Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa
File:                     c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa (raw, json)
Hash identifier:          YIpzfc41Ktqhsji0w9nQH35KtrrK1Vz9bq4QqOniWBc=
Subject key identifier:   2D:9E:12:D7:3B:B6:CA:D0:58:51:27:23:B2:FE:36:10:7B:60:51:17
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A769F598E77050434AD60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:76:9f:59:8e:77:05:04:34:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=73c0fb9f-0b39-4b5a-a883-6858e3e0a77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:a1:3f:fc:a8:fd:c3:15:63:e7:ee:46:88:
                    a6:f0:f0:1b:21:84:b8:7a:52:c1:aa:23:ef:ad:17:
                    07:cd:ab:c5:75:16:8a:3d:24:b0:10:59:d1:d7:48:
                    1b:6e:53:d4:84:8f:b6:26:89:ba:23:3f:e6:7d:63:
                    5e:63:7d:86:cd:0d:42:e3:84:40:25:70:c7:0c:61:
                    6c:65:ed:dc:e8:5a:9a:c5:13:10:7c:82:b7:95:d9:
                    f8:27:6f:61:2f:03:38:f1:a0:4a:41:f4:34:12:6b:
                    83:c6:40:25:3c:a3:ac:15:bd:00:08:0d:38:49:88:
                    61:be:cb:6c:a6:36:98:a6:62:7f:6f:e3:49:e2:b4:
                    e4:22:02:ca:cb:40:9a:7c:1d:36:d4:7c:95:2a:ad:
                    6a:d1:78:59:32:d6:cc:56:97:6b:a7:4a:ce:b4:74:
                    38:d0:a6:50:69:c4:a6:79:1b:a2:91:98:32:9b:b1:
                    dd:af:dd:be:30:ca:e0:e8:57:46:4e:1e:86:63:3c:
                    11:7f:6d:c2:17:ee:ef:29:f9:e3:d8:71:d1:d4:14:
                    06:e6:dd:43:49:7e:39:40:a3:22:e4:ae:63:10:1f:
                    a2:a8:cb:0f:d8:64:78:8a:76:4d:10:e3:ea:66:27:
                    0d:54:f1:15:23:cb:78:a6:8d:1a:d1:07:e0:2f:30:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9E:12:D7:3B:B6:CA:D0:58:51:27:23:B2:FE:36:10:7B:60:51:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c35f74ac-9d73-3de8-9d68-b46afcc8dc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:4f:6e:48:6f:24:7a:9b:bf:ae:3d:26:79:76:10:11:f8:
         d6:8b:d3:bc:5f:ec:f0:9e:e0:52:30:96:fc:4e:d6:2a:76:17:
         bc:f9:5e:9c:f5:cd:33:0d:5f:6d:a6:93:2c:e8:00:17:58:36:
         4f:00:a9:e7:2e:52:35:ca:4b:79:06:83:6c:d6:4c:46:18:48:
         91:d5:9e:fe:19:95:3e:da:30:c7:e8:d7:f9:44:8e:14:2c:b8:
         f3:76:e7:29:9f:dd:60:45:4d:a7:fc:03:5a:7a:8a:44:5d:4c:
         b2:98:f0:2a:9e:50:0d:9f:a0:67:f3:1f:d8:1b:f9:c9:39:ec:
         d4:51:f1:8a:b2:87:5a:35:5e:87:f3:19:df:d9:92:82:7f:c2:
         f7:9f:ba:c8:b1:9c:53:3f:59:70:ae:44:06:2d:45:a1:2a:8a:
         60:fc:5a:b6:a1:98:54:d9:c4:c6:40:97:e4:f0:b8:ee:16:99:
         97:83:53:e0:37:fe:ac:b4:fd:a2:fc:25:18:4f:07:25:8d:2e:
         66:03:af:1b:1b:33:83:4b:25:d1:86:b4:c9:4e:09:97:7b:9c:
         de:69:50:ab:28:a3:81:4f:d3:db:64:f5:0a:b8:37:9f:aa:31:
         8e:9a:e6:67:37:f2:1b:d1:04:99:5c:aa:96:a5:93:10:b4:35:
         b7:67:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:37 2024 by rpki-client on console-ams.rpki-client.org