Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b42e26e3-7bf8-3912-a227-c1c67dcd4f6b.roa
File:                     b42e26e3-7bf8-3912-a227-c1c67dcd4f6b.roa (raw, json)
Hash identifier:          c99yfpLnxQczgS+FvrBweqiMBssI2/+or78jJYj3dZQ=
Subject key identifier:   26:FC:5F:29:13:71:77:EE:D5:78:97:53:71:40:AA:C4:56:E4:D1:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D7AC43597A74A75385AC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b42e26e3-7bf8-3912-a227-c1c67dcd4f6b.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:7a:c4:35:97:a7:4a:75:38:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c2c72d05-b315-4f3d-925d-d89305fdb4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:49:23:dc:e8:d7:5c:5f:e9:a5:16:0f:99:
                    47:61:df:e3:ef:cd:d7:b4:5f:c1:67:55:83:94:ed:
                    98:68:0a:1b:50:d4:9c:f2:45:5a:dc:7b:a1:fb:cd:
                    a2:aa:cd:f8:23:a3:6a:0a:a1:b2:d0:45:27:4e:f5:
                    dd:ed:cf:6f:42:7f:08:85:64:df:2a:14:7b:94:9b:
                    2c:e0:f0:5e:73:bc:67:26:96:4b:5b:18:c7:bc:80:
                    f1:82:0b:70:10:4b:fc:91:dd:c0:4e:5d:18:c2:3a:
                    cf:02:8b:2a:b1:f0:9e:e6:d4:0e:10:ad:d1:e8:80:
                    07:26:96:f8:e7:1c:13:29:19:7a:c1:bd:f9:15:fe:
                    b2:26:90:e7:92:32:34:e1:cc:5a:1c:1e:a1:ac:52:
                    cb:ae:15:c2:d7:ae:e8:35:17:e7:3c:4e:fb:82:1a:
                    74:45:3b:fe:ce:50:b1:76:ab:45:a5:18:7b:49:88:
                    f7:bc:fa:94:9e:35:51:09:0e:33:1a:99:2f:21:d1:
                    da:71:c8:a5:bc:f5:d0:c4:ea:16:66:3d:4f:a3:28:
                    a4:81:c2:27:0b:4c:02:be:59:7b:82:9e:bd:63:df:
                    22:54:4a:40:0e:8a:89:03:70:4d:e4:26:0b:e9:84:
                    d8:92:14:3b:77:0f:0f:33:eb:17:49:1d:35:e5:50:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FC:5F:29:13:71:77:EE:D5:78:97:53:71:40:AA:C4:56:E4:D1:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b42e26e3-7bf8-3912-a227-c1c67dcd4f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:91:a2:59:4b:01:1a:1b:e9:87:21:93:ea:5f:f0:b1:9a:
         5e:4c:bf:bd:82:a8:0a:62:5d:a1:ba:70:7e:68:63:37:b3:30:
         4b:f6:4a:f6:2e:5c:7f:67:de:2f:c4:9b:a9:dc:28:bd:d4:88:
         44:2a:c7:32:3f:0a:22:31:60:73:47:5e:98:21:80:66:88:c3:
         42:43:c4:cd:5e:a3:4f:6d:6b:9a:54:a4:e4:dc:28:fb:a4:d9:
         d6:c6:c3:3d:24:0e:dd:2d:dc:6c:10:bd:c3:5e:c6:09:22:d0:
         20:06:46:a6:09:91:11:24:82:a4:83:01:b5:ee:ca:d0:45:f0:
         5f:91:52:50:75:5d:f7:3f:ed:c8:39:b5:c9:35:7b:b7:7b:2c:
         ea:f1:3b:5f:6c:63:b7:fe:79:fa:2e:88:37:b6:66:76:0f:0a:
         31:e9:6a:86:fe:4b:54:00:c0:f8:08:17:23:c6:81:7d:20:3a:
         f3:f0:30:3a:32:dc:c7:6b:ef:7d:e1:2b:59:cc:08:15:3a:3a:
         da:54:17:a8:c2:9e:6e:87:64:df:dc:82:78:c9:9c:c1:a5:12:
         e4:bf:8b:7d:d5:09:28:b9:22:fd:f6:21:34:cc:96:70:bc:04:
         c7:60:1a:05:80:be:c6:a4:26:4d:14:de:5a:c9:fd:93:35:09:
         5c:be:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:10 2024 by rpki-client on console-ams.rpki-client.org