Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa
File:                     8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa (raw, json)
Hash identifier:          UehPvrKQg9zctRIMnh7G0Uc/y27AJxqPztIsklUG1j0=
Subject key identifier:   02:23:6D:5D:E7:6D:ED:1D:E7:90:E6:66:C2:01:7A:F1:C0:55:B2:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ACC5116CDA10BB4F1F160
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:cc:51:16:cd:a1:0b:b4:f1:f1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=eb50c9f0-b421-4c1b-a4c8-ae798cdae341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:03:9c:ab:3d:18:4c:71:d3:2e:a9:89:58:
                    7d:cb:cc:29:27:27:b3:78:47:5a:1c:f9:86:f8:03:
                    9d:d1:98:96:04:90:af:f4:0c:d2:7b:b9:36:4c:71:
                    33:33:3f:72:67:4a:db:68:10:ac:9e:33:87:6a:1f:
                    e2:6a:63:b4:82:3e:fe:45:3d:c9:96:85:89:c1:45:
                    5c:33:da:60:99:2c:1d:ea:28:48:72:5d:0e:25:6d:
                    82:f2:a5:04:f9:98:71:2e:ac:d0:d5:5e:ec:01:d8:
                    47:8c:68:fa:ce:37:ce:69:ef:25:19:f2:a6:a9:50:
                    10:34:8a:59:c8:0d:88:30:20:c5:a8:5c:1a:94:02:
                    4d:13:8d:a0:8b:34:4e:6e:fd:29:d5:12:86:0d:e9:
                    14:11:67:01:ac:55:0b:ba:f4:76:32:66:e1:92:9a:
                    7f:e9:e5:66:c9:83:ca:e7:ad:1b:52:49:bd:0c:f1:
                    a8:05:ba:38:2e:03:2f:24:3d:f8:22:e9:4c:68:cf:
                    6a:96:fd:08:e0:41:fd:d9:e9:18:b5:6c:43:c4:f3:
                    ae:0b:92:46:40:d0:c5:76:69:16:2e:d7:29:08:a1:
                    5f:9e:06:5a:35:28:01:81:5f:fd:41:7a:48:e0:2a:
                    d8:2c:6f:80:09:05:a1:ae:c1:e8:44:d0:47:c0:14:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:23:6D:5D:E7:6D:ED:1D:E7:90:E6:66:C2:01:7A:F1:C0:55:B2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:04:d8:a6:2e:83:a7:43:4c:d6:0b:35:ed:7d:f2:84:c0:f4:
         c2:5b:5e:d7:eb:34:af:d2:65:e5:80:a7:79:6e:0a:7c:d5:bd:
         ee:b2:bc:37:bf:02:00:7a:0d:41:96:94:c7:b8:84:b4:7e:00:
         58:c7:02:7d:9a:cc:e6:b8:c1:77:51:bf:0c:28:ff:8a:20:e4:
         05:cc:98:9f:81:e8:a7:51:48:c9:8d:70:40:73:a2:60:15:7e:
         51:d8:ec:33:dd:76:3d:e6:e5:52:82:04:e7:a1:e7:ea:92:e1:
         56:7a:04:7c:23:58:c2:16:22:69:b9:ff:c8:5e:53:06:47:45:
         02:8e:20:f3:14:06:41:17:3a:02:e4:b8:25:b7:7b:84:a3:83:
         cb:60:44:35:90:c0:2f:60:43:72:47:cb:c5:36:fa:69:20:c8:
         7c:82:9a:f4:81:a9:c3:1b:70:76:21:e3:01:4a:2d:8e:b1:bb:
         d0:fd:23:61:97:0e:69:b5:10:03:b9:ea:ef:a0:76:64:5d:24:
         8a:bc:37:8d:44:38:3d:81:cf:08:ee:28:fb:18:2c:b0:84:5f:
         cf:5b:d0:c7:8a:a9:a4:80:9f:80:cb:65:b1:23:79:7f:7f:b8:
         05:6f:81:b6:4a:78:57:5b:c6:98:a7:9b:04:c0:0c:3b:50:61:
         3e:1d:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:17:40 2024 by rpki-client on console-fra.rpki-client.org