Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa
File:                     c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa (raw, json)
Hash identifier:          5H1dNZBw/OBOTFw6LHLqv4EBILU5NuTwtrszt1Pm5Fg=
Subject key identifier:   78:DD:49:CB:01:48:25:C2:80:EB:1C:00:4F:1E:4F:E1:5E:A1:47:31
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DC5B986E04D112A467C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:c5:b9:86:e0:4d:11:2a:46:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=bfda908b-2e0c-4d6f-a4b8-e28ee9ed0967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:2a:f5:83:86:31:50:59:c9:7b:00:06:90:
                    57:eb:24:8a:e6:14:68:ab:fa:df:93:07:80:4f:cf:
                    0f:cf:83:61:6e:32:d8:e7:29:0a:16:fb:ca:03:07:
                    29:14:47:41:94:30:ea:2f:e4:71:4d:19:0d:1f:d4:
                    b8:85:d7:42:08:6e:27:a3:0e:16:88:64:27:f8:91:
                    0d:e8:3b:16:4c:86:66:47:84:55:66:14:52:25:06:
                    27:55:50:59:ec:64:86:67:3b:c1:a3:00:12:59:e4:
                    09:06:b5:36:2b:d6:8e:33:3e:89:bd:90:cc:06:64:
                    54:48:01:d8:ce:e4:de:f3:26:b2:16:91:9a:24:cb:
                    68:ee:75:ff:55:19:53:9e:e7:d4:6c:11:da:d1:34:
                    45:db:b6:30:9d:1e:7e:f5:be:ca:99:0f:d6:f5:b4:
                    f9:1c:04:98:32:95:9a:af:fa:1c:8d:18:59:99:17:
                    e5:f6:81:af:18:68:a1:24:4b:7e:3f:ed:91:ab:f1:
                    4b:f7:73:d8:70:db:9c:8a:9e:b7:ad:eb:d3:fc:f2:
                    08:e3:8c:bf:0a:ad:a5:60:5c:8a:07:5f:e2:85:4a:
                    1f:8a:7d:fe:6e:d6:f0:c9:ca:20:f6:f8:09:ba:b2:
                    14:d2:d4:9a:2c:87:97:b3:64:0c:e0:ff:66:79:c6:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:49:CB:01:48:25:C2:80:EB:1C:00:4F:1E:4F:E1:5E:A1:47:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:cd:d8:0f:68:30:68:a5:74:97:98:81:9b:b1:32:27:c0:1c:
         e5:2e:1a:c7:d6:c7:16:78:e4:6e:b4:22:0b:e8:b0:bb:37:6e:
         b7:ad:03:cf:3c:c3:ca:59:ce:dd:3c:1f:1f:7a:92:45:33:32:
         86:f7:24:ee:09:1f:1f:06:dd:a5:ca:e6:9d:26:65:64:23:35:
         cc:63:6e:08:c4:b2:ff:2b:2e:9d:e5:63:ae:44:38:4a:ee:11:
         35:87:ba:85:e5:8a:a4:7d:67:09:ef:da:cc:4a:da:a3:f1:5e:
         45:63:e0:0e:97:c6:f0:99:85:7b:0a:ee:44:8c:0d:59:cf:b0:
         25:c8:08:6c:f3:b1:cf:35:16:12:92:a0:fe:0c:71:34:a5:28:
         6b:bc:7e:38:f2:95:ec:90:85:53:59:84:d2:67:07:78:7b:d7:
         d2:64:f0:8d:ce:b6:50:af:a6:ca:23:02:e1:da:d0:67:ff:0e:
         de:ea:74:45:3c:93:9b:a0:f7:5e:6e:11:27:b1:d1:88:6c:7a:
         26:86:5b:d4:85:24:e9:d1:b6:a9:88:13:31:08:3d:9c:33:d6:
         fa:61:cb:c9:7e:a4:30:9d:60:ca:b7:44:fb:3d:22:a4:69:9a:
         75:ff:74:01:89:a5:8b:75:bb:84:3d:89:1b:6c:bd:43:6c:5a:
         41:46:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:48 2024 by rpki-client on console-ams.rpki-client.org