Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0b164a9-a662-33db-9298-d06a26329db8.roa
File:                     e0b164a9-a662-33db-9298-d06a26329db8.roa (raw, json)
Hash identifier:          Z5h6b6qxKre5WGLf2gfMQmWNg1zmZu1Hv+um8QSFor0=
Subject key identifier:   C1:A0:FB:BE:B7:E5:05:14:13:A3:2C:67:0A:F9:07:3C:5C:93:FF:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3AB7DBD4CF7A33625940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0b164a9-a662-33db-9298-d06a26329db8.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3a:b7:db:d4:cf:7a:33:62:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b12fe26f-81fa-4667-b0cf-a5c403f318c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:ce:f3:57:68:ad:ff:b5:19:52:b4:f0:51:
                    e6:a0:cd:2b:c5:a4:b6:36:7c:89:53:b8:d3:3c:76:
                    67:d0:1b:97:46:b2:9d:78:6e:c4:59:b3:22:14:fa:
                    b1:2e:46:a6:df:07:dc:3c:7e:53:0e:25:64:f9:06:
                    73:fe:43:e1:24:6d:3f:a8:6b:90:ef:92:4e:4d:4f:
                    93:46:0f:c5:01:19:65:51:79:bf:0f:37:d4:23:2f:
                    78:b0:a4:0c:9e:a2:c2:b4:63:78:14:1b:c0:19:16:
                    bb:de:22:84:fb:66:ab:85:eb:ed:9d:bf:fd:0f:4d:
                    f1:79:dc:6d:78:4b:95:22:bf:81:40:d8:ad:50:12:
                    54:e6:a6:68:7c:3f:20:54:eb:b7:40:66:3a:7a:f9:
                    e0:02:57:48:fd:de:43:8a:7e:71:51:3f:04:1c:0e:
                    94:87:05:06:d2:b4:75:b1:0a:6f:3b:a1:3d:84:4a:
                    ae:25:a8:88:98:5d:8a:13:63:31:90:08:f1:68:ac:
                    ac:f4:25:e1:a7:b7:3d:ec:ed:c6:4e:01:7e:3b:73:
                    4f:af:16:c5:0f:a9:26:57:60:73:d3:6a:3f:88:97:
                    dc:28:91:0b:0d:e6:92:b2:46:c0:ed:64:42:68:3d:
                    07:1a:af:62:5e:f4:49:14:a5:ac:3a:12:82:ac:62:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:FB:BE:B7:E5:05:14:13:A3:2C:67:0A:F9:07:3C:5C:93:FF:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0b164a9-a662-33db-9298-d06a26329db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:17:6d:a4:d6:eb:4e:1b:69:49:c5:61:00:dc:a9:3e:97:
         66:b0:22:aa:8c:c2:ad:a9:3b:6c:0b:86:95:61:a5:de:3d:c7:
         95:47:14:c8:40:0c:b3:27:cd:d7:b9:68:cf:a1:a0:12:33:65:
         5f:30:ab:ab:8c:93:70:59:c2:fc:d0:18:0a:cb:60:93:c3:95:
         0f:e0:18:2d:2a:ee:3f:5f:54:19:a7:ff:ba:39:8b:4a:99:cc:
         96:6e:e1:d1:99:53:d1:38:47:ed:3d:e3:50:e0:31:ed:6a:39:
         08:18:ef:bd:86:f9:dc:a6:10:f5:6f:63:1b:fd:a1:44:44:4b:
         6a:b3:f0:b4:f8:89:b6:32:57:9b:02:76:48:64:6c:85:50:23:
         6e:53:72:b5:d5:05:f2:cd:68:0b:5b:15:7e:9d:c1:a8:47:30:
         f4:20:95:b8:88:d2:bb:e2:7b:8a:6a:80:f3:77:32:a0:44:6e:
         ad:dd:2a:09:66:06:ef:02:51:63:d1:34:bc:ba:a2:9f:ee:d6:
         9a:9d:d1:2f:d0:f6:44:24:e0:d3:ab:79:36:4b:cd:5f:37:b2:
         b4:c3:2c:e1:fa:b2:0f:09:65:3e:fa:b2:6f:8b:db:ce:f4:61:
         4e:3b:1f:9e:d0:f1:5f:ff:84:6e:40:6e:0a:aa:df:29:83:e8:
         bb:26:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:00 2024 by rpki-client on console-ams.rpki-client.org