Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa
File:                     709022ba-bce3-332b-b27b-e9977a14f24c.roa (raw, json)
Hash identifier:          A9ihGOmGjnYq/2C1clo2/m8KY/57W43fpErE1xuJeq8=
Subject key identifier:   0C:3C:75:1D:7F:7A:37:7B:43:7F:6B:E8:CE:61:AE:53:6A:32:DF:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A70E72BECCDCA5B82D480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:70:e7:2b:ec:cd:ca:5b:82:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cead2b14-07e6-4fbe-9898-a5a8553d07f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:d5:74:7f:2a:20:b2:09:6c:89:ef:e5:76:
                    b2:79:75:4b:fb:62:08:fe:43:d1:47:90:29:88:e8:
                    5f:82:c8:07:64:57:9b:11:66:86:9b:c5:c2:b0:0b:
                    43:97:4b:f8:16:c5:89:ad:6f:9f:19:ff:c2:1e:49:
                    f4:33:d8:fd:ca:84:56:ff:f7:69:80:46:6e:11:9e:
                    b1:8e:14:58:31:e6:3b:f3:06:ae:97:41:1e:d7:a9:
                    37:f8:58:b8:69:7b:be:14:f6:9f:42:36:7c:17:c1:
                    24:dc:32:ef:5c:b6:2f:12:95:f0:08:88:47:8d:a2:
                    0f:dc:69:31:38:74:1d:fb:43:63:aa:8f:80:a0:f3:
                    ac:f1:11:f3:00:81:e5:16:ee:f4:07:06:03:b0:da:
                    51:98:a9:af:4a:9f:69:ee:af:c0:c1:5e:ad:e9:a2:
                    5a:0e:f1:ab:2c:dd:b3:d0:53:9b:35:41:f8:96:cd:
                    9c:85:ce:53:db:ad:ce:eb:6a:db:43:35:ea:03:cb:
                    62:6d:ca:07:40:e7:23:ba:2f:ef:70:bb:8f:55:4b:
                    da:74:2e:1c:0e:c5:36:f1:ac:f4:94:24:cd:8f:11:
                    a1:df:c3:bd:40:22:64:05:20:39:55:94:2b:99:c6:
                    f5:be:a8:1d:9b:cb:7f:92:8e:57:58:7c:b0:80:24:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3C:75:1D:7F:7A:37:7B:43:7F:6B:E8:CE:61:AE:53:6A:32:DF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:c4:d4:2b:46:15:20:af:5a:f8:1f:a9:01:e4:89:98:f1:
         fa:ae:40:a6:0b:90:6c:3f:92:fb:4b:78:81:d6:ee:22:92:8a:
         37:af:b4:35:d6:0b:f3:e9:61:14:c2:1e:22:f5:d5:f7:ee:2b:
         76:5d:27:8d:d4:dc:03:55:2d:89:a0:85:07:f7:7c:5d:4a:2d:
         be:61:0a:cd:06:2c:66:12:cc:a9:39:3d:bc:e5:0d:d6:66:00:
         b8:3a:0d:9e:ab:4b:29:96:b1:68:7c:e4:6e:3e:15:76:56:e5:
         61:16:d6:e8:e5:f9:e0:97:d9:a2:92:54:ff:94:f5:9e:c7:dd:
         57:e4:68:1d:44:9b:ad:ca:6d:67:ed:44:af:2e:9c:d6:39:48:
         3a:47:9d:c4:95:4c:c4:97:26:4e:3e:7a:dc:cd:aa:37:f5:a5:
         1c:8a:af:f7:e6:16:34:28:67:92:2d:c6:a7:14:60:72:58:50:
         e2:df:1a:55:45:c7:dc:bc:e3:85:0b:21:f4:90:bd:c7:99:a0:
         58:4c:c8:21:98:d4:f6:6a:5a:1e:a0:92:12:c5:2c:5a:83:88:
         24:f8:c0:96:bd:7b:dc:bc:ca:6f:09:ed:07:b5:91:b0:b5:60:
         03:d5:c0:71:50:bf:e7:db:0a:0d:c0:ef:80:c1:45:61:df:b5:
         e0:16:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:38:13 2024 by rpki-client on console-fra.rpki-client.org