Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2839660-32a5-30af-b1b2-9642c96b9559.roa
File:                     e2839660-32a5-30af-b1b2-9642c96b9559.roa (raw, json)
Hash identifier:          sza6wOoMRM8qB/OC0dIlHswYZcpAK09+aWxxklZ9Rts=
Subject key identifier:   4E:2D:90:A1:89:F4:91:A7:50:1A:03:A5:99:3D:6E:D8:0F:96:14:5B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0909D756F3855C819040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2839660-32a5-30af-b1b2-9642c96b9559.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:09:09:d7:56:f3:85:5c:81:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d1c4f6b8-7e80-4fb0-8533-c7c63ed37619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:9b:9c:af:80:7b:5b:89:da:0c:e9:f3:ac:
                    63:8e:c8:2e:7d:77:dd:65:80:7a:db:59:1f:cc:e4:
                    b1:dd:2a:37:b9:f9:26:e6:24:99:89:3c:09:e4:b0:
                    69:67:47:b1:d8:a9:7a:d8:96:6e:1c:1e:a7:2c:4e:
                    d6:cc:2d:59:fd:fe:70:e1:d0:f3:b0:85:4e:65:aa:
                    a8:5a:26:8a:d3:a5:18:40:31:69:01:08:46:7b:97:
                    74:25:c0:b8:bf:06:50:30:bc:90:bf:af:0f:70:23:
                    81:72:d2:2b:96:6f:ef:1a:6f:f8:66:bf:f8:fc:e6:
                    a7:31:52:ab:52:c2:b9:6b:ca:05:5f:c9:34:91:2f:
                    8a:40:54:88:95:d4:11:ee:76:89:36:55:21:9b:53:
                    2f:0f:e7:42:53:03:70:3f:c5:09:8e:bb:c4:33:c9:
                    df:bc:84:b1:af:0e:d3:32:a8:5a:25:96:35:ef:eb:
                    38:08:f0:c5:b5:3c:13:be:9d:1c:59:c4:da:94:4b:
                    a3:dd:3a:65:0a:51:09:b3:2c:7d:f2:09:e3:9e:01:
                    7e:ef:a1:30:9e:eb:68:e3:28:3a:21:06:47:63:92:
                    4d:cf:69:41:30:1a:12:9a:49:49:70:77:e8:fc:75:
                    f8:3b:c5:f1:ca:5e:57:79:ea:c2:43:07:70:1b:4d:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2D:90:A1:89:F4:91:A7:50:1A:03:A5:99:3D:6E:D8:0F:96:14:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2839660-32a5-30af-b1b2-9642c96b9559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:8c:f8:e0:5d:af:5c:f5:95:24:ff:76:7b:a0:87:2d:38:
         33:af:a2:f6:2d:53:6e:f4:3a:33:64:82:66:f3:4f:7d:3b:7b:
         93:13:ad:5a:49:ac:a6:12:01:a5:29:3c:94:65:f4:f9:4c:4e:
         cb:62:30:6f:e8:1e:8f:e5:88:2c:22:5c:a6:14:0a:99:b6:30:
         99:84:43:e8:f8:a7:3a:86:ba:22:6a:81:13:f1:08:35:8d:3f:
         dd:01:cb:38:95:66:c9:99:73:89:19:c3:cd:39:8b:69:ef:3e:
         98:61:03:c2:1d:4b:06:a3:86:e5:23:4d:48:59:8a:17:cf:51:
         b0:39:aa:8d:fd:4e:e9:c5:b1:1b:f7:37:94:24:03:03:fa:ad:
         12:09:c6:25:98:22:d9:a8:fe:d0:b1:19:b6:0e:93:05:de:ff:
         bf:65:a1:a8:2a:32:a9:f9:bd:b7:75:6a:cc:f8:0f:25:89:b4:
         00:c0:02:e6:8e:41:26:bc:6a:a8:46:48:f1:3f:55:8f:9c:e6:
         57:8b:97:5e:0c:2e:68:4a:70:92:0c:f3:8c:39:48:86:ef:34:
         dc:74:b9:c4:02:af:91:55:17:5c:42:84:64:5a:b4:b7:ce:04:
         61:a5:2c:9d:b6:b7:5e:e8:51:5a:01:cb:c8:03:4f:12:48:7d:
         c3:a9:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:36 2024 by rpki-client on console-fra.rpki-client.org