Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaf03b16-8f37-30a9-a9fc-62eb670457b5.roa
File:                     eaf03b16-8f37-30a9-a9fc-62eb670457b5.roa (raw, json)
Hash identifier:          QYTP5z6nskkhv4AwgZ7+k0sj3DClQJYu1KGryIgn3Q8=
Subject key identifier:   82:67:FD:AB:4B:7B:DF:52:92:59:C5:DD:02:A4:54:5A:15:F7:58:4B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DFD1D387E23CF6DD6F6A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaf03b16-8f37-30a9-a9fc-62eb670457b5.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:fd:1d:38:7e:23:cf:6d:d6:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8d31d69d-1c55-4ce9-b4a6-a9c0617bccad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:15:0c:1c:8a:7a:a5:af:b6:6f:62:b3:2d:32:
                    13:6e:a3:47:5b:6d:6e:d1:df:2d:06:50:e2:93:4a:
                    8b:a4:a2:51:a7:49:cc:ea:8f:46:ec:a9:ca:36:02:
                    3c:20:4c:63:05:81:53:cd:7a:ec:c9:84:3f:b5:f5:
                    a1:b3:38:dc:7e:51:1e:b8:91:f8:49:11:d6:8b:da:
                    ed:a3:a4:db:d1:76:18:07:4c:22:1e:92:77:7a:e9:
                    79:97:88:f3:72:58:b0:c2:10:23:82:7f:a7:0b:12:
                    3d:32:c9:fc:fe:40:fd:e2:93:e2:8c:9b:e4:99:0d:
                    e8:32:7d:24:e4:6f:55:ce:a0:7c:38:ec:80:ae:cb:
                    00:64:45:e2:1d:6a:dd:08:35:36:88:f9:6a:99:ba:
                    45:a7:88:c2:60:b7:61:b4:ca:51:3b:7f:85:4e:8a:
                    fb:ed:b4:86:20:f2:dc:01:4f:4a:a8:68:94:43:74:
                    8f:c0:ca:e6:83:68:f9:86:3c:fc:98:0f:3b:c4:07:
                    cc:2a:89:ff:86:66:db:bc:b8:1b:9a:dc:7f:0a:0b:
                    6c:a2:99:56:4b:76:1d:d1:ca:85:12:e9:a5:bc:16:
                    82:cc:dc:16:6e:91:9b:91:eb:78:3c:30:09:78:7d:
                    5f:e7:80:8f:d7:72:d0:a7:7f:3b:de:ac:e2:ad:fc:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:67:FD:AB:4B:7B:DF:52:92:59:C5:DD:02:A4:54:5A:15:F7:58:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaf03b16-8f37-30a9-a9fc-62eb670457b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:37:f3:02:f1:43:1c:bd:8d:97:8e:a3:37:c1:8d:0c:66:2f:
         45:5d:4f:03:5c:2a:a8:f2:59:61:78:1b:64:a1:da:06:17:8a:
         15:03:1e:06:5b:89:cf:58:9e:59:be:cd:5d:5e:1f:70:a9:85:
         36:f4:bc:2f:12:93:5e:35:e4:e8:d1:43:c8:96:a4:24:a8:9c:
         7b:b0:ee:cb:94:1b:f1:ec:2a:a2:61:41:9c:db:10:de:75:9d:
         0e:8f:c6:8a:00:cf:9d:51:4b:76:d8:bd:c4:33:4c:44:be:80:
         02:f9:34:03:94:6c:f4:b2:69:28:9d:61:36:50:96:14:45:f1:
         0b:21:98:5c:e3:46:02:79:d9:76:42:39:0a:07:22:98:3e:21:
         67:29:65:0f:e1:24:b5:29:1c:7b:ba:16:f3:87:b8:f0:4e:68:
         d7:71:01:ab:30:c1:15:d1:a4:c8:44:25:50:76:42:f2:33:3a:
         a0:26:b7:0a:99:5f:35:86:6b:80:73:b8:04:e6:af:e2:f2:b8:
         7d:45:eb:f3:5c:ce:71:d2:95:16:6f:06:0f:e4:43:d3:e1:c8:
         10:d6:c8:99:b1:30:20:86:d2:43:d1:f0:09:80:e1:a0:27:53:
         1a:ae:56:4a:83:aa:2d:f9:86:86:b1:8d:d3:db:80:a2:f7:66:
         a3:ad:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:34 2024 by rpki-client on console-ams.rpki-client.org