Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfd18d38-173c-38a0-99c2-016b58e2eb91.roa
File:                     bfd18d38-173c-38a0-99c2-016b58e2eb91.roa (raw, json)
Hash identifier:          lXEOx/m6OvmQTcyA6PmRtbaaxJSr5Nx/dG2fKPsrtOo=
Subject key identifier:   14:23:21:76:C4:75:3E:33:1E:E6:4F:A5:03:84:F7:9E:10:3D:4C:7C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DFA793B6B7C5502A47420
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfd18d38-173c-38a0-99c2-016b58e2eb91.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:fa:79:3b:6b:7c:55:02:a4:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=97b7851f-2a95-4622-a16c-70a0dbba219b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:58:11:59:9f:5a:97:79:87:ff:ef:51:e9:
                    c3:35:4c:3d:d4:eb:67:b0:f9:5b:01:52:88:20:f7:
                    22:30:c5:7a:f3:f5:34:04:f9:03:5e:28:e0:c4:f5:
                    e8:ac:46:2f:5d:12:cd:63:57:90:55:25:cd:03:a7:
                    1d:67:7f:3e:aa:05:42:b3:a9:c8:01:6f:db:8f:27:
                    b6:dd:66:2a:13:2f:28:78:36:91:b7:ad:69:63:cf:
                    7e:7d:98:e0:8a:2a:fe:56:c6:09:de:47:74:b7:e7:
                    64:bf:7b:7f:74:68:f8:9b:8f:85:f0:c4:5a:8e:ac:
                    e8:64:71:ce:51:12:66:48:cd:5e:f3:71:75:d4:c6:
                    b2:8b:77:80:36:ab:0d:4a:41:c4:eb:1b:0f:e8:f9:
                    d5:64:2f:42:f5:6a:b4:87:c7:98:a1:ec:ed:0e:2f:
                    f2:23:31:e4:13:e2:1e:a0:92:c1:4c:22:a2:36:2c:
                    d4:02:ea:b9:e2:99:e1:23:52:0d:ab:42:90:f1:9f:
                    1d:cf:c8:4b:b3:d9:03:d1:59:3c:b0:9d:d7:e5:1c:
                    0a:49:67:92:f1:e8:74:26:19:68:9a:f2:75:ef:1d:
                    98:59:3c:f1:a7:cc:fa:18:23:5c:63:74:10:81:37:
                    ff:76:d4:8e:21:e9:31:8d:06:98:30:c4:a9:50:1a:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:23:21:76:C4:75:3E:33:1E:E6:4F:A5:03:84:F7:9E:10:3D:4C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfd18d38-173c-38a0-99c2-016b58e2eb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:37:59:a7:81:05:cc:0a:53:d5:5c:b6:d2:86:87:84:2f:92:
         20:70:16:07:b7:4a:d7:34:af:48:05:a5:f6:43:50:ac:2a:55:
         ee:f8:c2:40:cb:a5:0f:06:72:75:2c:50:5b:5b:8a:cb:e5:f1:
         4c:ad:ef:43:b3:63:09:16:26:6a:c7:50:39:7c:d7:f2:0f:f4:
         fa:a9:29:c9:79:44:2e:97:32:a9:b1:23:5d:1e:03:dd:1a:0b:
         7c:37:b4:a9:ae:cd:5e:1a:ca:af:be:d9:64:66:2e:5f:27:df:
         a6:b6:9a:aa:d0:2d:f0:4f:ec:2d:14:ef:79:f6:08:da:4c:7b:
         2e:a3:d7:f0:70:cc:da:b1:ed:10:2d:90:cd:10:80:cb:fe:bb:
         d9:5b:da:c1:42:50:27:e9:24:95:53:9e:de:23:21:8b:f7:b6:
         d9:9e:35:4f:43:b5:5b:83:f3:03:42:d0:63:90:f2:9b:6d:c3:
         86:6f:bb:07:2f:7b:d8:d9:b3:ad:ff:93:9b:d8:95:b8:78:79:
         5e:d0:a2:fa:46:56:68:22:dd:93:95:67:3b:25:83:6a:a3:5b:
         c7:80:75:30:71:47:d2:2b:68:dc:39:d5:e5:45:20:38:de:8d:
         89:c9:d6:86:51:c5:ab:19:15:84:b9:76:ab:88:d7:69:ad:22:
         00:37:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:10 2024 by rpki-client on console-ams.rpki-client.org