Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa
File:                     875e1d65-b3a3-3f98-a573-0d5574a74afe.roa (raw, json)
Hash identifier:          pfcKaPzqlmL66AgPdzySdXHI4zIwNi7jtM4pH/X8QZ8=
Subject key identifier:   C0:43:28:F3:1F:86:86:2F:3E:25:01:BA:6C:89:A7:8C:91:4C:9C:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A72C31AFC7C95728E5400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:72:c3:1a:fc:7c:95:72:8e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=02e3c657-754e-4c8e-9ace-98b8eab7882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:3a:d8:60:7e:be:0e:5f:bf:d5:de:5e:5c:
                    c3:62:ea:02:40:5e:70:c0:44:26:04:af:b8:d3:f7:
                    f2:30:bc:70:c3:0e:7d:18:84:9f:9e:e1:b8:bd:61:
                    32:b7:45:71:6e:fc:e0:ab:4d:55:45:96:c9:f5:36:
                    f8:a0:67:84:10:e7:2e:b2:d5:3e:5c:e9:3f:64:c6:
                    32:d4:23:21:78:07:54:e8:df:4c:4b:8b:50:2a:c7:
                    8d:29:22:b0:39:d9:02:82:41:95:52:4c:5d:46:5c:
                    43:0b:b0:2c:57:be:24:9b:86:ab:10:61:c8:3d:16:
                    87:d1:9e:f3:b8:f0:b4:f6:d3:6f:60:d2:c5:d0:e9:
                    b7:2a:d8:44:7c:44:43:0f:b4:90:71:b9:44:9d:a3:
                    1f:2c:0d:3c:83:f0:a8:14:80:e1:52:18:c9:db:83:
                    e2:9f:4d:dd:f3:ad:ec:94:df:51:7e:be:2d:13:1a:
                    75:c5:47:7f:76:95:be:db:56:d6:9b:60:26:f2:15:
                    d6:26:11:27:8e:db:db:58:ad:8a:87:6b:bc:32:f9:
                    98:e9:91:4b:b7:b2:12:24:94:47:35:c4:db:29:7e:
                    64:10:a4:db:47:63:20:6f:fb:9b:68:fc:05:db:dc:
                    ff:fd:eb:3a:fa:4a:46:e5:91:0a:99:7d:bb:dd:7b:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:28:F3:1F:86:86:2F:3E:25:01:BA:6C:89:A7:8C:91:4C:9C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:a5:77:7e:1b:83:6e:50:b6:87:9a:94:42:f8:f1:65:c5:
         8f:80:18:7e:cd:fc:4c:7a:36:17:f7:a5:a2:21:3b:06:9e:c7:
         8f:c7:d4:0c:56:31:8b:09:11:17:68:b5:b8:dc:0a:ae:64:9c:
         54:6a:77:b5:36:6a:1a:e7:01:da:82:26:d6:a4:16:45:6a:59:
         fd:8e:6c:60:c7:d4:e1:59:65:af:13:53:43:41:98:fc:a0:5f:
         95:58:d8:12:b6:b3:5e:65:d9:ed:ad:07:d3:14:c5:95:02:44:
         12:f5:6f:a1:7d:11:ce:e8:36:6f:f8:11:55:ee:f3:a3:0f:50:
         30:cc:c9:50:dd:a6:ca:95:6b:0f:3a:a1:60:f5:91:2d:3f:1a:
         97:de:29:79:53:43:0c:d4:9d:2a:dc:c4:69:3d:63:6c:a6:12:
         cf:7b:c8:ea:95:ec:d7:72:51:17:59:97:f9:5f:a2:52:2c:a2:
         1e:0b:00:39:2a:43:57:cd:5a:f8:29:ca:84:be:0c:14:2b:48:
         2d:0f:c7:04:59:0e:06:ba:d2:6e:4b:ea:c5:82:e4:99:f3:2a:
         09:8b:8a:e4:48:87:43:76:06:05:14:d9:4b:17:74:33:b5:84:
         e2:f6:c1:26:6d:8b:e2:67:11:d0:3a:9c:13:de:1d:1e:1d:57:
         0c:2c:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:54 2024 by rpki-client on console-fra.rpki-client.org