Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08c6190-07a8-3aac-9c89-d80faa243c6e.roa
File:                     a08c6190-07a8-3aac-9c89-d80faa243c6e.roa (raw, json)
Hash identifier:          NFVec3bm+87eOicO3tIZjpsjPdO2X9RYiekvNyIIrC0=
Subject key identifier:   7B:9D:17:FF:94:11:63:5D:1A:76:14:46:AC:D7:29:27:45:7E:19:6F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5810B25BBA1E10819C23810
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08c6190-07a8-3aac-9c89-d80faa243c6e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:0b:25:bb:a1:e1:08:19:c2:38:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b06f783f-df8d-4153-9948-e1f213d80bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:c1:32:c6:c9:ef:87:d7:cf:b0:33:5e:59:
                    31:6f:6d:cb:62:65:a4:fe:be:aa:a4:31:07:68:67:
                    ac:e2:b7:18:ca:af:20:ba:0a:4f:c5:d3:a6:98:db:
                    91:ca:b4:b0:77:e0:46:d8:55:90:c5:2d:64:90:ca:
                    f8:9d:46:0a:a7:45:45:25:13:21:2f:06:08:00:88:
                    c7:53:8c:de:06:db:b7:7d:e4:8c:3b:0e:f4:e7:b3:
                    ae:70:dc:75:74:29:40:a0:2b:ea:c9:34:e6:ba:eb:
                    17:22:55:f9:74:70:97:d8:57:32:df:52:00:55:d5:
                    04:ed:81:fb:02:89:3c:be:f3:37:5d:17:a7:31:59:
                    9b:f2:cb:62:01:34:3a:c6:0e:24:4d:91:9a:d3:26:
                    34:65:8a:db:14:70:fd:09:a4:f1:21:e7:05:b3:a8:
                    75:14:8b:b4:2d:76:d6:9c:76:3a:63:07:92:c0:b2:
                    bc:ad:8f:69:f6:36:96:53:81:1b:34:95:2a:ab:b9:
                    d4:56:ea:c1:6c:f7:41:19:32:a7:12:ed:fe:f5:11:
                    9b:71:4d:4e:a5:30:fb:6c:18:11:4f:ec:e9:d3:fa:
                    de:27:f0:2a:ee:9f:d5:7f:69:17:9b:4c:c2:9d:91:
                    9a:73:a8:9c:e3:3d:39:88:ab:b3:09:96:58:f1:c6:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:17:FF:94:11:63:5D:1A:76:14:46:AC:D7:29:27:45:7E:19:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08c6190-07a8-3aac-9c89-d80faa243c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:21:9f:37:2c:6a:b7:bf:8c:54:60:5e:9a:a8:dd:a4:59:94:
         d7:95:87:31:68:26:50:28:f9:9a:30:da:14:21:fb:6a:46:1e:
         12:35:48:55:29:fc:d4:54:1a:59:0b:39:b5:6c:c9:cc:5d:e8:
         c0:bc:74:29:b0:ad:48:02:80:ea:16:3e:b0:d3:f6:7f:a0:5d:
         50:04:48:38:06:35:12:b2:a8:82:d5:8f:ef:5c:5b:83:01:06:
         4a:85:92:1d:86:7b:66:aa:b3:98:2b:50:48:a5:c8:a0:06:5d:
         ff:6d:87:cc:48:0d:51:f7:36:44:ed:d4:d5:2d:05:cc:69:c6:
         01:5c:23:65:d1:ff:92:c4:56:5a:40:6e:f7:b5:4b:1e:6c:c0:
         85:3a:18:27:7d:b3:e8:0b:44:5e:db:c3:5f:e8:95:4d:f2:67:
         3a:30:cb:e2:d2:ea:01:12:9c:07:60:f0:e9:b0:13:6a:6a:fc:
         e4:46:47:8a:6b:94:e4:68:e2:f4:7d:2f:4d:61:06:82:14:b6:
         e8:b3:32:a5:17:b5:97:65:cf:4d:4f:59:60:19:55:59:83:9a:
         b2:21:30:f6:25:aa:f2:4b:76:31:a3:f4:5c:3f:a5:f8:5f:70:
         14:96:54:19:5b:8b:5f:fa:ef:6e:9d:77:c6:1a:78:66:59:5a:
         66:45:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:35:46 2025 by rpki-client