Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa
File:                     ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa (raw, json)
Hash identifier:          hUM4hGsbegaSkro0dQsJlWwi3HoMM6XeIyq7P8tuao8=
Subject key identifier:   72:FB:23:F9:8B:4E:99:9C:22:E6:8F:72:28:C8:CF:DB:FC:79:3C:53
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4C7A20CBBDF8F6782380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:4c:7a:20:cb:bd:f8:f6:78:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=5659fd2a-ca6e-45cc-8e65-86c7cb195b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7b:ca:cd:77:61:1f:ec:18:18:8f:df:44:86:
                    15:9b:05:0f:0f:38:7b:74:98:88:59:f3:c5:4c:dc:
                    fb:67:73:fd:94:07:cf:d0:e3:e5:90:e3:16:44:59:
                    81:65:14:68:fb:d4:26:71:70:d8:a3:44:30:e7:48:
                    05:57:93:d1:b5:dd:f3:57:00:f0:fc:65:06:53:09:
                    7c:74:4d:ad:0d:42:06:be:8f:33:c3:1a:18:9d:f7:
                    0b:41:bb:0d:34:d5:ca:69:70:2e:2f:dd:eb:cd:50:
                    16:cd:c1:41:ff:6e:43:6a:68:18:44:0a:45:97:8e:
                    b6:92:7e:21:5c:1f:29:7c:f4:f2:78:3d:69:14:00:
                    05:66:ae:05:67:f6:13:b4:62:d0:27:13:f4:71:78:
                    04:a8:18:8a:89:02:8b:2e:e4:e1:01:59:94:4a:b7:
                    3c:45:01:d3:80:b1:9b:58:17:49:06:b4:44:1f:a0:
                    b5:d2:4c:b7:8d:23:ac:95:9c:fe:7c:69:58:dd:d2:
                    0e:70:16:24:2b:db:e5:fb:2f:c6:4d:ec:07:4b:e5:
                    b7:40:51:8c:05:41:90:14:87:1f:9a:37:bd:af:f4:
                    57:64:f3:21:18:dc:e0:de:2f:e8:50:fb:08:00:48:
                    87:a7:64:14:b4:a0:ff:eb:10:62:b8:25:04:8f:30:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:23:F9:8B:4E:99:9C:22:E6:8F:72:28:C8:CF:DB:FC:79:3C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:28:b7:22:63:01:54:f9:61:83:0d:dc:67:92:aa:1d:25:91:
         e3:ae:09:7f:c0:7f:dd:9a:51:53:59:ec:12:ec:cb:01:1a:50:
         23:10:f5:90:4f:3d:19:99:23:9b:25:23:2d:42:9e:8f:5f:03:
         04:1d:ae:05:06:0c:17:e9:bd:64:aa:2c:a4:be:46:a1:40:a7:
         16:bd:4b:67:ab:d5:80:8d:2a:c7:18:33:00:72:09:df:89:39:
         cf:eb:73:7c:e5:ce:1f:ab:5e:a9:3b:e4:41:f0:ae:49:a4:c4:
         ce:77:6a:14:50:f4:a8:7c:b1:b2:fd:1e:69:55:32:fa:17:81:
         35:1c:87:2d:ee:32:78:71:3c:bf:46:31:5e:7b:65:66:8a:de:
         ec:72:6b:a5:4f:04:e8:55:69:a3:cc:60:5c:9a:d5:8e:bf:54:
         01:73:bb:11:09:3b:d8:3a:b3:00:c7:dc:c2:87:90:35:8c:4c:
         2b:34:c0:81:df:15:f9:3e:c3:f2:9b:69:31:90:e0:58:b2:8c:
         65:40:a4:33:28:85:c0:9c:c6:5b:46:02:ee:58:23:be:2d:7d:
         73:c0:1a:ff:7c:9c:d6:32:5a:77:5d:02:73:26:7c:e3:a9:a7:
         27:51:28:33:d2:26:b6:37:9f:13:2a:35:8f:81:53:49:3a:a6:
         50:2c:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org