Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77a5ca43-5190-3d38-bd7f-b953939fb969.roa
File:                     77a5ca43-5190-3d38-bd7f-b953939fb969.roa (raw, json)
Hash identifier:          nJiGi/LyizLLlzZ9bXzcIcW7i8tg6y6+ncziuobCQuQ=
Subject key identifier:   B9:78:CA:5B:7B:7A:E7:32:E7:0F:97:F2:BA:F6:6C:59:AD:07:3D:29
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC643C5D8D9128D2CEBA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77a5ca43-5190-3d38-bd7f-b953939fb969.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c6:43:c5:d8:d9:12:8d:2c:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=eb9320a1-3689-4a21-bf65-6a31a281bca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:c2:16:38:c2:59:ef:8f:8a:85:4d:2f:a6:
                    fe:e9:04:12:c7:4d:ce:15:a7:23:1e:3c:2c:d0:77:
                    fe:44:4c:bd:71:97:90:74:b7:25:8c:33:77:42:4d:
                    69:0e:8f:c9:0c:7b:d8:ae:ec:d7:86:8d:29:58:7b:
                    5f:a0:b7:34:09:67:0a:53:a8:fa:00:88:9d:a6:a9:
                    3d:85:e6:2a:a9:06:c0:f1:87:16:e2:16:ce:d8:c2:
                    9d:d6:80:be:6d:2d:26:c8:4d:8c:76:39:40:39:69:
                    f4:70:0f:c3:b4:fd:61:38:14:f1:2e:57:6c:24:16:
                    00:de:fd:2c:cf:a7:b0:5d:79:a9:46:54:57:ab:32:
                    dc:51:4f:1f:dc:24:dc:37:4f:9d:ee:99:ca:f7:eb:
                    7c:2e:99:cd:44:cc:f8:a3:18:50:7e:4a:1b:59:b7:
                    de:e2:4b:2a:53:b6:0d:bc:eb:a9:a0:1c:b7:86:bf:
                    0b:16:6b:5b:a7:f2:da:5c:ca:cd:3c:25:d4:bb:a7:
                    a6:0a:4a:61:67:d4:5b:3b:dd:fd:99:f7:44:ef:97:
                    be:8d:2e:26:11:48:b6:6e:26:18:72:4c:37:9b:32:
                    23:c6:1b:8a:b8:45:77:cc:1f:53:d2:6a:52:77:c8:
                    c8:93:6d:a7:f7:04:b4:54:ba:ce:aa:d6:54:d2:35:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:78:CA:5B:7B:7A:E7:32:E7:0F:97:F2:BA:F6:6C:59:AD:07:3D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77a5ca43-5190-3d38-bd7f-b953939fb969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:db:36:eb:4f:86:99:f7:6e:e0:b5:3d:8a:3e:45:9e:b0:c6:
         e3:65:d9:87:02:13:5a:eb:72:0f:88:79:02:95:97:0c:e3:04:
         f9:d4:75:8e:40:bb:31:1b:6c:4a:52:d3:e8:51:e7:f2:a2:d7:
         a9:29:2b:4a:f8:86:c2:d5:4d:62:e1:3f:1f:62:36:96:4b:69:
         0e:da:26:2e:0d:77:45:8b:eb:f8:11:df:db:26:75:24:53:a1:
         6a:77:d6:38:46:c0:c9:17:31:04:b4:10:5f:60:aa:c5:b0:a3:
         a4:a3:73:37:7f:d6:4e:b2:c5:bc:ba:d4:52:20:72:4e:6e:d1:
         ee:17:c4:dd:09:6c:2b:93:db:4e:70:56:62:7a:ce:d8:8f:c3:
         cb:07:db:bc:49:d7:dc:ad:51:84:f1:89:26:7a:67:ec:e7:98:
         a5:b0:32:e3:57:e7:37:39:b4:c0:b2:1a:7e:91:77:2a:e8:ef:
         7d:c2:12:4d:cd:98:b4:bc:c4:f2:b5:d9:cc:84:7f:5b:29:a7:
         57:c1:6d:bd:bb:cd:9f:9c:87:5c:e0:06:73:aa:11:71:16:60:
         f5:91:f5:bd:12:1f:0c:2b:e2:b2:76:5b:51:b5:01:6b:ce:b6:
         46:25:50:35:9c:fc:4e:b8:bf:6f:5a:44:c9:89:c1:c6:a8:87:
         97:53:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:38:16 2024 by rpki-client on console-fra.rpki-client.org