Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b75829ce-f9a5-36db-aefa-23ed7cf5bf3f.roa
File:                     b75829ce-f9a5-36db-aefa-23ed7cf5bf3f.roa (raw, json)
Hash identifier:          Szdisn+aR3FYGUlPKlMRc6KK+lqSzgr0JQ2CYgdThAs=
Subject key identifier:   ED:17:36:27:B1:6B:58:EE:0A:0F:73:D5:E2:28:B1:0F:33:83:74:46
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0C4E4D2E788A2711FBB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b75829ce-f9a5-36db-aefa-23ed7cf5bf3f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:0c:4e:4d:2e:78:8a:27:11:fb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=f3987532-1a05-4524-ac9b-5091b4689b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:d9:b8:b2:1d:ab:ac:38:ed:81:42:9e:11:
                    84:a6:60:26:00:f1:15:9b:c0:ba:ad:28:c9:b1:9b:
                    38:1e:a8:9d:a6:db:0f:f5:55:c4:d4:30:3a:17:35:
                    54:2f:a8:09:aa:a4:3d:7b:5e:62:2a:ce:8c:52:13:
                    53:8e:2b:d0:32:b6:41:bc:a7:74:7b:ba:ec:4e:17:
                    e6:83:63:14:91:f1:01:63:7d:b6:af:66:af:a6:c1:
                    8f:d3:6b:68:ba:88:00:fc:5c:36:5a:69:48:b9:0e:
                    49:1f:06:7d:0c:74:31:06:9f:4d:1f:52:12:0e:35:
                    25:21:92:57:32:0d:dc:2c:95:05:99:b8:bc:c6:7c:
                    ac:3c:87:a0:d5:eb:e1:a6:82:f8:ea:de:c7:26:e3:
                    8c:1e:a4:3d:0f:6a:0a:d7:7d:df:62:a7:62:c8:dd:
                    48:9a:40:5f:bb:cb:8b:09:5a:e8:a7:1c:2d:c9:06:
                    3f:83:3d:6c:e4:03:40:b7:24:15:4a:f2:14:a4:ba:
                    56:8e:fd:2a:5b:49:ad:55:05:3f:48:a0:7b:02:c9:
                    c1:3d:9f:88:31:7a:a7:09:fe:10:30:db:e4:81:52:
                    a9:60:86:93:e7:ae:ba:2a:a3:82:c3:e1:0e:07:33:
                    c4:f1:f3:a0:2f:97:4b:68:fb:17:49:67:78:2a:6f:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:17:36:27:B1:6B:58:EE:0A:0F:73:D5:E2:28:B1:0F:33:83:74:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b75829ce-f9a5-36db-aefa-23ed7cf5bf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:5f:09:8c:8d:f1:11:72:8c:56:1e:aa:bc:74:7a:fb:bb:
         4e:74:c6:35:11:2f:15:85:2d:4e:32:fa:bc:e3:ab:b0:37:da:
         fb:fd:39:d2:1d:f8:35:32:fd:a3:e5:ba:7a:23:91:2d:e0:ed:
         5f:38:dc:aa:49:e8:b5:2d:69:6e:71:6a:42:af:57:1f:de:1d:
         5e:c5:3a:94:8a:97:64:56:68:bd:d2:2e:19:26:09:0e:c1:1e:
         19:3a:43:68:f8:3c:23:eb:3b:55:de:0a:7c:0d:85:d3:5b:41:
         ba:ca:61:76:57:d8:82:ef:0a:02:c5:e0:91:33:00:f9:16:9b:
         91:03:ac:13:30:fc:66:ee:53:01:72:34:65:96:e8:7b:c4:c9:
         ec:66:7a:e6:cd:2c:0f:71:1b:17:bb:e2:bc:38:5a:6b:90:4d:
         70:e2:85:31:94:9f:7b:fe:00:21:1e:c6:34:71:6d:9c:e6:6f:
         9e:d2:f4:3d:c4:90:7e:12:e2:d6:87:4e:0a:36:f0:9d:a7:18:
         55:68:fa:d0:46:65:93:d5:8e:46:7c:cc:25:4c:4c:f1:6d:a0:
         ac:cb:7c:ab:55:60:93:b8:1a:d8:55:2b:6f:46:86:cb:2a:86:
         0b:14:ec:4b:0c:d8:36:d7:40:26:35:99:aa:d9:f7:90:99:a5:
         b0:69:71:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:27:35 2024 by rpki-client on console-ams.rpki-client.org