Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c2b7a2e-a099-359e-b704-bf16083133ed.roa
File:                     7c2b7a2e-a099-359e-b704-bf16083133ed.roa (raw, json)
Hash identifier:          +NC56leuK2wV/wL8o9z3+yV5qSs1Q7wBPfEl7IP5nEg=
Subject key identifier:   A8:BA:75:D0:30:A4:E9:79:A7:35:B6:94:F4:AC:47:EB:E8:EF:17:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF7BBC6961F7A9541DA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c2b7a2e-a099-359e-b704-bf16083133ed.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f7:bb:c6:96:1f:7a:95:41:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8671dc6b-5bcc-4d6c-abfc-b6454b078996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:7b:8f:e6:6a:92:9c:41:e4:e2:f7:b9:79:
                    03:b9:74:ad:14:20:07:bd:c0:c9:40:a2:b3:1b:30:
                    15:6e:1d:e8:69:89:28:43:86:59:d1:c7:26:2a:22:
                    c0:30:cf:05:b1:4d:15:0c:bb:2e:a4:4a:2f:59:ea:
                    c0:86:e3:c2:07:82:e9:e3:c1:a4:4a:75:d0:e6:cd:
                    00:ec:4f:49:8b:77:04:25:71:7f:6a:e8:64:cc:40:
                    90:06:12:d7:b2:19:fe:df:5b:3c:39:4d:69:3f:49:
                    f9:7d:2b:9a:08:51:f1:cd:00:67:c6:2c:bc:00:bb:
                    0f:35:3e:5d:12:31:3a:21:8a:ac:38:d7:0a:10:68:
                    0a:44:62:fd:71:f0:40:48:46:fa:6b:fa:af:02:3e:
                    f9:70:37:9e:ca:f3:4c:c6:b8:50:5d:80:09:9c:fe:
                    42:0c:48:03:64:c6:23:de:b7:67:1d:cf:74:77:b9:
                    9c:39:31:0f:2a:e6:8b:a0:3d:f3:48:74:fd:07:ca:
                    5d:a7:6b:8a:15:e7:08:34:b7:fd:da:76:7c:e8:0b:
                    0a:18:eb:a6:78:7e:76:69:e9:16:a8:39:22:bb:f1:
                    84:51:c9:39:1a:c9:98:da:a0:d9:d3:68:e8:59:1f:
                    96:8a:5d:65:42:dd:ef:fe:c8:97:33:2a:a2:ae:de:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BA:75:D0:30:A4:E9:79:A7:35:B6:94:F4:AC:47:EB:E8:EF:17:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c2b7a2e-a099-359e-b704-bf16083133ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:68:c6:f0:0b:20:be:52:a9:05:1e:cf:8e:f0:8a:d8:98:
         98:ce:5e:8e:3d:ea:18:cd:96:e6:8c:14:0d:72:7c:51:0b:46:
         f3:ca:ae:bf:f0:47:3e:ba:8b:04:6f:6c:5e:a3:67:8a:dc:7d:
         6e:43:fd:0a:a7:9b:e9:a4:80:57:8b:a8:0f:dd:01:9d:56:a2:
         af:b7:f2:cb:8f:7c:ee:8e:98:2f:a8:4d:fe:64:96:b4:05:8d:
         14:39:85:9e:49:a2:6e:3a:ef:1c:80:fe:ae:a7:68:93:80:c6:
         ad:27:6f:ef:1f:ee:07:15:10:c8:b6:47:e3:30:61:3d:8c:e0:
         4b:95:87:37:77:f5:a7:01:8f:cf:52:1a:a2:eb:ed:6c:6a:94:
         f4:0c:01:b0:e3:4d:37:66:ff:ec:fa:26:fc:c7:a9:33:5a:5e:
         02:10:c0:80:e7:63:b6:3f:29:d2:54:52:fb:2b:67:9b:f1:5a:
         20:b1:48:9f:d2:23:fe:ee:5d:40:9c:a5:92:f3:5f:c7:d3:b1:
         a0:4c:9f:72:ca:95:16:4e:db:3e:04:d8:66:c5:13:52:05:2b:
         dc:c0:2a:0b:6a:60:18:e4:7e:11:b2:b1:db:d5:fe:0b:55:d2:
         be:1c:1e:22:dc:4a:6b:fc:11:29:34:52:d5:5f:0a:22:38:2c:
         ee:83:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:39 2024 by rpki-client on console-ams.rpki-client.org