Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa
File:                     bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa (raw, json)
Hash identifier:          pZHUW13kRxZNw1iYj5vcwYfaF8tzY6/FzR1n6aga8y4=
Subject key identifier:   3D:7D:CA:21:3A:45:BF:10:D2:6A:2E:8D:61:14:D1:03:68:CA:21:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4429D4BAB2252F444200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:44:29:d4:ba:b2:25:2f:44:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8e9f2a4f-174a-43dc-b699-cf5cf6eec776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:f9:c5:75:94:81:cc:7d:a1:24:e3:b6:c4:
                    a6:cc:86:fa:56:0c:0c:92:97:80:bf:1f:4a:d4:ea:
                    c0:7c:5a:3c:98:7a:58:eb:38:dc:dd:81:7d:6d:72:
                    1f:80:d5:8e:61:f2:80:29:f5:fa:0b:a5:14:e4:ef:
                    7e:77:a1:c9:3e:a8:e7:05:73:36:5c:b6:ae:4a:54:
                    db:e8:ea:1b:96:7d:6a:1c:2f:44:5c:83:2d:c4:13:
                    7b:da:24:1e:df:8b:cc:a5:30:bc:cf:d4:c1:f9:4b:
                    08:e1:de:66:5c:fc:cb:34:cb:3b:c2:d8:91:84:a6:
                    de:30:f4:31:79:03:72:71:1c:79:07:d7:fc:db:fd:
                    8e:19:99:a2:98:ee:b2:3b:6e:c0:a7:c3:58:c7:b0:
                    f7:67:24:d1:b0:77:ae:df:28:f4:16:56:e8:e2:49:
                    c5:2e:12:6a:4d:21:1c:11:60:b0:66:11:f9:4c:40:
                    86:32:b1:c8:b4:d3:68:4b:cf:81:cc:59:d4:66:63:
                    7b:c8:94:01:4d:ca:ee:4a:16:25:22:a4:08:0b:38:
                    11:4f:3c:4b:55:50:0e:dc:32:98:fe:0d:2f:b3:4a:
                    58:e9:43:9d:bc:d0:0c:d4:72:b6:0c:12:88:53:d3:
                    6c:b1:69:c1:c1:c9:c9:bd:08:a1:51:50:69:0d:b4:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7D:CA:21:3A:45:BF:10:D2:6A:2E:8D:61:14:D1:03:68:CA:21:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f9:c4:33:81:79:4f:52:fc:4f:b7:aa:8d:b5:48:bb:ad:b4:
         77:24:42:c8:ba:39:ca:8f:12:9b:05:16:d0:33:18:76:02:8e:
         b7:4b:d8:a9:25:65:17:eb:30:cf:84:73:79:fb:c2:d4:5f:56:
         fe:93:76:f5:46:e8:5e:e8:eb:62:c0:f0:55:93:d0:94:be:31:
         de:d1:3a:3e:2d:fc:f2:87:8f:d0:65:70:50:87:fb:b5:85:1a:
         78:4a:9d:11:2f:de:dc:90:fa:ff:73:52:58:99:37:50:f4:3e:
         3a:b5:83:d9:67:61:a0:c5:2a:95:56:d5:01:d4:eb:5f:ec:13:
         73:0a:51:f8:37:08:74:17:e1:51:92:43:3e:7c:21:1e:95:7a:
         bc:b9:d3:50:e8:14:7b:91:7e:2a:2f:f1:56:69:e1:49:60:c3:
         65:a4:6a:dc:f0:3d:88:b8:6f:90:c8:8b:a2:0f:41:01:06:0a:
         4e:91:46:2e:e8:ee:b4:05:40:5a:6f:99:31:ae:91:1a:37:58:
         58:d3:2b:b6:7e:7f:b4:6a:0a:ca:da:8d:6b:f4:98:c8:2f:41:
         ef:a2:1b:35:b4:d3:2c:51:97:23:b7:12:9c:aa:89:30:f3:f1:
         ef:f4:80:6b:87:62:30:ec:27:45:70:59:36:f3:62:c7:78:c0:
         f6:ab:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:48 2024 by rpki-client on console-ams.rpki-client.org