Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa
File:                     97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa (raw, json)
Hash identifier:          dV8kCtFNNCtp24Laz70rFC8ZPxCZE/L0uWGs9DN/0tM=
Subject key identifier:   B4:0B:C7:05:55:D2:6E:85:64:63:F2:76:9C:E5:8D:6A:0A:79:6D:13
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A79376B935E668FADBBE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:79:37:6b:93:5e:66:8f:ad:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=666b70c9-7198-477c-ba97-ce807178e773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:89:f4:b8:1a:f0:50:71:c1:f4:77:92:4c:
                    cc:9a:aa:05:77:39:00:1e:74:02:62:28:6b:07:9f:
                    b6:ca:5e:a6:f8:78:79:d9:3e:d7:5e:a9:92:48:ae:
                    38:b8:65:12:39:ac:30:00:88:24:a9:fa:82:82:b0:
                    c5:f7:d6:d2:10:ef:88:0a:db:8b:86:0d:3d:15:aa:
                    04:a4:4a:4f:44:55:0a:9f:8a:dc:70:6a:a6:b1:ff:
                    01:a6:5e:d9:0e:c2:f4:d8:cd:9d:0f:30:82:0e:ad:
                    d4:a7:51:6e:29:e0:af:48:7e:5a:b7:d7:85:7b:49:
                    e2:00:30:30:79:27:d0:eb:f4:60:c7:f6:76:88:70:
                    39:76:ff:a0:9d:75:8e:1d:7a:cd:2c:9e:84:08:ad:
                    a5:50:f2:7e:35:d4:2a:51:a3:8b:50:f7:32:15:97:
                    97:57:3f:b8:3c:a0:43:51:fe:4d:e9:cf:5e:f9:f0:
                    d9:44:83:bc:31:7a:14:57:fe:db:ae:87:15:a5:22:
                    e4:cc:ca:22:13:2f:7c:44:5a:5a:17:ec:4c:40:c7:
                    b8:61:8d:7c:89:65:59:39:f6:75:6c:7e:01:0b:f4:
                    7b:e1:fd:56:93:05:91:a2:30:62:2d:fc:bd:bd:00:
                    13:95:35:c5:bd:ca:73:27:2d:56:d5:36:38:f5:21:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:C7:05:55:D2:6E:85:64:63:F2:76:9C:E5:8D:6A:0A:79:6D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:19:2c:32:40:1a:ea:c7:c7:96:14:b0:60:9f:16:41:e0:
         1e:f1:99:27:93:39:6f:b4:7c:e1:b5:91:0c:c6:33:9c:e7:43:
         70:76:d2:79:f2:78:b9:16:a0:0c:91:86:a7:57:d5:70:b6:2e:
         8c:0c:88:b6:7b:8c:16:4c:f6:c9:94:b6:bc:bc:53:e8:3d:ef:
         ef:f1:fe:67:d4:87:52:d0:e2:fb:30:68:00:4f:48:53:94:f9:
         d2:98:82:92:3f:d2:1e:bd:43:6e:79:49:5e:5c:0a:3e:ec:4c:
         20:29:e1:9e:67:bc:77:cf:4b:10:60:6d:f0:94:15:77:0e:e4:
         5f:35:ac:65:7b:3a:a8:e2:f0:b4:0b:55:10:7a:10:e4:1e:1f:
         77:94:a1:2f:6a:1e:5c:c5:68:77:6f:db:1d:c7:ab:63:64:fd:
         ff:3a:dd:cd:85:7a:06:38:15:81:33:43:3c:da:f8:86:e2:74:
         a0:b9:f0:fd:98:61:50:d2:5f:a8:c4:bc:0d:64:1a:5c:fb:7d:
         80:6b:f1:ad:f5:8e:2c:6f:76:3a:aa:f9:88:92:02:03:94:7a:
         d8:84:36:aa:71:43:ed:e2:5f:a2:05:05:28:e6:d8:77:6d:a8:
         4e:1e:10:b2:ba:f2:58:22:8a:1a:52:a0:1b:83:ba:bd:90:a9:
         37:ac:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:15 2024 by rpki-client on console-ams.rpki-client.org