Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
File:                     9e2a83e8-7988-39f2-8252-d37663c3e42f.roa (raw, json)
Hash identifier:          3GsOBpX8E6fqE1D+L+iYl3+suVRal83ZBF/G79jm57o=
Subject key identifier:   F1:64:18:A1:75:6F:32:F3:E5:5F:12:F6:A9:0B:B5:BE:35:03:C9:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A79C8B9FFB2A083A70580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:79:c8:b9:ff:b2:a0:83:a7:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0b234aa2-cee3-414c-a28f-73f82030461d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8e:34:93:e8:d0:b0:f0:aa:87:af:2a:b6:8f:
                    01:35:99:25:9d:7d:e9:25:34:8b:ab:a6:85:5d:ff:
                    fe:51:3f:74:9f:44:ff:bf:fa:de:2d:39:50:54:9d:
                    27:d7:e1:96:0c:fd:1e:58:3c:3f:fa:4a:30:cf:b0:
                    9b:4d:22:17:7f:a7:ff:81:ab:07:0e:0b:56:80:a9:
                    bd:2a:37:1e:77:e0:cd:fd:ce:c2:2f:f2:60:35:38:
                    b8:cb:44:cf:7c:33:bc:69:fe:9a:b2:86:24:8a:68:
                    84:8c:ff:94:25:16:e1:bb:ad:96:94:5b:29:6d:cf:
                    08:67:0a:6a:15:61:08:d6:78:bf:95:ed:c7:33:0f:
                    fe:94:62:91:5e:77:24:4f:05:02:91:7f:b8:81:1f:
                    84:ca:8e:10:1a:3b:62:33:5b:f0:47:96:6a:94:9d:
                    88:34:ed:a2:6e:a4:6f:cd:7b:90:56:d7:c6:c4:e8:
                    c9:56:5d:55:23:5a:ae:25:c6:37:eb:54:db:3b:27:
                    34:b6:34:5b:83:9d:e5:d6:81:29:3e:7b:59:dd:13:
                    9d:99:d4:05:bb:5a:13:9a:5a:67:12:47:cf:34:3f:
                    24:a5:bd:22:a5:0b:e5:82:33:ba:d2:2b:ec:67:cf:
                    bb:1e:19:f9:51:41:6b:f6:32:4a:25:2e:1e:f8:bb:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:18:A1:75:6F:32:F3:E5:5F:12:F6:A9:0B:B5:BE:35:03:C9:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:11:8d:f3:41:6c:37:49:b4:47:23:94:34:8e:b3:f4:a4:91:
         93:c2:48:50:d0:ec:be:86:07:93:63:fd:c9:e8:d7:1f:69:b6:
         5b:20:28:c9:e4:a6:57:40:fa:58:39:03:69:b6:91:b1:5a:46:
         6b:2d:ab:f3:8f:4a:20:3f:61:4f:73:2b:04:c7:18:b0:ef:71:
         2e:99:11:ff:b3:dc:68:ee:93:2b:07:2c:ca:ed:ff:f0:22:7c:
         50:30:76:4c:4b:68:d3:7c:0b:3b:c6:e7:bf:05:df:6e:06:a9:
         25:48:64:3b:96:d7:cf:61:9f:7f:ad:bd:4a:04:07:eb:f0:fe:
         ca:99:ec:ed:55:8d:ad:37:4d:8f:07:4f:7f:51:e0:21:6b:0d:
         1b:a7:d8:09:84:a5:26:3a:10:68:10:09:4a:5c:62:3c:3e:d6:
         e6:91:38:4a:1b:80:3f:37:68:69:f3:24:09:8e:39:a3:c1:4d:
         4c:00:ad:49:67:dc:5a:1c:6f:5b:cd:73:92:45:50:6f:43:4c:
         42:84:ab:25:a6:0b:e9:73:7b:4e:ac:7f:7a:26:18:d5:87:61:
         28:08:ef:a9:85:92:47:f3:e8:eb:a9:00:63:7a:60:b6:4d:0e:
         1f:89:85:2d:08:70:81:75:44:7d:a7:13:1b:35:a2:37:f1:5d:
         2a:fb:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:18 2024 by rpki-client on console-ams.rpki-client.org