Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa
File:                     af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa (raw, json)
Hash identifier:          ibQ6r7qaYhGGfGxP6nGBCjEGIYoBuCyO5EDUo7ZAQGY=
Subject key identifier:   FD:EE:7C:9D:53:77:94:03:8B:A9:80:A3:4F:56:C9:91:CB:35:37:24
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D7EEDFA82776CAE6349C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:7e:ed:fa:82:77:6c:ae:63:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=625ecbed-8a28-4fee-a693-b7b5e29ad980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:2d:73:cb:4e:8e:88:d7:8a:91:ed:48:76:
                    94:88:f8:02:eb:9d:57:45:44:45:a3:4d:d4:6a:99:
                    8e:9b:14:93:17:94:3d:08:c2:58:47:f0:3f:0c:44:
                    21:6e:b4:98:7f:6a:32:75:43:45:24:39:b5:52:dd:
                    5e:45:90:18:ad:05:f4:0a:cc:cb:13:c9:70:1a:f6:
                    70:f4:2e:0d:65:25:7f:3f:43:77:c0:9e:77:c3:60:
                    4a:0b:ca:bb:a2:87:5a:13:d7:c7:94:2b:6c:ed:1c:
                    1a:1b:9b:7f:35:54:62:9d:d4:05:52:5e:47:72:67:
                    16:0b:4f:f7:92:7e:2d:96:e0:79:f1:75:86:a0:c9:
                    ec:67:a6:42:b0:50:7c:49:88:3c:b2:8c:d6:c0:0f:
                    17:31:47:ba:2d:f1:b8:21:e6:4d:3d:27:e1:85:90:
                    ff:52:68:1b:f1:e7:5b:12:b1:2b:71:05:c6:8d:c5:
                    71:07:59:f3:31:f7:45:8c:f2:0f:f3:dd:9f:ad:80:
                    fa:07:a1:91:0a:0e:ed:43:db:fd:85:6f:34:2b:00:
                    39:f4:0c:d4:cb:9a:5d:03:63:5d:dc:df:72:a9:5f:
                    2c:40:b8:b2:22:7d:70:6f:3b:c2:62:8e:15:57:09:
                    aa:47:bc:cd:b6:01:ce:c8:f8:d2:0e:a5:74:5e:83:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EE:7C:9D:53:77:94:03:8B:A9:80:A3:4F:56:C9:91:CB:35:37:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fb:1d:3b:a1:ff:b2:9e:e3:0a:12:e9:9c:99:d5:08:15:56:
         6a:ba:32:aa:bb:1e:27:80:3c:e8:8e:14:97:50:1a:b9:1b:17:
         b0:36:d3:0e:6b:3d:7e:76:0c:83:d4:3a:98:64:e3:39:54:70:
         21:53:77:00:8a:2f:2f:59:4d:04:d0:cf:78:8f:6b:f0:bf:c1:
         10:42:8f:c0:e4:7d:a0:7d:6d:7f:c4:9c:02:ad:a0:0a:27:6c:
         67:75:29:1b:3e:1b:14:8b:cd:51:a9:a0:50:c3:45:77:b4:3f:
         76:22:9a:71:04:70:76:28:f7:ab:1f:49:06:66:ab:eb:f8:12:
         0c:d5:10:0b:18:d0:75:c3:87:ea:4e:67:ed:80:d9:34:bc:8f:
         96:bf:1a:06:dd:d4:ec:29:21:d9:d7:3c:97:df:ef:6a:c1:81:
         82:26:c9:83:e9:f5:77:60:16:0b:65:e7:b2:e9:93:a5:3c:05:
         d4:d8:52:3f:07:68:20:84:eb:db:ec:f2:69:73:2c:72:92:ec:
         d7:db:82:97:39:e4:4f:bf:8c:f1:b5:01:6c:45:38:24:0e:11:
         2a:54:80:cf:c0:52:5e:44:2b:11:c8:17:ef:5d:2b:da:2c:7a:
         44:e8:f4:f9:1c:6b:60:97:59:bb:8c:fb:5f:f1:3a:0e:c3:7d:
         40:41:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:47 2024 by rpki-client on console-ams.rpki-client.org