Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/859b6607-3814-391c-9486-8abbbf067d70.roa
File:                     859b6607-3814-391c-9486-8abbbf067d70.roa (raw, json)
Hash identifier:          7ACwmu2b5YDlmTZnWNJ7B/2ZkIVi23nggBB+Adt3zuw=
Subject key identifier:   33:8E:23:55:4F:8A:72:2E:A2:D1:4E:F3:F5:24:BC:02:69:99:C7:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCA51D9B8E1583B45B3E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/859b6607-3814-391c-9486-8abbbf067d70.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ca:51:d9:b8:e1:58:3b:45:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=90d81fcc-9f8c-42d8-b5d7-9170dfb6db36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:02:d3:02:2a:5e:7f:5e:64:33:d9:40:dd:
                    a3:64:9b:d8:c1:7f:f6:23:a3:8f:f3:b3:46:c7:41:
                    17:f6:77:9d:75:6a:38:ee:57:c6:ce:a3:cc:8c:e6:
                    a5:39:b4:67:d3:9c:9c:b2:62:3d:c0:72:4c:16:67:
                    87:7d:b4:70:4d:8f:64:4c:b9:cb:60:c5:0d:3f:12:
                    a6:8f:63:45:fe:e1:4f:54:de:50:58:55:c2:91:ab:
                    0d:40:7f:2a:42:72:ca:df:f3:97:74:48:56:6d:b8:
                    8d:76:6b:4e:a6:ac:bf:72:d7:b4:1a:4a:5b:da:32:
                    8a:e6:b3:ec:30:6c:24:16:5d:fd:5a:49:b2:ff:63:
                    88:fb:3d:d2:fe:59:0a:1a:09:d7:7f:9b:41:ab:71:
                    27:ac:3a:27:19:d2:50:8d:e2:11:cc:ae:cc:2b:f9:
                    55:d6:32:a8:99:ba:25:be:d3:f0:85:3c:ac:4a:21:
                    07:0d:cb:c8:a2:a4:88:d6:82:bb:84:49:f0:64:f0:
                    4e:97:7b:d5:36:a4:95:bb:cb:63:a2:b8:01:6d:56:
                    a5:c5:86:6b:25:68:1d:53:f6:dc:3c:1c:c5:f4:01:
                    39:b5:90:72:6f:83:22:e6:df:b2:f8:3c:e3:64:d5:
                    5d:84:e1:b5:2b:c1:eb:09:10:5c:c3:9c:04:d7:b7:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8E:23:55:4F:8A:72:2E:A2:D1:4E:F3:F5:24:BC:02:69:99:C7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/859b6607-3814-391c-9486-8abbbf067d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:71:55:ad:e6:4d:03:ed:50:7c:a6:d5:73:e8:a2:4e:74:69:
         61:1a:a2:95:e1:57:15:67:14:24:50:f9:92:15:a8:b9:14:2a:
         a0:fd:f8:72:fe:40:0e:1a:f5:c1:f6:4c:07:47:87:df:88:72:
         1c:90:51:48:05:4e:af:6d:aa:30:95:99:4f:c7:09:fe:fb:b7:
         b9:7b:b5:c1:ed:24:29:6e:a0:8e:36:5d:ee:4f:36:1f:8e:0d:
         95:97:ce:ba:b1:81:13:70:ce:e3:a2:b4:7c:20:e1:5c:39:f2:
         79:b0:ff:ad:a1:55:95:17:78:bc:34:78:e6:51:fd:a4:8d:59:
         05:e2:da:ec:16:70:fa:be:54:fe:e9:19:8f:99:0a:ee:ae:2a:
         2c:2c:8f:dc:f5:df:1c:95:98:7d:61:46:ec:a8:6c:61:f5:cd:
         20:5f:a1:a6:11:a8:cc:72:74:03:01:89:e0:58:c0:b2:5a:4d:
         4a:d4:de:79:a0:1f:f1:dd:fa:4a:cd:68:ae:3d:65:f5:28:7f:
         52:3f:33:b3:4d:cc:bf:b9:5c:52:71:7b:39:11:4b:b7:c2:61:
         de:7a:c4:2a:57:63:f9:86:e9:02:1e:18:35:39:00:08:a5:96:
         f2:5b:49:bd:a0:9e:3a:53:fa:03:7f:7e:20:a7:aa:f5:42:8b:
         78:73:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org