Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0ddfd67-fd69-363c-ad03-945c8ea8d819.roa
File:                     e0ddfd67-fd69-363c-ad03-945c8ea8d819.roa (raw, json)
Hash identifier:          uGJkYunS9zI/KqoNy4WbShXV8zpwQ4vEiV1dMajUT2s=
Subject key identifier:   EF:82:70:DC:D5:47:6A:A8:4F:C6:BB:95:9D:D0:47:3F:91:BF:83:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3B1BA401475FE3D23580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0ddfd67-fd69-363c-ad03-945c8ea8d819.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3b:1b:a4:01:47:5f:e3:d2:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=7e15ea93-c636-4882-98df-0c4d86625623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:fb:27:5f:2d:f4:54:3e:05:bb:41:8d:0d:
                    69:7b:52:b9:9a:a2:0f:85:61:6d:a0:23:9e:bc:2e:
                    09:bf:e4:98:4c:4a:90:eb:bf:37:e5:05:ee:99:3a:
                    20:c0:c5:37:41:a2:24:ba:86:09:fc:02:d0:c3:cd:
                    62:f3:66:53:3a:4c:2c:40:27:89:91:4c:cb:de:5f:
                    ff:d9:d4:b8:83:c0:67:50:0b:0c:b2:f1:db:1d:af:
                    8b:5c:37:f3:0f:ab:2e:a9:38:f2:5b:2f:33:82:58:
                    c6:46:ae:fe:81:33:38:c8:a8:c4:ba:9e:07:9e:9e:
                    34:72:78:8c:2e:44:22:04:00:17:42:a5:27:b7:68:
                    9c:b7:05:3d:5d:6d:09:42:35:21:2e:88:af:75:c3:
                    73:1f:f2:8a:86:54:4b:32:80:c3:db:c5:21:a6:08:
                    67:76:0a:c9:e3:02:b1:bc:67:91:b9:b9:cf:04:12:
                    21:9f:29:69:b3:7d:c0:77:88:d7:ab:4f:4e:e4:c5:
                    7b:e0:bd:46:7c:8d:95:65:9f:f2:bc:dc:97:41:ec:
                    3d:19:d3:5e:19:c9:e2:4a:2f:b1:02:ee:d0:ce:4d:
                    5a:19:e7:4c:d0:0d:d6:c6:26:e7:47:65:39:c3:e3:
                    00:e0:37:f9:d8:25:69:18:94:27:ed:7f:5a:40:25:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:82:70:DC:D5:47:6A:A8:4F:C6:BB:95:9D:D0:47:3F:91:BF:83:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0ddfd67-fd69-363c-ad03-945c8ea8d819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:77:f0:30:2d:cb:ad:bc:87:b6:7b:be:eb:8b:8c:28:a1:4c:
         8d:9f:60:1e:08:92:21:9d:8b:26:72:92:91:26:47:c5:dd:77:
         18:db:ff:a0:ae:20:dd:86:e7:e2:5f:61:a8:ac:ad:ae:44:a5:
         0b:23:b2:33:92:3a:a3:ab:7d:c1:6d:84:ec:e8:ab:af:1e:3d:
         7f:24:3f:58:96:14:7b:6f:68:11:03:d7:ce:a0:6d:8c:3f:52:
         8d:48:f2:8a:b4:8f:49:1e:5e:64:43:29:38:c4:df:fb:16:d4:
         19:06:26:ce:db:e3:37:21:c3:6e:37:fa:de:88:3f:41:e6:c3:
         f9:08:1c:7b:23:be:f5:59:79:fd:92:6e:7b:11:0c:a1:a3:8e:
         78:4a:31:2b:3c:95:34:95:84:a1:e3:67:f0:ee:e5:74:79:1f:
         fd:38:0b:ea:16:3f:f4:2e:40:a3:07:a3:01:ef:3a:1e:eb:4e:
         a0:4e:c8:1a:47:8b:b1:c9:92:f8:99:bc:32:73:1f:2d:c4:5a:
         ae:10:cc:73:a7:d0:26:28:d3:a6:20:1f:2e:16:34:96:6c:20:
         22:6a:de:65:e1:80:af:09:80:c1:28:0a:e1:d8:83:fa:dd:74:
         da:ce:f4:ec:fa:5b:dc:cf:e6:7a:41:5c:1f:29:87:c4:df:04:
         7c:32:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:05 2024 by rpki-client on console-fra.rpki-client.org