Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa
File:                     f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa (raw, json)
Hash identifier:          K6DK8KLkmu0q6J0VvNGiE0qggRQewNYN9zyn7Y44Ijk=
Subject key identifier:   39:C7:D0:DE:8B:5C:18:C6:A8:76:D3:B2:51:5B:7D:08:2A:A4:8D:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E48C0012C2C302C29EC40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:48:c0:01:2c:2c:30:2c:29:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=b903b7ba-e071-4049-bb42-042d92f351a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:e9:fc:17:dc:fa:ae:f0:53:64:59:e7:72:
                    43:db:46:dd:cf:46:48:f7:98:9f:cc:3b:66:bd:9d:
                    47:c3:f4:4b:0d:23:a8:62:31:29:21:51:f6:51:9a:
                    d2:37:58:df:89:ba:65:9f:65:7f:b7:33:07:f2:4e:
                    bc:88:de:10:a5:21:b6:4a:85:d5:d8:dc:16:3c:21:
                    41:f4:c7:ba:04:f4:f6:7a:3b:0b:0e:70:e4:40:d5:
                    1d:4f:6d:61:c7:93:23:ab:d1:87:14:87:e7:5c:19:
                    ea:07:62:23:d1:75:a7:87:5e:ed:ae:d8:b4:66:6e:
                    1a:48:18:88:59:f6:52:ef:f7:bc:8c:da:d9:fa:29:
                    89:d5:bf:16:69:72:fe:93:6b:b0:40:49:ab:a1:b6:
                    29:be:ed:88:ac:ab:d2:ff:6b:f3:42:d2:ae:95:1a:
                    a4:80:8e:cd:44:99:b6:81:54:73:7e:6d:be:61:00:
                    0a:de:31:d7:43:f3:89:ad:e3:82:6d:5e:2b:15:28:
                    3a:28:e8:a4:bd:cc:c6:5e:ed:52:b5:3e:8f:6b:33:
                    36:d6:c8:3c:0d:00:b6:62:66:22:21:ae:5c:28:ca:
                    9b:3e:10:10:98:a5:73:79:1f:3e:92:96:d2:52:1f:
                    a6:94:7b:98:6e:b7:19:98:d9:2c:06:ce:d3:c1:27:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C7:D0:DE:8B:5C:18:C6:A8:76:D3:B2:51:5B:7D:08:2A:A4:8D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:b1:88:0e:e6:e6:4e:f2:16:92:e8:49:98:d1:e5:14:88:
         6a:8b:cc:bd:ff:65:1a:22:45:fe:e0:3b:84:cd:d9:7c:84:ce:
         9f:e6:d5:51:f5:0c:a0:19:8f:a7:e6:6a:48:29:c6:30:25:e2:
         6c:b0:6d:88:0c:7e:3a:58:9b:38:5b:2c:38:72:84:02:50:ab:
         f8:75:0a:9f:b8:95:9a:38:60:27:44:3d:f6:a5:0b:d9:5c:47:
         d1:e7:90:47:b7:fd:6b:35:69:4a:a6:0e:e9:0a:ea:9b:c2:d5:
         8b:bb:28:55:70:84:10:a8:d9:67:bc:92:87:e9:8a:0d:29:5c:
         da:a7:6d:c8:83:1a:ed:b7:8a:83:0e:34:75:d3:da:21:de:9b:
         ba:72:e2:f1:ea:4e:71:f9:49:3b:3f:4a:01:f6:08:66:03:e0:
         b0:9f:b3:d6:70:c6:ea:a4:bf:16:e8:e6:c6:fe:3f:7d:ab:29:
         68:cb:7d:c5:9a:16:2d:99:fb:02:89:c4:d4:e8:00:ae:20:73:
         6c:9b:4a:68:ce:d4:22:6e:55:af:ac:b6:57:6d:1b:7f:61:9f:
         56:6c:5e:30:40:34:47:31:e9:76:0b:cc:a3:6d:f6:82:9c:4a:
         34:f8:82:73:4b:35:53:32:98:53:75:22:db:cb:df:7d:e5:c4:
         ec:21:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org