Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa
File:                     7299b5dd-141b-3229-868e-dd2b5a44ef10.roa (raw, json)
Hash identifier:          ZiWCbHMUVALawDi9UZ9cvdN+mj/438m5y2CrlHxH+Eg=
Subject key identifier:   DC:A6:DD:F3:11:4E:56:3A:8F:30:A0:02:CE:66:D7:2E:FD:0E:41:95
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F432858454F02C30E31603ECBDD6EA1C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     40306
IP address blocks:        70.41.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c3:0e:31:60:3e:cb:dd:6e:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=8452807a-bbfa-4efa-a69c-d203de0eaa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:91:ff:fe:b1:48:7d:fe:39:3d:25:c0:fa:
                    12:b2:44:29:a6:64:73:b6:4b:f5:67:dd:f9:c6:ec:
                    93:96:fa:7b:29:18:11:a4:cb:13:92:cd:11:ee:e6:
                    02:aa:df:c7:1d:91:8f:eb:db:c4:f7:ff:b9:e6:a1:
                    2e:19:f6:94:54:46:f1:4f:15:c9:5d:66:9f:d1:03:
                    4a:97:fe:2a:e9:bc:58:ad:50:f3:95:61:21:c0:fe:
                    08:83:2c:52:b8:ee:02:e0:7a:a3:61:2d:83:7e:f6:
                    6b:c4:f8:ea:2c:b2:cf:d3:fe:a8:a0:f0:2f:7d:21:
                    bb:9c:f5:79:0b:1f:8f:92:a2:d3:0e:30:2f:94:35:
                    29:b0:0f:9a:00:28:ff:47:ee:e5:42:71:fb:50:20:
                    49:12:ac:8d:ac:a1:37:9c:32:0f:5f:16:e8:85:7e:
                    c9:16:9b:b3:f4:6a:39:0c:74:e1:82:a4:01:79:31:
                    62:16:87:45:63:ee:14:bd:22:05:88:a9:f0:e2:01:
                    3e:e2:75:65:14:ba:79:52:c4:61:e0:6e:fb:a0:5a:
                    bf:c1:87:35:10:5b:9a:b8:96:04:9e:7a:ad:36:70:
                    4d:4b:4d:51:84:68:65:40:ee:f9:21:e2:8c:31:ab:
                    11:f9:75:7e:cd:f4:4c:98:54:25:91:ae:d7:2c:73:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A6:DD:F3:11:4E:56:3A:8F:30:A0:02:CE:66:D7:2E:FD:0E:41:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:48:7d:3b:bd:49:9e:99:8d:5c:3b:0c:1d:60:5d:3f:69:1d:
         9e:e5:10:80:73:26:1a:f8:f6:12:65:39:5e:bb:44:6b:0d:d7:
         90:ac:22:80:fe:7e:78:53:9a:41:3c:b5:e6:5c:c9:cd:98:c6:
         5d:82:5e:9b:b1:f0:6a:82:50:f6:90:83:6c:78:3c:43:35:e2:
         93:fb:e1:e2:b7:18:94:b1:cd:fd:2a:25:d9:fc:2b:f6:f9:61:
         ae:d7:5e:99:d7:5c:e2:67:b3:64:c9:fb:83:dc:62:50:d7:94:
         7f:c7:5a:0b:66:63:18:86:5a:01:34:36:a4:36:2d:bf:60:70:
         ca:a0:db:df:f4:c8:eb:4d:a0:7e:29:b0:a2:a2:24:eb:54:6a:
         5d:27:51:c5:a1:1a:fb:be:79:f0:a2:af:7c:4f:4d:c3:bc:f0:
         3b:be:f0:1e:0f:05:c5:1c:51:57:31:83:29:f5:a3:c9:e3:a5:
         bd:22:83:07:63:1b:45:c8:db:b4:11:f7:21:5a:38:13:4f:5e:
         fb:17:be:e8:d4:d6:3a:df:16:64:e9:bc:37:0e:62:37:fd:82:
         71:2d:11:19:1c:9f:0a:09:78:0e:2e:3d:0c:15:5f:85:cf:57:
         33:0c:f7:50:21:72:4e:c7:fe:63:39:7a:cc:8d:f9:7c:87:2f:
         79:91:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:06 2024 by rpki-client on console-fra.rpki-client.org