Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa
File:                     97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa (raw, json)
Hash identifier:          Rq1c56XKkWSLPQUMpBsQfgymvQF5rlitXwP3aBPFL/s=
Subject key identifier:   A8:E6:A2:D3:0E:A6:2D:22:FB:FD:25:05:A7:6A:98:1B:51:8F:7A:68
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DC88CAC272F605C27F0C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:c8:8c:ac:27:2f:60:5c:27:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=39163bcf-104f-42b6-adad-62c736b77db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:c7:e9:14:fb:0e:e3:76:d5:6d:50:e9:8e:
                    96:e0:77:46:84:c0:e1:9d:ce:ba:2f:c8:de:00:c8:
                    84:bc:58:fa:a9:a5:2e:45:19:71:50:5f:d8:bc:48:
                    ad:24:fb:0c:21:9a:28:34:4e:16:66:d0:fc:35:e6:
                    89:5e:f4:32:24:ea:c4:42:20:40:d3:ad:a9:24:c5:
                    c3:ce:45:2b:6f:9f:d9:26:66:30:c1:5b:95:7d:ac:
                    8d:16:0d:98:6b:8e:e3:0e:68:9f:2a:b9:26:9f:89:
                    d2:1d:76:ce:a9:ae:e1:e1:a2:17:67:ee:10:2b:2b:
                    26:66:ee:5f:a3:cf:ab:71:54:65:fe:b6:6f:e3:27:
                    c9:a4:b0:fc:15:89:45:7c:0f:5b:37:9e:a1:29:71:
                    83:e0:38:dc:68:53:66:3a:bf:a7:aa:47:6d:a8:18:
                    a7:9b:9b:1c:ad:d2:f3:b4:14:52:f3:61:6a:df:64:
                    3e:b4:57:12:52:15:f7:f1:f5:1b:68:e9:3c:4b:a6:
                    10:da:5d:19:e0:bb:54:d5:a4:83:58:06:b9:a2:89:
                    0f:30:de:e8:bb:93:4b:a8:48:ee:b8:5a:75:d5:07:
                    69:bb:c5:4c:ae:93:f2:f6:be:05:e2:39:91:9d:1f:
                    fb:68:c7:58:41:19:39:c8:18:30:ee:5c:9e:c7:96:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E6:A2:D3:0E:A6:2D:22:FB:FD:25:05:A7:6A:98:1B:51:8F:7A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:76:72:77:d2:aa:02:56:18:48:7b:ab:e0:e9:3c:73:31:
         a6:a1:34:d3:cd:1b:b1:7c:40:8b:53:43:7c:59:78:34:0e:3d:
         be:0c:fb:b9:36:c2:3a:b2:b2:6a:c0:3c:e6:c4:47:30:ee:88:
         ae:03:98:60:96:4a:4e:8a:69:50:dc:60:4e:c1:47:a7:99:ac:
         da:da:eb:42:16:3a:2a:a6:84:06:ec:96:64:f0:a5:62:a5:28:
         1e:11:d4:e3:25:d0:23:16:86:82:65:bc:0f:67:8a:da:91:70:
         18:5b:5b:aa:75:57:0b:05:81:fc:50:da:e3:5c:10:36:8c:56:
         5d:23:b7:05:e3:b1:8d:da:75:10:79:92:c9:f5:77:50:95:54:
         fc:1f:9c:39:4b:f7:eb:cd:4a:b6:72:26:13:bb:d0:a9:cb:1c:
         8a:c2:6e:2c:55:df:9c:8a:b5:18:18:a8:41:dd:e1:80:cb:b4:
         61:f5:20:bf:8f:0f:bd:6b:93:dc:db:cb:db:df:8a:f0:80:26:
         1d:72:7d:33:00:e8:41:bd:f9:93:62:4d:9d:45:83:30:ba:6c:
         c7:4d:33:22:a4:89:6c:26:76:fe:e2:f2:69:59:e5:26:0a:85:
         21:e6:83:e3:77:f5:42:01:be:83:c9:5c:d5:2f:a9:ff:da:1e:
         9f:5a:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 01:45:09 2024 by rpki-client on console-ams.rpki-client.org