Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf3a2c3-92bc-3c3a-ab8a-a2cd689c842d.roa
File:                     dcf3a2c3-92bc-3c3a-ab8a-a2cd689c842d.roa (raw, json)
Hash identifier:          SEsjlnBz0bvip8233CvKNs5Ki+6Rvkm5djQS1KoqGKY=
Subject key identifier:   A1:28:7F:C5:1A:B9:8D:F5:2B:C5:61:2A:48:30:18:96:BC:29:01:9A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D7E9DBE46859DD31D5280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf3a2c3-92bc-3c3a-ab8a-a2cd689c842d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:7e:9d:be:46:85:9d:d3:1d:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8a4ca9f5-645f-4320-ba51-4917b5f4877e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:fc:02:fa:e3:49:65:e9:b5:df:04:ca:29:
                    42:a6:c3:52:19:3a:da:c4:f7:b3:58:7c:a8:cd:93:
                    d5:1b:aa:6a:c3:37:69:40:17:8b:fa:f5:24:06:67:
                    32:da:7e:8b:05:77:f2:88:6a:c9:48:78:a4:b3:7f:
                    ee:17:be:14:f4:a7:ec:02:6f:16:c2:73:2a:3e:b1:
                    96:5e:c9:10:a5:af:44:44:c3:2f:c8:59:ec:9e:8d:
                    cb:fe:5e:19:db:e9:f8:37:6b:c6:f1:2d:62:b5:d1:
                    46:2b:b1:98:4d:b3:08:aa:c5:a7:2a:e9:9c:a6:fe:
                    3d:2e:e1:e5:5b:fa:10:da:da:8a:2b:7d:67:82:a6:
                    94:3b:22:2a:a0:af:3b:ab:43:95:da:28:0f:25:b7:
                    b3:56:20:f7:32:48:70:21:de:32:80:21:9f:92:f8:
                    bb:99:27:ff:7e:0f:e5:6b:f4:45:ee:97:65:7c:35:
                    95:f5:01:85:5f:b1:2f:5a:8f:3f:93:3d:87:df:91:
                    ca:98:35:66:3c:df:1e:78:b6:93:e4:d6:c9:19:3d:
                    ba:34:9e:57:89:cc:7a:39:64:2b:05:ac:40:3c:1f:
                    f7:3a:d3:09:cc:45:50:65:b3:02:1c:06:71:f4:6c:
                    d6:6c:01:90:8e:ec:c6:a0:04:76:80:23:52:a4:23:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:28:7F:C5:1A:B9:8D:F5:2B:C5:61:2A:48:30:18:96:BC:29:01:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf3a2c3-92bc-3c3a-ab8a-a2cd689c842d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:1c:a3:c8:7b:27:ad:a7:36:26:17:35:15:db:9a:c5:c4:
         56:fa:86:3a:71:06:11:b4:45:33:92:99:f1:ac:ae:1c:ea:43:
         64:e2:e5:19:74:36:64:fc:be:5e:3b:ed:70:1e:b2:b9:a6:70:
         47:a3:dd:68:30:e2:65:a7:20:d4:cb:4c:3f:bc:77:99:f3:e1:
         6c:46:71:60:71:4a:6a:1d:8f:f7:37:33:39:a8:8d:fb:78:e9:
         de:52:2e:08:5f:76:18:f3:6a:6f:4e:c9:96:ba:7b:09:b2:42:
         b6:a9:1f:48:2c:64:e5:fc:c9:cc:cc:c3:a2:06:48:25:47:38:
         9f:55:76:62:2f:15:17:b8:ed:4e:ac:fa:4f:4c:bd:ba:ab:91:
         c6:79:c6:54:91:96:ed:fd:6a:ea:f0:db:38:db:f1:47:e6:7c:
         7e:54:f3:5a:2d:93:0a:12:b4:08:dd:9a:1c:bf:68:97:e3:a6:
         78:60:60:9a:54:de:f5:91:80:aa:10:f1:67:e0:42:7e:87:03:
         ae:8e:0d:ba:ab:b0:dd:82:43:c3:68:db:dc:56:d9:a9:f5:ad:
         0c:e9:94:48:8b:a3:45:e1:d1:ab:fa:4c:c4:d7:06:7c:13:47:
         7a:5a:d5:b9:6e:09:f6:35:6d:3e:50:47:6a:40:83:69:80:97:
         f1:41:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org