Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
File:                     f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa (raw, json)
Hash identifier:          ltCaatjT1oin/MokyX2IYFLoOUAw5QcDfoBBp+GZ/94=
Subject key identifier:   4F:AD:1F:87:4F:99:FA:FE:E6:9E:AC:24:CB:89:EF:B2:F2:AF:44:F4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEFDDE12B826533927700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     40306
IP address blocks:        70.41.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ef:dd:e1:2b:82:65:33:92:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=301f9503-423e-421c-bc0e-b01fea436aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:e1:a2:1b:f1:14:f5:b3:b0:7e:9d:c8:cd:
                    bb:0c:94:0d:c0:2d:5e:2d:a8:fa:9b:0e:3d:32:19:
                    ca:ba:c3:c9:21:23:4f:c4:a1:ef:b4:e6:fa:a3:36:
                    44:40:6d:4b:23:b2:82:8b:6b:3c:85:1d:67:d4:13:
                    27:82:f7:e7:d3:30:22:4c:1f:1f:ff:c6:e6:ca:f2:
                    ce:de:72:78:6d:d3:fb:37:b6:2d:bf:04:24:f1:d8:
                    6a:26:7a:50:5c:2c:b9:01:3b:75:8b:42:dc:e9:0c:
                    83:85:a1:88:63:56:5d:49:51:fc:d4:e6:3d:b7:2b:
                    df:76:c1:22:3c:1c:cf:e1:99:83:03:2e:85:83:36:
                    3f:65:ca:cf:40:6c:12:39:38:c1:bb:31:90:42:9a:
                    6a:3a:46:67:8b:d3:a9:fb:3e:09:3d:5e:25:3b:c4:
                    72:44:7f:f5:e6:d3:2f:8f:51:65:db:98:4f:d8:4f:
                    55:d7:bf:df:6d:ca:70:c2:1e:3a:d6:6d:dc:9b:1d:
                    af:fc:5b:f5:ff:ad:59:d2:5d:7e:ae:83:0d:49:47:
                    5b:24:85:4d:6a:a2:17:4a:c8:72:31:38:8f:8e:28:
                    cb:4a:4d:4e:61:93:00:08:70:8a:4c:05:9d:3e:7f:
                    05:ea:24:a0:0b:e3:27:9b:28:5f:c8:b0:68:dc:97:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AD:1F:87:4F:99:FA:FE:E6:9E:AC:24:CB:89:EF:B2:F2:AF:44:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:80:2d:47:d8:41:ff:8d:1a:4e:5f:b9:22:0e:72:15:a9:b3:
         9e:34:81:57:ec:7c:71:fd:dc:de:16:12:0c:fb:c3:0e:5d:86:
         bc:2b:cd:69:41:e8:46:b9:32:f1:f3:db:68:e4:95:96:c9:1d:
         9d:f4:6a:a8:6c:61:b1:14:ec:cc:81:23:0f:c7:fa:a4:22:3f:
         9f:e5:52:af:00:72:34:ca:7b:0a:53:74:0d:7c:e7:d8:91:cb:
         ef:8a:ab:9d:1d:b7:4d:f1:e7:26:89:a8:87:f1:f6:50:72:9b:
         64:0d:2a:95:2f:30:cf:c4:49:7c:6e:a6:e8:cf:44:d1:83:4d:
         c7:d6:25:a9:28:4f:5d:48:5c:75:03:98:59:48:68:fc:c4:3c:
         f6:ef:66:b0:79:fa:b5:ee:68:8f:56:96:18:40:a1:00:30:3d:
         31:ec:e1:b8:fd:ef:7f:df:0a:a9:78:aa:14:a5:2b:93:ea:c8:
         6f:18:a3:8c:c4:ac:0a:88:b2:29:2b:88:d6:2d:bc:c8:18:91:
         ac:07:ec:72:70:1e:23:f5:b2:7b:be:55:cd:2e:d1:43:1b:a9:
         8f:63:b3:ea:b1:d2:8a:16:25:86:69:2b:aa:d1:29:4e:c3:06:
         e4:b7:91:ba:f7:3c:eb:be:9a:18:43:12:3c:9e:92:c6:8c:91:
         00:a6:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:15 2024 by rpki-client on console-ams.rpki-client.org