e:9d:bc:27:8a:8d:dc:d6:15:13:b0:fc:
                    60:b0:1d:b6:7d:91:a2:7e:5d:fa:8a:78:97:e9:75:
                    33:00:81:ba:cb:39:72:71:f2:12:fd:9b:c2:92:32:
                    5f:84:67:bc:29:ef:94:c8:6a:e0:85:6c:e2:03:89:
                    26:66:f3:1d:da:fa:74:66:59:6c:96:e0:4a:b4:47:
                    90:0e:a1:35:89:1e:77:00:ec:16:96:5b:7a:a6:a1:
                    db:45:84:df:a6:f4:5e:7e:c9:3f:bb:ca:0b:88:91:
                    48:72:a3:62:7c:e2:b1:c3:dc:fc:c1:df:2b:bc:0e:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:77:29:F6:76:88:75:2C:4D:FB:61:F5:33:75:9B:15:E2:84:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:e2:f3:19:ec:99:e6:26:7f:e8:42:f5:eb:3b:12:67:bf:
         91:ba:b4:09:f6:86:ad:aa:81:87:1d:4a:30:f0:fc:60:a8:a4:
         bb:f8:ec:77:dc:6c:24:a6:27:b9:42:1b:0e:9c:86:b4:0d:57:
         df:6c:8e:8c:53:8e:70:bc:ab:08:f8:87:a8:86:4c:76:a3:b0:
         e6:f1:9a:bb:06:2e:2f:a5:9d:e3:e4:04:fc:dc:1b:89:d2:52:
         e7:1c:1e:8a:1d:87:49:3e:9d:91:ef:19:d8:e5:37:0f:9f:31:
         51:82:9c:43:bc:e8:94:42:41:e6:fc:d2:79:a4:9f:b9:2b:99:
         44:94:7d:53:a0:2b:03:28:a9:84:fa:80:1e:47:d1:e3:af:f5:
         28:5d:94:54:55:f6:9d:f0:8b:de:d0:21:53:e2:12:a7:1f:aa:
         1b:b7:0d:66:04:c8:c3:e1:a0:03:87:87:39:a5:f4:75:97:58:
         66:0b:31:c1:87:21:4e:07:a3:c9:f3:35:54:2d:4c:12:c9:18:
         3e:e5:42:4d:dd:fa:90:c8:f8:6e:7f:a9:86:c8:b5:09:bd:30:
         4d:99:1a:a6:a5:7a:a2:35:f0:fc:b2:c5:e6:4c:63:25:83:ed:
         b7:dd:97:df:f4:e3:7f:fc:20:4d:de:a2:85:67:f3:16:56:a9:
         39:dd:27:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:17:26 2024 by rpki-client on console-fra.rpki-client.org