Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be140576-68f2-3667-aa9e-4b913dd8dcb6.roa
File:                     be140576-68f2-3667-aa9e-4b913dd8dcb6.roa (raw, json)
Hash identifier:          PFdCNd23k4/gRRksyEytlihq07eWHtoJNfNhEeYiTFQ=
Subject key identifier:   1C:11:8A:D1:12:96:9B:DB:D0:02:5C:87:AD:04:2C:FE:92:F2:FD:D4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A719F75B6BB45483DA700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be140576-68f2-3667-aa9e-4b913dd8dcb6.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:71:9f:75:b6:bb:45:48:3d:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=09498c9c-6a83-4749-b34b-10e272181b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:e5:95:df:a0:ce:4d:8a:a9:10:5e:77:4e:
                    b5:b5:ea:f6:ea:19:60:27:fd:67:7e:cb:90:f2:c7:
                    ac:9f:cb:86:0a:a4:14:07:4f:b3:46:c7:2d:00:24:
                    3c:fe:4e:df:60:93:df:af:e5:73:0e:3c:77:77:50:
                    4f:78:6a:fb:55:dd:5c:bb:24:5c:7f:e8:88:8a:65:
                    6e:93:ca:43:c3:72:d8:f3:b8:c5:cf:e2:9b:fc:15:
                    19:c1:44:43:30:2b:0e:e7:1e:07:4b:bc:05:76:12:
                    f3:f1:46:05:0e:9e:3b:74:5b:13:a8:6e:7a:66:7f:
                    07:75:a1:97:e8:0a:96:bd:74:02:da:68:26:c7:3a:
                    ea:94:89:9f:1a:19:2d:d5:50:a8:1f:bc:26:8e:b4:
                    dd:ee:a7:fc:e7:a5:0c:bb:85:97:7d:e7:5f:f6:e9:
                    71:0c:6d:2f:a4:2c:00:4d:1b:a4:e2:e6:3f:33:51:
                    e5:2c:9f:fa:7d:20:df:fd:50:ac:97:90:fd:20:b9:
                    58:15:b7:0d:d3:e7:41:00:94:af:7b:71:fe:f1:99:
                    49:4d:4f:68:de:fb:d8:2e:c1:58:f3:3c:af:61:33:
                    cc:83:45:13:89:66:56:3b:5b:f9:67:dd:06:65:e5:
                    e9:4c:16:59:1b:cf:bb:5b:74:72:d8:b6:ef:e5:56:
                    e4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:11:8A:D1:12:96:9B:DB:D0:02:5C:87:AD:04:2C:FE:92:F2:FD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be140576-68f2-3667-aa9e-4b913dd8dcb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:13:22:c4:50:31:27:cb:e7:f7:f1:11:45:0e:af:5f:da:aa:
         f6:d6:c4:40:40:9e:4e:e8:c8:11:ed:2a:c5:d9:fd:de:92:b6:
         50:a5:68:d4:b0:1a:fe:c9:53:3b:e1:f6:f0:97:61:e2:61:50:
         31:85:83:e7:28:da:fe:5a:b5:c1:4b:e4:fb:62:53:06:56:fa:
         1d:e0:32:c5:bc:91:4d:43:f2:90:5a:50:76:b7:2f:e0:12:3b:
         19:7f:fb:cc:e7:30:16:a1:1e:88:18:df:52:8f:27:15:a5:5f:
         f0:d6:93:c1:81:c4:89:fa:fa:cd:69:ca:bd:40:ab:c7:55:65:
         49:65:9f:29:4e:92:f9:86:85:12:b2:6f:e6:a1:8b:a0:df:f2:
         35:53:e3:55:53:f7:c4:73:6f:bf:54:a4:50:2d:f7:72:0a:05:
         f9:d8:88:95:30:a1:7c:1e:b5:fe:a5:18:1f:ab:39:17:90:d2:
         b9:fc:2d:ef:11:ed:14:29:7d:a2:57:6b:c3:08:9e:09:6e:53:
         a1:64:ec:86:b4:2a:e6:6c:ce:97:fb:d6:17:12:c6:e1:a7:ee:
         4a:80:0d:06:ec:f9:ed:35:04:fd:d3:71:03:c3:b8:fc:7e:24:
         24:0b:04:17:b7:bc:ca:58:db:89:3b:9f:3d:52:f8:7c:44:7b:
         3d:84:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:34 2024 by rpki-client on console-ams.rpki-client.org