Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7508b78c-0277-36ed-9d85-a4fdb6cc804e.roa
File:                     7508b78c-0277-36ed-9d85-a4fdb6cc804e.roa (raw, json)
Hash identifier:          Rd1QbWyPlv7GwX+jqOcnEhP4ppYuFqQ//a3xzdqRVNI=
Subject key identifier:   1D:B5:FE:17:CD:53:64:0C:6A:74:67:D6:54:8A:7D:70:C8:30:4B:32
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A76362E0F88D9671643C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7508b78c-0277-36ed-9d85-a4fdb6cc804e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:76:36:2e:0f:88:d9:67:16:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=07700c90-3c63-475a-89ff-5e1d546dd13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:43:48:eb:6c:c9:b8:3c:2b:72:32:c5:ca:
                    b9:62:d0:1f:7d:4c:18:cd:ab:75:8c:23:97:ae:55:
                    36:e8:08:f0:9f:2f:2b:e3:81:4a:17:5f:8e:fd:ab:
                    d3:2a:2c:6c:9c:ff:c7:89:00:6b:0d:8c:40:ce:c1:
                    6b:29:83:1f:b4:f8:a4:de:f7:04:f8:dc:25:67:a6:
                    15:3a:1b:d1:a8:8a:6b:64:cb:9e:7d:87:14:b7:4f:
                    1c:cc:69:53:5f:b7:64:93:16:33:72:88:e9:89:c1:
                    2f:4b:b3:5a:90:3d:1e:df:a4:09:08:63:40:fa:e8:
                    b8:d8:1e:20:16:85:a6:68:7a:6e:50:f7:c0:0c:02:
                    36:b3:42:67:ae:29:3e:fb:48:ef:9d:3a:51:01:cc:
                    c5:af:44:8d:4c:99:6f:83:59:c7:05:9c:d0:1e:56:
                    a6:1c:19:a1:54:62:7b:65:3e:7c:97:bb:47:1e:f7:
                    c3:99:ca:79:d2:e7:a4:68:35:4b:77:ca:9a:0c:8a:
                    12:71:3a:ed:76:1a:21:9d:a1:19:5b:a2:7f:5a:1c:
                    cc:ed:23:ae:59:45:0c:58:16:31:2f:6d:42:12:08:
                    f2:02:27:d7:fd:2d:6c:c0:23:2b:1d:d1:07:bd:d1:
                    1a:d7:cc:3f:75:eb:61:34:b0:69:cb:8a:61:5d:95:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B5:FE:17:CD:53:64:0C:6A:74:67:D6:54:8A:7D:70:C8:30:4B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7508b78c-0277-36ed-9d85-a4fdb6cc804e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:40:94:e4:3e:7d:42:9e:04:07:a3:a8:63:bd:ed:df:d5:
         4a:cd:9e:ae:ad:8d:83:af:bf:75:8f:1c:9d:5b:cf:e1:4d:d2:
         a7:eb:6c:4a:b0:16:9e:be:fb:4c:2e:8f:8a:51:92:8f:8c:5b:
         14:6e:8a:cb:0c:bc:38:74:85:0b:3a:f0:60:4b:2a:fc:70:50:
         35:55:4d:e0:bb:e8:19:1d:4f:46:1f:38:c5:1f:19:54:95:29:
         02:ba:c9:ba:e2:0e:05:ee:9b:85:f8:18:76:59:37:ab:c8:9a:
         b1:30:13:f0:37:8b:aa:28:55:8d:57:4b:7e:b2:95:be:84:58:
         01:4f:f8:3a:8a:66:f4:42:c1:a0:db:eb:6a:c7:82:a4:90:f1:
         3d:71:28:bd:e5:29:a6:a7:25:ad:1f:c4:93:16:35:92:5f:d9:
         d1:9e:a6:be:63:bf:66:43:82:b7:b2:6e:ca:21:9e:2f:45:29:
         18:3e:6a:bf:fd:41:90:fd:2d:26:30:fd:c8:1d:00:10:ca:55:
         ca:59:8d:7a:98:62:93:c3:e7:41:87:46:9d:8d:dd:7b:71:b7:
         62:6e:2a:1f:b1:ab:ba:5b:99:cb:71:ef:23:b3:90:7a:ae:4a:
         14:f1:90:c1:96:2f:25:4f:e6:0f:3a:70:de:cd:9b:28:f8:c1:
         d1:d9:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:00 2024 by rpki-client on console-ams.rpki-client.org