Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa
File:                     fb373ad7-d7d1-390a-a62e-87f009262355.roa (raw, json)
Hash identifier:          PI/5EujH+gSHwOGoSx4GFa2c+se3KuX/oat0a+8kx6o=
Subject key identifier:   89:1E:FB:6F:8A:B1:AB:F4:F8:4E:56:FB:F9:72:00:35:CD:87:37:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F432858454F02C3668B17C0D9BF7CA7E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     40306
IP address blocks:        70.41.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c3:66:8b:17:c0:d9:bf:7c:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=f7c07493-aa4d-4f20-b3c5-2b760a60244d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:b0:92:9f:da:bf:f1:aa:72:07:53:d6:6f:
                    0b:f9:3c:18:5f:7b:03:a9:3a:34:e0:13:3c:13:dd:
                    5c:6f:b1:4c:35:89:7e:bc:2c:ec:6d:0a:a4:7a:f1:
                    7d:ba:25:0f:e3:0a:ce:0d:ac:d1:30:08:39:54:76:
                    7b:00:ce:cd:78:80:85:15:24:0e:33:3d:76:69:df:
                    e5:aa:66:a4:90:23:59:ca:f6:ff:48:24:66:3f:02:
                    e0:6b:66:04:45:62:34:0b:42:13:65:4e:92:2a:23:
                    b0:b1:5f:35:cf:fb:f7:be:27:c2:30:ae:0b:01:d7:
                    9a:43:52:ec:d6:c7:96:bd:7e:10:ae:08:34:61:48:
                    85:81:3e:4e:8e:2c:7a:8a:13:47:24:e8:4b:36:47:
                    4c:b7:3b:cd:74:53:6a:8b:a0:35:f4:b7:bf:70:9d:
                    d8:32:ce:3e:49:a7:61:3d:8a:3c:93:5f:9b:a4:0c:
                    1e:cf:66:2b:09:41:7b:da:eb:94:a6:b3:27:47:2f:
                    eb:fa:d5:1f:4d:bf:27:b9:7c:a5:fd:b3:f3:1e:51:
                    27:fa:d0:cb:0a:8a:21:5e:33:bf:56:0c:53:26:d4:
                    6d:97:ed:9b:ed:6c:46:77:f7:2f:1c:dd:32:ef:31:
                    a6:c1:8d:9c:6e:cf:39:2c:b9:14:b9:48:23:89:2e:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:FB:6F:8A:B1:AB:F4:F8:4E:56:FB:F9:72:00:35:CD:87:37:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:53:b7:2e:99:13:7b:70:45:be:87:d0:4a:19:29:c9:0f:38:
         1f:cd:3a:01:f8:d0:6e:35:5d:c4:60:ec:61:4c:54:44:d8:b1:
         69:59:4e:5f:ec:e5:8d:4a:81:a7:1c:d4:0a:fd:6b:0a:24:3e:
         95:52:01:31:41:f4:12:64:6e:fb:30:1e:31:c5:af:ba:12:75:
         b5:b6:76:20:6b:18:0a:dd:8c:a5:ca:d5:f7:ae:e1:b6:81:a2:
         ce:fe:ca:21:d9:1d:64:b0:f9:8c:aa:8b:46:8a:34:c0:8a:2a:
         8b:61:1a:eb:91:38:1a:4a:bc:91:ac:a1:f3:86:8e:e1:f4:7d:
         42:5e:fc:34:f0:c3:6c:05:62:d7:95:59:95:ac:fe:12:18:31:
         42:59:ed:a4:d3:43:ba:aa:42:bc:68:71:e3:57:09:6b:08:55:
         d8:75:8e:3c:74:21:5f:c8:f6:93:3d:fb:92:12:e9:ad:f6:c4:
         2f:20:81:8e:7f:16:38:d1:29:c5:af:e6:36:f7:c0:5a:e1:1b:
         6b:de:48:88:b2:fb:d6:5e:dd:11:60:cb:bd:7a:81:4b:89:89:
         88:f0:d8:08:51:dd:d7:2f:94:30:05:b3:55:6b:8e:33:39:08:
         a5:07:17:53:b9:d9:57:82:50:b8:5a:8a:a3:3b:fa:70:93:95:
         cf:cb:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:40 2024 by rpki-client on console-ams.rpki-client.org