Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80a1959e-ce61-3db5-9bdd-feb36633e37c.roa
File:                     80a1959e-ce61-3db5-9bdd-feb36633e37c.roa (raw, json)
Hash identifier:          ++/SYIPlw5nfsI3g2u5/ht1U6LIfKHDI3MgkLfcbL+k=
Subject key identifier:   5C:FE:62:5B:81:C1:C3:61:04:6D:A4:A4:C3:25:28:C6:A8:0A:88:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF9C99A7D63A230414F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80a1959e-ce61-3db5-9bdd-feb36633e37c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f9:c9:9a:7d:63:a2:30:41:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1183b4ed-13c4-49ed-b156-5f824c20f2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:39:82:f0:e6:86:f0:a6:0d:16:c3:9f:99:
                    c2:76:c6:0f:01:71:76:36:03:27:2d:bb:39:93:6c:
                    e0:6d:76:92:7e:85:ef:87:1a:66:0d:29:a0:71:0b:
                    47:15:93:da:92:6e:b4:1f:06:c4:08:b9:c8:5e:b2:
                    43:de:e0:77:fa:cd:61:4f:49:72:d8:c1:87:46:1a:
                    33:3b:54:d3:2e:7c:14:84:4f:ec:03:59:aa:36:4f:
                    fe:35:94:f0:19:5a:78:cc:b6:a0:e7:72:d1:44:c4:
                    48:cb:af:1b:57:44:5e:26:7f:ab:1c:89:78:97:08:
                    d3:68:47:d9:4f:10:36:67:17:86:9d:58:70:2f:57:
                    f5:c9:78:4e:91:05:19:1c:87:48:48:6a:c5:dc:a1:
                    99:b1:23:ba:b9:16:00:99:ac:ba:d6:5c:1e:fd:a2:
                    22:8e:3e:43:43:77:48:d3:3e:e2:96:a9:ce:ba:8b:
                    06:50:c6:e0:6a:88:f2:56:2a:76:2b:9e:58:d5:93:
                    da:0c:d5:7a:b8:b7:9e:06:86:5a:a4:28:c1:a9:d8:
                    02:28:b8:48:54:d8:7e:d5:1e:03:ce:1b:50:50:c5:
                    1f:0d:07:42:c8:a4:78:78:15:0d:10:71:71:92:93:
                    3c:a4:b2:35:c7:d1:0a:8f:4b:f3:bc:7e:3a:73:70:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:62:5B:81:C1:C3:61:04:6D:A4:A4:C3:25:28:C6:A8:0A:88:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80a1959e-ce61-3db5-9bdd-feb36633e37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:84:e8:8e:74:d0:06:3e:a6:d3:3f:18:96:97:ef:a3:2f:
         8f:f3:50:97:e6:ee:72:06:76:28:49:d7:20:17:a5:00:a9:0e:
         3f:68:ac:94:2e:23:ab:a2:80:a5:2c:d1:c6:35:e7:f0:d9:83:
         10:8a:3e:f8:8c:ac:29:62:54:6f:57:ef:43:9f:78:6b:de:bd:
         4e:74:4c:c1:61:69:f0:50:22:d0:68:d8:37:d9:04:4b:46:43:
         97:15:71:46:0a:db:13:55:31:89:db:bc:47:8c:bb:05:ba:a4:
         b4:49:a4:19:91:56:ee:c4:13:b2:da:46:e0:10:f6:78:6a:80:
         0d:bd:9d:5c:b3:0b:f6:ef:50:2b:55:b3:33:3f:dc:6c:a2:4f:
         39:1c:2f:46:13:d6:86:4c:a0:c4:23:44:b3:11:94:b8:73:ae:
         31:80:ed:74:da:ae:e1:8d:46:b1:26:fe:db:53:a2:4a:3e:86:
         24:2e:5b:4c:be:26:88:3d:c2:00:b4:82:ee:66:38:12:d7:af:
         83:19:dd:3e:8c:63:d2:08:2f:ae:e5:69:bd:9c:78:6c:a5:a6:
         1f:62:50:bc:14:ed:cb:73:44:f4:fc:51:b5:35:1c:af:41:5d:
         e7:95:0c:17:78:13:57:cf:1f:9c:18:0c:aa:c7:b8:39:d2:2e:
         aa:53:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org