Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa
File:                     f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa (raw, json)
Hash identifier:          9PE9VlH+8vybKERkC6kYhWd1tABZH2srCMRRl3r27ho=
Subject key identifier:   81:5E:7A:AD:37:54:3C:C6:64:3C:F0:E3:BD:29:6E:5C:1A:A7:63:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC5461B2478B6956BFB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c5:46:1b:24:78:b6:95:6b:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=bc8a43ae-cdec-46fa-b3ce-e1d3354c0828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:7a:fd:7d:be:a1:07:8b:1d:6d:18:b2:2b:
                    ce:5f:30:4e:2f:26:e7:cf:cb:6f:6e:a3:50:d5:4c:
                    ad:aa:c5:28:b2:9d:3e:3b:4a:ca:4e:74:32:71:49:
                    e3:b1:55:85:7d:c4:06:93:0d:94:54:9c:54:99:bb:
                    d3:21:c1:35:80:27:d1:84:21:e7:a4:f5:00:fc:85:
                    60:96:21:66:d4:84:bd:2e:90:44:62:d1:71:f5:af:
                    92:fa:7a:4e:96:5c:08:93:8b:da:2a:02:12:34:7f:
                    39:23:d2:6a:44:9d:d1:f6:7d:48:eb:07:85:e0:4a:
                    43:ae:26:e7:86:f5:0b:9d:74:3a:ad:2c:83:f9:71:
                    54:16:fd:84:01:65:03:ed:e2:6a:8a:b6:ca:7c:15:
                    d9:2d:22:b3:c6:9b:6a:7f:ce:1a:6a:6a:41:f6:8b:
                    27:58:5d:5e:2c:3a:a2:e3:ea:7f:65:73:a8:9b:2e:
                    82:01:24:6c:cf:cf:88:7d:eb:20:b1:16:c8:0f:8d:
                    42:a5:ec:ad:24:53:07:2a:28:99:b1:50:be:99:e3:
                    69:2f:9f:b0:d9:f8:13:45:69:61:1b:76:cc:04:5e:
                    8e:74:4c:92:6d:43:70:c1:28:1c:a0:d5:b7:b6:a3:
                    6a:db:60:09:fd:71:ec:2a:6b:c3:3c:41:07:8d:f2:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:7A:AD:37:54:3C:C6:64:3C:F0:E3:BD:29:6E:5C:1A:A7:63:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0eea08c-78be-39f3-b7f5-ea1ec1f86c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:38:1c:52:d4:86:97:99:09:78:3d:0d:64:fb:2b:a1:c6:61:
         66:99:28:34:e2:d6:b0:30:49:7d:1c:a6:7b:4b:96:75:27:28:
         9c:ff:47:a0:1d:22:21:a1:aa:5f:52:d8:41:61:d5:b2:30:42:
         63:90:b1:28:35:1d:84:53:a1:76:b5:e2:31:3a:70:ca:d5:91:
         e1:e6:3f:b4:c1:c5:a7:79:80:dd:24:90:62:4a:c5:24:7c:a4:
         95:20:5c:21:b1:21:91:43:e9:95:69:81:e4:19:ad:ea:8b:a7:
         e2:2e:f4:8c:74:a3:28:d2:fd:4a:84:d9:9f:40:b2:47:46:3e:
         c7:77:2a:a2:2c:bd:16:59:8e:ab:54:0a:4b:ad:7c:a9:3b:c9:
         77:f1:26:2a:ce:a5:62:00:d9:47:ff:5d:88:cf:05:f3:b0:10:
         f3:e3:22:d5:17:b5:b0:71:c2:7d:d8:78:19:4b:9a:37:18:df:
         0d:16:9c:f5:b0:36:dd:f3:cf:fd:bf:bd:b2:eb:2f:27:77:4f:
         e2:7f:10:67:72:be:13:08:96:cc:93:0f:f6:60:86:57:7c:49:
         2e:68:47:78:87:54:23:61:ce:69:0f:10:20:2c:c1:7b:a8:34:
         af:5d:34:1c:8d:10:ef:b2:53:91:df:b3:63:99:b9:95:52:4d:
         b8:c8:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:42 2024 by rpki-client on console-fra.rpki-client.org