Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d9d6b7b-0ae4-34c9-a657-9ab4dc157b00.roa
File:                     9d9d6b7b-0ae4-34c9-a657-9ab4dc157b00.roa (raw, json)
Hash identifier:          u0XZ8kR4xt35JbD8QDt+Mf9VikPC2yIog55Zm5zQCZk=
Subject key identifier:   A0:BD:7E:59:FA:7C:91:DA:DB:DA:28:E3:24:3B:ED:20:3D:A7:1E:96
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58197B2A82BB3197F1AE000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d9d6b7b-0ae4-34c9-a657-9ab4dc157b00.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:97:b2:a8:2b:b3:19:7f:1a:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f3fddcca-8e59-4fd9-969d-9e7c8686beea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:34:ad:ef:3d:c7:7d:0b:b6:f7:38:97:64:
                    7b:88:47:de:f8:f7:0f:d9:ff:50:c9:af:94:21:91:
                    c3:90:5d:5e:89:d5:d0:54:0f:1b:79:94:02:f9:60:
                    51:4b:ce:27:c7:cf:b3:17:ba:a1:94:0d:17:76:03:
                    29:19:09:f8:48:b0:69:d5:e3:02:86:ec:5e:bc:52:
                    a7:49:fe:91:f5:11:47:cd:d2:56:93:39:c7:12:c9:
                    64:8d:7c:1d:e7:c3:63:62:f0:89:9b:58:99:71:7c:
                    e1:31:3d:e1:da:f1:f5:f8:65:ea:1d:86:65:77:30:
                    45:a2:14:50:b0:aa:db:e5:2f:eb:90:7a:75:d1:98:
                    67:47:67:80:7d:78:c9:fe:ca:4e:1e:5d:0d:14:d7:
                    c5:ed:cc:03:05:fb:e4:62:92:26:8e:6e:db:eb:81:
                    f0:88:fd:b7:8f:ea:2f:ce:32:05:b3:6d:ec:e8:de:
                    bb:6f:eb:d7:f3:3b:ed:4d:ec:da:d7:b8:20:eb:f4:
                    9b:6d:32:4e:11:d7:aa:d2:c0:fb:5a:95:b1:c1:99:
                    1d:91:3e:b5:b8:36:c6:ae:55:a3:2b:a3:6e:6b:fa:
                    45:ff:7d:bf:bf:b1:83:c3:1d:95:5d:51:bf:3f:21:
                    ab:16:f5:67:b8:f6:b8:9d:84:63:43:63:06:fe:4b:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BD:7E:59:FA:7C:91:DA:DB:DA:28:E3:24:3B:ED:20:3D:A7:1E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d9d6b7b-0ae4-34c9-a657-9ab4dc157b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a4:1c:31:14:7f:6a:2e:68:d5:f3:08:4f:73:6a:51:f4:33:
         17:da:bc:a3:97:ce:9f:fc:32:63:56:bd:76:60:df:38:87:d6:
         61:a7:44:40:95:d0:c6:56:40:45:4d:44:87:64:7c:7a:18:71:
         e1:bb:87:b7:4e:3a:dc:46:d9:34:73:48:db:2e:46:0f:26:77:
         bc:ff:36:14:43:49:54:d8:f7:30:80:81:06:b1:e1:b2:bf:18:
         a6:0c:42:29:1c:b8:d2:f0:c3:9f:6c:a5:4c:0e:c5:fd:3b:56:
         e6:a4:b0:46:3e:ad:bb:1e:bc:1e:d0:92:cd:25:07:69:58:4c:
         3f:62:3a:0f:8f:70:ee:9c:f9:a3:99:b1:7b:3c:47:51:d7:eb:
         e5:06:ba:a8:61:32:1c:64:e1:7f:ae:60:9a:a8:da:84:12:11:
         c8:03:d8:f0:7d:b6:71:a5:ab:68:e5:e3:cc:7a:05:9d:f9:f6:
         5b:4b:f8:2c:53:bf:54:d6:49:91:27:4d:fa:96:a2:ab:a8:61:
         0d:39:15:5f:fb:98:e7:e9:21:4b:b4:ee:e3:0a:b1:76:26:b3:
         6e:b6:a9:9a:32:29:b1:68:71:6b:60:6c:14:2c:c2:70:97:0b:
         ac:a5:f3:f9:8d:b9:f6:e3:2c:97:d7:9d:be:f4:01:d1:2b:6f:
         98:f1:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:52 2025 by rpki-client