Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce442315-e170-30ff-b2de-fc731ca349d2.roa
File:                     ce442315-e170-30ff-b2de-fc731ca349d2.roa (raw, json)
Hash identifier:          PDc37T0Ob3fm5mwWYMakrPCJyzuACgKmhA+/fBqIU34=
Subject key identifier:   BE:7A:64:B4:B6:D5:A5:C8:E8:89:CD:20:E3:80:84:8E:7B:E1:08:C0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4151CC89114355BD3280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce442315-e170-30ff-b2de-fc731ca349d2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:41:51:cc:89:11:43:55:bd:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=fd935125-9e28-43a9-a03b-ffe9876897b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:97:a7:09:b0:d9:eb:ac:dc:09:31:53:fa:
                    a4:cb:40:54:95:ce:6f:1e:a4:6f:d2:77:87:d6:53:
                    f1:7f:89:59:53:16:dc:ed:29:16:f6:2a:7f:7b:31:
                    b6:7c:f0:3c:c1:64:b8:31:fa:d1:0d:9d:24:82:69:
                    bc:55:38:36:01:2c:e5:55:fd:d2:21:87:40:63:8c:
                    11:1b:73:c5:47:31:b1:5b:24:4f:19:05:70:12:7e:
                    15:b7:8a:f8:31:1f:c0:0b:93:95:43:30:38:c5:9a:
                    29:f6:35:34:34:79:de:28:aa:b1:b5:4d:83:ab:76:
                    95:20:51:c6:3d:06:dc:3c:ff:11:fb:f6:8b:8f:d8:
                    44:ab:23:c0:d5:7e:b6:ad:82:db:6e:20:c4:7c:2c:
                    b5:4b:9b:0a:3d:69:58:77:25:84:20:49:fc:63:64:
                    64:fa:90:ca:a7:77:9f:96:2f:b8:c6:43:6a:2b:5b:
                    34:c1:3c:85:97:00:22:f8:bd:be:1d:bc:ee:0e:ee:
                    53:a4:65:af:88:6d:6e:a7:c3:b0:e0:1e:4a:a3:4f:
                    73:13:3f:50:5f:17:e0:43:04:07:bc:94:42:44:60:
                    09:40:6f:8e:58:6a:ff:1c:5e:3b:c5:cc:bd:7a:75:
                    84:e0:c0:a9:dc:3c:b4:79:18:c3:b0:85:81:90:5d:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7A:64:B4:B6:D5:A5:C8:E8:89:CD:20:E3:80:84:8E:7B:E1:08:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce442315-e170-30ff-b2de-fc731ca349d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:af:44:5a:55:dc:de:d2:24:20:83:91:29:69:3d:d3:89:
         4b:4f:67:7d:7d:78:a8:d0:34:46:24:d2:18:b6:a2:a2:70:4d:
         fd:b5:b3:7f:13:55:26:6c:bf:9c:44:80:39:4d:42:02:2c:b4:
         e8:41:86:c5:01:60:e4:90:ad:6e:fb:30:ff:80:8f:e5:7a:b1:
         6c:71:2a:04:f0:fa:04:c4:83:08:96:b3:f2:26:be:de:31:07:
         84:62:fb:a7:cb:ca:13:3f:61:5e:7e:b0:dd:66:2c:63:91:88:
         20:64:53:58:a3:13:e5:56:34:27:ba:91:9a:f3:0c:32:af:3c:
         43:94:40:8c:66:22:8a:f6:8e:23:79:2b:d2:6f:f0:15:48:fb:
         28:44:79:71:45:04:a8:83:15:d9:c5:9f:d6:22:bd:00:75:25:
         f4:a9:a9:97:08:b8:ca:2b:76:e2:c4:71:02:b6:8d:1f:21:7f:
         de:91:59:21:e9:97:ec:98:e7:df:7e:a1:21:2c:04:fc:3c:fb:
         9c:da:a3:46:9b:14:60:03:11:33:55:7f:48:8d:ab:36:14:ba:
         e3:22:f2:1f:42:05:e7:12:86:f0:61:56:8e:00:46:91:3c:66:
         68:41:50:d8:d9:29:ad:04:d8:e5:db:23:51:4e:9a:1a:56:eb:
         7c:6c:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org