Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dceba2c5-8242-3262-bfe0-d5279a3e4851.roa
File:                     dceba2c5-8242-3262-bfe0-d5279a3e4851.roa (raw, json)
Hash identifier:          aAWq9P5KmBgu5mLSAScOa7n3IAMLBPeZ4nHNWsOGzos=
Subject key identifier:   28:62:36:E9:69:77:68:EC:2D:D6:B1:E1:1F:C6:79:E1:E9:6A:D9:5E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D80EA73D05136FE3764F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dceba2c5-8242-3262-bfe0-d5279a3e4851.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:80:ea:73:d0:51:36:fe:37:64:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f7ec1738-08cf-412d-8bbe-6cf2d4d6ca60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:44:95:f7:c9:86:12:e7:f2:e1:d3:9f:fb:a9:
                    85:06:d4:9e:75:58:dc:27:8e:c0:93:48:a4:29:a0:
                    8f:f5:a5:4b:c6:a7:6a:02:2f:30:64:80:0f:51:be:
                    b9:1b:df:66:12:78:e2:6f:9d:1d:4b:ce:c4:ea:90:
                    74:f0:8c:f2:a1:b1:7f:f4:22:7d:d6:77:30:f4:00:
                    d3:b7:56:d2:23:cf:ab:37:c4:80:0e:65:4b:0b:0f:
                    df:83:ed:d8:d9:ab:bd:c8:82:5b:bf:ab:ea:a3:7c:
                    07:e2:68:db:c8:54:66:17:dc:7c:8d:da:26:c8:88:
                    7b:52:ad:59:e9:03:e6:94:ed:61:94:7a:79:ab:a3:
                    25:a3:1b:5a:74:8e:5a:4b:3d:70:af:8c:a0:05:33:
                    9f:72:6e:a1:9e:9d:68:80:90:b7:66:dc:97:0a:fa:
                    e4:19:6f:f6:9d:ca:f7:56:a4:1c:16:89:bd:b4:e3:
                    32:35:56:a2:b8:ea:82:ef:f8:aa:99:27:fa:5c:a9:
                    62:91:f6:27:6a:01:f9:7a:a9:de:49:ad:8e:64:a7:
                    66:9d:f7:d8:24:bf:fb:4e:87:ad:c2:b7:95:70:4d:
                    2c:87:1a:85:32:86:af:9f:3e:34:58:ca:01:d9:07:
                    09:0d:35:ba:f0:45:ad:86:b4:71:d9:dd:b1:f9:7d:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:62:36:E9:69:77:68:EC:2D:D6:B1:E1:1F:C6:79:E1:E9:6A:D9:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dceba2c5-8242-3262-bfe0-d5279a3e4851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:8a:8a:3f:30:36:65:44:99:f6:9c:1a:ea:71:41:d5:b8:
         03:04:f2:e2:19:96:46:9a:a8:6f:22:9a:c3:9f:49:dc:82:eb:
         4a:60:b3:4f:6a:06:88:42:6a:9e:3c:d4:db:dd:2d:18:4b:0d:
         f6:14:55:12:4d:31:b1:70:d0:d0:32:db:17:03:33:55:da:28:
         6c:52:66:81:1e:f0:f9:f5:03:de:42:e5:b8:ff:73:45:57:ad:
         12:3d:55:34:e6:ad:46:75:bc:e8:4e:88:06:b0:89:6f:fa:ef:
         76:1f:ce:d0:a3:01:0f:62:93:8f:f7:5b:47:5c:e9:9f:bb:b5:
         f2:82:b5:d1:1e:93:d2:3a:8e:41:ef:ba:d2:6a:9b:1f:b7:85:
         a2:bc:a2:b5:be:9d:88:96:fb:fe:17:9b:ec:90:03:30:ce:64:
         82:76:3d:e5:31:e1:de:a3:86:3a:15:0e:52:e0:d2:f7:cf:78:
         bd:a2:db:8a:2e:5f:87:4f:57:60:76:7c:5e:56:df:85:c0:61:
         69:45:35:d3:63:c2:66:d6:79:aa:ae:89:33:14:32:b0:2b:fd:
         06:d0:b2:68:8a:15:de:86:e4:ef:be:1c:c6:38:b8:bb:bd:bc:
         27:c4:a6:3d:c4:1a:b0:24:d9:70:eb:b2:19:c7:4b:dd:5b:91:
         63:4a:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org