Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0d096fd-ce05-3570-b478-8c81ab37091f.roa
File:                     c0d096fd-ce05-3570-b478-8c81ab37091f.roa (raw, json)
Hash identifier:          uIhEme73idZr8769wi/jq44MWq17HS2HwFUba/Ibmfo=
Subject key identifier:   50:26:97:94:B0:13:19:C7:37:E2:48:11:CA:14:49:08:04:67:BA:51
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58109741A63005F7A239100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0d096fd-ce05-3570-b478-8c81ab37091f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:09:74:1a:63:00:5f:7a:23:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a7753daf-7045-48e7-b1e4-c8720717fb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:5d:45:e1:cd:bc:db:28:a5:f8:e1:f2:a8:
                    e4:a1:ee:90:9b:8e:9a:71:15:24:3d:d5:4f:7b:65:
                    07:6b:d4:63:54:1b:53:aa:8a:50:10:17:67:d1:69:
                    11:26:18:ca:da:76:23:7e:d1:34:da:f8:22:6c:ce:
                    3b:b9:ff:71:7e:bb:03:e5:1e:12:12:9e:1b:ea:5f:
                    44:8b:9e:39:06:12:b8:ed:24:71:f5:6c:cb:c4:f6:
                    49:77:66:28:ce:d5:bc:05:d9:26:a7:c1:b9:4c:f0:
                    68:41:7e:9d:c2:45:24:e4:37:5a:c5:a2:17:7b:4c:
                    70:60:72:e4:79:2a:52:da:63:d5:f4:eb:c1:ca:7e:
                    96:bf:11:35:8a:7f:a9:17:93:d6:e0:46:6b:f6:18:
                    9c:c2:40:95:f7:cb:c3:cb:8c:10:8b:b4:ee:f2:7a:
                    36:8e:6d:2e:b9:48:7d:c8:e8:3a:88:65:9d:e3:a3:
                    b9:d8:b0:e1:29:36:8d:39:5d:3c:8e:bd:e1:70:f3:
                    bf:b3:cc:10:ca:f2:d2:1d:dc:74:49:2a:e7:22:31:
                    ff:b1:6c:d1:10:5e:ce:8e:bf:33:16:9d:34:75:94:
                    c3:d2:81:9f:dc:4d:eb:fd:4d:c7:72:66:b3:83:95:
                    93:01:8d:81:91:9e:88:8c:88:9d:b7:77:19:08:58:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:26:97:94:B0:13:19:C7:37:E2:48:11:CA:14:49:08:04:67:BA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0d096fd-ce05-3570-b478-8c81ab37091f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:d3:04:c5:54:94:63:11:ca:ee:e6:74:66:a3:03:03:8a:bd:
         f8:91:b1:01:24:86:2d:dc:04:90:f8:2d:95:cc:0b:6c:eb:93:
         6a:c2:cf:90:02:7f:04:bf:23:13:84:95:3b:44:88:42:a8:6f:
         a3:5e:6a:fd:fa:d4:6a:fd:9b:04:eb:f8:f7:6d:f2:ea:4d:2d:
         94:c2:3a:66:43:9a:24:96:0e:cc:c8:b4:8b:12:fc:ad:0f:62:
         0d:02:13:e1:1a:24:97:82:b9:8e:01:a4:96:5e:e3:59:41:03:
         02:13:53:a1:5e:e2:82:c8:17:10:f9:26:a5:29:86:cf:2c:f1:
         2f:ef:58:05:14:0e:37:7a:8d:dc:ad:77:89:8b:32:a9:b7:ad:
         0e:16:ca:e9:db:5c:59:ba:a5:96:5d:ff:4f:22:04:23:3b:27:
         9d:fb:c3:ec:ab:c0:e2:8a:49:7a:61:73:cc:31:36:1a:6f:55:
         00:b0:90:28:ae:e5:67:70:d3:2e:20:ba:33:a6:11:20:83:46:
         1d:3b:f6:4f:26:01:f7:49:b7:56:d4:96:55:5b:21:d4:5a:01:
         df:a4:f9:a6:74:ec:fe:39:bd:a6:ac:13:54:bd:50:44:95:e6:
         2f:cb:59:15:bd:db:24:bd:c5:4c:15:b9:e2:37:d8:5e:c8:86:
         ef:1d:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:45 2025 by rpki-client