Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1c1631b-1feb-3f25-bead-362c09d48689.roa
File:                     e1c1631b-1feb-3f25-bead-362c09d48689.roa (raw, json)
Hash identifier:          GJF7rORco+0bai+VywkwAK+QXERoKjyFT3iO26Pptw4=
Subject key identifier:   A2:0B:1E:1E:3C:EE:9B:F4:52:C3:A1:71:3D:75:77:40:FD:F6:49:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7920ABD2A16254EC5600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1c1631b-1feb-3f25-bead-362c09d48689.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:79:20:ab:d2:a1:62:54:ec:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6d6d5068-d4a2-46f6-bb27-a49b4674e1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:cc:55:2f:53:d7:39:6b:54:74:b0:96:c7:
                    9b:d8:e4:ae:56:aa:67:2b:6f:0c:f1:b2:ca:68:3d:
                    8d:74:81:c8:b6:41:2c:19:af:30:9c:12:34:35:fe:
                    ef:da:95:9e:99:a8:1c:2b:22:49:74:fe:b3:95:f2:
                    ee:4f:11:a8:6a:e1:34:c8:b8:f3:1d:00:22:28:e8:
                    59:09:76:7c:ea:80:1d:83:33:fd:83:17:fd:98:48:
                    df:74:62:72:fa:c2:00:bf:29:b5:12:77:fd:2d:83:
                    ee:6b:90:1f:9d:eb:e3:db:4a:ec:47:dd:50:09:e9:
                    d1:3f:91:e8:4b:78:52:6f:54:7c:55:e2:38:78:f0:
                    68:8d:e4:53:bf:e7:27:b5:37:87:30:e6:39:f6:4c:
                    c9:05:a3:8d:59:92:62:b0:b8:93:9c:f4:ca:3e:a6:
                    17:2e:d3:99:06:2f:19:bc:91:28:de:0f:1d:f4:c7:
                    9f:08:77:8f:1d:b5:ba:e9:bd:8a:d5:96:f6:65:cd:
                    ca:54:52:7f:48:7c:f6:95:6c:3a:c2:ba:a5:e2:43:
                    d9:30:02:98:90:5b:0b:7f:24:b4:88:44:c2:80:9a:
                    10:01:91:2a:13:ed:4b:58:85:a7:db:a7:d0:79:52:
                    a8:7f:0c:2c:15:39:03:a8:29:75:3e:84:84:17:62:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0B:1E:1E:3C:EE:9B:F4:52:C3:A1:71:3D:75:77:40:FD:F6:49:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1c1631b-1feb-3f25-bead-362c09d48689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:85:9c:d8:7e:4a:a1:fa:29:cf:84:45:1f:1d:49:0f:02:ef:
         dd:ae:5e:4c:02:bd:6c:9a:bc:59:24:e0:4b:2a:c5:f6:8c:11:
         16:10:c7:bd:64:42:e7:84:29:b5:55:9e:6e:62:8f:2a:77:d7:
         db:43:50:14:bd:66:59:67:2a:ba:a4:3f:ba:8e:b1:30:16:39:
         ae:b5:71:50:4b:41:da:76:0e:04:ea:24:98:24:e8:f8:19:84:
         31:b6:75:52:ea:31:c9:ab:21:1d:9d:5d:5e:15:d5:a8:da:c6:
         8e:88:58:79:a8:aa:5a:bf:c1:f5:4e:1a:3f:d1:34:15:66:38:
         92:37:77:a0:6f:0e:fb:b6:1d:be:3d:d6:a7:33:48:f8:0d:db:
         64:a2:17:d9:f3:d6:d1:76:25:7d:7c:f0:0f:a0:47:7d:cf:af:
         37:22:43:30:a7:6f:db:9c:f4:c0:4c:69:72:26:57:f7:f3:74:
         14:56:3f:ff:30:ab:6e:1c:79:bc:e6:42:f9:79:24:f0:f1:bb:
         1e:8d:84:ff:17:59:46:81:1f:15:3f:9c:e6:42:11:54:15:04:
         bd:a9:05:37:f7:d3:7b:74:11:c9:a1:25:91:32:1d:8d:e6:a0:
         8a:89:68:aa:42:ce:54:6a:8f:13:94:cd:78:20:e6:25:61:47:
         de:4f:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:00 2024 by rpki-client on console-ams.rpki-client.org