Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
File:                     9e2a83e8-7988-39f2-8252-d37663c3e42f.roa (raw, json)
Hash identifier:          j7juhCaGrWrtzQJTwJ4+iRJLkB1ujByZxEpcpZbIv78=
Subject key identifier:   7F:8E:6C:91:E5:D8:A9:BD:00:FD:CE:64:AE:6D:E3:FA:FB:E1:B7:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DC92F48583DBA0135ED60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:c9:2f:48:58:3d:ba:01:35:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ae26231f-da69-44d1-8b02-dbb54ebdbcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:ee:03:24:83:6e:61:ba:43:58:8c:5f:6d:
                    cc:3a:22:d9:c9:fe:2c:b2:e8:f1:cb:cc:79:2a:d4:
                    95:af:32:c2:4a:ac:14:69:48:1b:23:dc:df:36:e9:
                    49:85:41:c9:0f:d8:1e:2d:bb:de:b7:ae:db:92:4f:
                    f7:cd:94:47:d3:65:1f:c5:a2:6a:51:9d:c3:2d:29:
                    c8:97:2a:2c:4c:f5:d7:62:12:78:80:fd:07:fd:be:
                    6b:00:40:57:b2:69:c8:4e:c2:25:29:aa:fd:98:87:
                    5e:23:50:67:69:a9:9a:de:2b:2f:3e:d9:49:7b:fa:
                    d7:ad:63:68:79:12:76:ec:3d:28:02:b0:4b:3b:42:
                    87:61:9a:98:c9:c3:14:49:3d:ac:d1:8d:cd:d7:21:
                    7f:45:3e:d1:e5:f2:eb:3e:37:10:26:50:c2:7c:84:
                    2f:12:59:cb:9d:ef:3e:4e:8d:ce:eb:a0:ab:ce:2c:
                    43:8a:63:c6:ff:75:69:87:1c:8c:f9:0b:17:d9:42:
                    e2:39:0b:0e:84:18:c9:85:6b:8f:d6:ec:a3:e5:db:
                    5a:ea:93:c6:33:58:7c:e7:d8:7a:f2:fa:61:48:8a:
                    63:fb:db:42:eb:d4:0a:24:4b:f1:5d:85:04:65:e7:
                    9d:7a:c4:7c:fd:5d:d0:cb:56:05:17:3e:de:8f:45:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8E:6C:91:E5:D8:A9:BD:00:FD:CE:64:AE:6D:E3:FA:FB:E1:B7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:67:f3:30:38:ad:66:bf:76:e6:2c:ef:c5:7a:c9:54:92:f6:
         97:2d:fb:81:46:dd:d8:bd:63:69:99:2b:99:1f:38:5d:7d:06:
         9d:f9:05:40:22:50:e6:c7:9e:f8:e4:82:c0:e9:be:f3:19:36:
         97:0a:27:47:34:4e:01:f7:86:2f:09:50:9d:f3:f5:2e:26:96:
         df:a2:89:80:b3:d2:16:ac:4c:b7:9b:ae:f4:51:db:b9:a0:58:
         2d:ad:bf:7d:06:a9:f2:f9:c9:3d:c3:07:76:e8:b8:de:7a:9d:
         07:84:2a:78:4f:06:1b:59:18:b7:21:ac:f2:40:88:4c:4c:7d:
         39:33:f5:87:c3:c2:05:bb:28:91:82:4a:96:5c:15:9b:3d:b4:
         ab:fe:5f:71:f6:23:fc:a8:4c:c4:cd:d0:9f:37:ab:7e:83:1e:
         e9:b6:cf:78:2c:a5:79:f3:0b:c4:1b:1d:a1:82:7c:8c:76:d2:
         62:c3:89:32:35:da:b2:cd:f7:f1:bd:be:0d:71:07:4c:ef:32:
         3f:f7:ca:0c:f3:fc:46:2d:40:34:7c:04:bb:61:99:ea:b4:0c:
         30:57:eb:10:06:a0:ae:3c:64:89:d6:22:40:82:a3:07:92:25:
         89:31:3e:36:43:3e:86:71:42:8d:f1:e8:ea:2e:bc:2f:c5:5a:
         3e:87:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:47 2024 by rpki-client on console-ams.rpki-client.org