Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa
File:                     c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa (raw, json)
Hash identifier:          KU98sbju7sknMUyJA8Wdi/sKsq/ow0jAHbbAcnKi2k8=
Subject key identifier:   CB:A4:B3:AB:5C:68:8A:34:BE:D7:E9:9C:EE:34:DB:05:4A:84:CC:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0610BD5D676D05F99080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:06:10:bd:5d:67:6d:05:f9:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0c2dcd27-6f82-415e-80de-9800872733bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:25:fb:b6:90:f6:25:53:20:8e:a5:b1:54:
                    bb:1f:01:80:b0:34:f1:9d:cd:98:4d:5d:6a:75:28:
                    f9:d4:6c:24:fd:23:19:39:c7:4d:f2:b4:db:c7:a5:
                    f9:10:b6:bf:9a:1a:3d:0d:4e:eb:6c:56:e4:92:92:
                    9f:b4:a8:75:c3:3b:1c:f4:bf:59:03:e5:1a:0f:82:
                    d6:51:f6:57:49:13:44:90:86:19:2c:fe:e0:4e:a9:
                    7e:82:c4:1a:f1:79:b5:0f:37:40:b3:96:9c:11:f8:
                    76:31:06:2c:1f:b4:73:64:93:31:c0:11:c5:c4:2e:
                    a5:b0:01:00:b0:c0:f6:fa:fa:da:90:53:9e:91:a5:
                    f8:aa:8e:ec:c9:d6:8b:0a:6b:5c:54:1a:76:7c:e8:
                    23:7f:87:bb:2a:9e:d8:7a:26:e7:91:0d:07:cd:79:
                    1d:1c:bf:c7:5c:f4:0b:4e:03:74:27:d9:a0:7b:a3:
                    5d:45:7a:95:00:ce:ae:61:06:39:96:aa:22:2d:7c:
                    84:01:34:cc:21:4d:db:23:60:0f:ff:2d:e0:a2:bb:
                    5f:01:6f:c5:e3:0c:3d:d0:78:f8:3e:9a:44:6f:9e:
                    a0:55:9c:a5:a3:8c:06:98:bd:be:71:e2:94:86:27:
                    c4:2c:86:99:d5:54:ce:1d:29:f3:f8:6e:f7:f8:49:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:B3:AB:5C:68:8A:34:BE:D7:E9:9C:EE:34:DB:05:4A:84:CC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:1c:ba:e3:cb:3e:33:8e:be:54:7a:05:30:71:c9:be:8a:
         ab:f8:8a:14:b0:46:33:34:42:39:a8:64:b0:ca:35:b5:a8:82:
         4b:eb:a7:ce:e2:db:4c:58:38:5b:53:c4:e9:13:e6:78:c7:7c:
         5c:a4:c7:e3:ec:de:01:07:ef:a2:02:b9:49:cd:cc:86:5f:b8:
         78:4e:4f:4f:84:67:39:8a:27:97:99:98:db:73:05:9e:dc:72:
         3b:fb:60:67:47:76:61:4f:43:29:a3:0e:3d:37:1a:da:1d:ea:
         e4:c5:c7:db:24:ab:17:9c:b9:10:3d:09:aa:e4:e3:d9:94:34:
         96:c9:d8:13:d6:ad:d5:8a:7e:e1:ee:68:d0:33:c8:05:ca:d1:
         43:ff:4e:e8:8e:ed:e5:c4:ce:f7:fe:97:7d:46:d8:80:5a:4d:
         ec:a9:42:ff:4c:27:53:fb:87:a5:14:16:c7:15:da:ca:59:cd:
         52:a5:70:cf:9f:05:84:a0:99:f1:0d:57:f3:5a:f5:0d:2a:2a:
         88:22:90:9d:09:1e:ef:67:63:a6:8b:20:7a:11:03:99:33:eb:
         90:6f:97:dd:99:bc:eb:2c:14:6d:79:d1:1c:39:e3:3f:0e:89:
         fb:8b:f3:1d:90:fa:ab:03:8e:06:cb:bb:d2:36:c4:1f:a5:d0:
         10:71:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:36 2024 by rpki-client on console-ams.rpki-client.org