Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbfe1e4c-989b-3e31-8d22-124aa7e3e870.roa
File:                     fbfe1e4c-989b-3e31-8d22-124aa7e3e870.roa (raw, json)
Hash identifier:          PSYItIEit/7dqsDXz25OOjRfCvp3dVDe4EypXiPqCss=
Subject key identifier:   34:4C:BE:A4:1F:D7:7F:1E:5C:67:20:9C:B7:7D:21:6B:3C:11:13:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584705508FD1340252D4B574EF40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbfe1e4c-989b-3e31-8d22-124aa7e3e870.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     7155
IP address blocks:        172.243.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:8f:d1:34:02:52:d4:b5:74:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=6b49a7d0-9e38-4ba4-b42a-6e788e332fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:d6:97:1e:be:fe:0b:cd:86:c4:b9:53:92:
                    e3:1e:3a:06:92:5b:bc:8b:a1:4c:69:df:12:6d:2d:
                    37:76:88:c3:9a:f8:17:77:ae:e2:63:a2:61:14:07:
                    29:41:c7:11:49:a6:84:6a:5d:46:2d:7b:c0:9d:d6:
                    18:44:63:57:6c:d7:fa:0b:57:b0:c8:6b:f8:82:35:
                    50:95:dd:b1:e3:ca:a8:7d:94:8b:7a:9e:97:d3:21:
                    a3:74:a5:9b:f2:73:22:4b:77:79:72:5a:63:69:58:
                    ec:db:49:9c:8f:11:39:95:2a:01:c0:7e:18:50:86:
                    b2:2d:db:45:bc:f3:41:4c:01:a1:e9:40:da:96:b4:
                    fd:bd:2b:88:2a:e9:56:5d:9f:e5:46:08:3f:75:0b:
                    cb:e4:fa:21:3b:24:f1:8c:4a:92:51:f0:9f:90:31:
                    06:df:20:8c:e6:2a:be:9f:42:d6:34:36:b2:30:e9:
                    7c:5e:ef:f2:e0:c6:40:10:ff:9e:62:1a:c2:a7:0f:
                    25:ee:c7:4f:c2:8a:2c:2b:1c:1e:5f:93:32:8b:96:
                    aa:fa:35:80:e7:26:03:52:24:72:79:92:8a:ff:a2:
                    e8:a3:e3:25:55:c3:85:f4:d7:21:05:7d:61:d3:01:
                    11:54:d0:73:16:9b:0a:97:cc:af:f7:cb:76:19:77:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:BE:A4:1F:D7:7F:1E:5C:67:20:9C:B7:7D:21:6B:3C:11:13:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbfe1e4c-989b-3e31-8d22-124aa7e3e870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b1:41:42:a1:4b:b2:87:a5:77:5a:80:4e:9e:c4:71:0c:47:
         49:6b:6a:88:16:67:50:35:04:ff:de:fe:2d:4c:fe:23:89:7c:
         f4:d7:e8:2e:58:08:09:5f:a8:0a:d4:64:b1:3a:c0:de:d4:46:
         aa:e6:ff:d1:6b:06:cd:56:d8:f4:8f:a2:81:71:2c:86:af:d0:
         9b:99:d4:fe:38:1c:ac:3c:ac:7b:68:2a:88:c4:d6:df:84:92:
         1b:72:76:2a:37:2e:83:bd:f7:33:1f:82:3d:71:9f:5d:88:91:
         61:47:e7:4a:2d:bb:c0:e3:cd:d8:1b:7d:12:d4:ef:8c:68:24:
         97:03:82:48:f9:34:60:6a:6d:92:d0:05:c7:fa:1a:48:0b:5e:
         7c:85:ee:db:64:43:34:83:7a:73:32:ef:db:f6:84:43:2a:cd:
         ab:ce:b0:40:c2:8b:6c:2f:b4:60:f3:52:67:1a:63:26:99:87:
         b7:30:3e:19:6c:04:07:bf:9e:f0:36:54:b5:20:ce:7f:d7:6e:
         a7:7a:5d:c7:6d:b5:bc:c4:9a:18:16:ea:fb:c4:45:be:8a:57:
         f0:cb:7b:4a:21:cc:9a:d9:01:05:a2:54:3c:d7:f1:ee:da:1f:
         2e:4d:9b:b6:94:67:c0:83:86:60:d2:89:2d:2a:8d:21:bd:c7:
         e4:c0:d2:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUI/RNAJS1LV070AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NmI0OWE3ZDAtOWUzOC00YmE0LWI0MmEtNmU3ODhlMzMyZmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmPWlx6+/gvNhsS5U5LjHjoGklu8i6FMad8S
bS03dojDmvgXd67iY6JhFAcpQccRSaaEal1GLXvAndYYRGNXbNf6C1ewyGv4gjVQ
ld2x48qofZSLep6X0yGjdKWb8nMiS3d5clpjaVjs20mcjxE5lSoBwH4YUIayLdtF
vPNBTAGh6UDalrT9vSuIKulWXZ/lRgg/dQvL5PohOyTxjEqSUfCfkDEG3yCM5iq+
n0LWNDayMOl8Xu/y4MZAEP+eYhrCpw8l7sdPwoosKxweX5Myi5aq+jWA5yYDUiRy
eZKK/6Loo+MlVcOF9NchBX1h0wERVNBzFpsKl8yv98t2GXe3kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRMvqQf138eXGcgnLd9IWs8ERMSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmJmZTFlNGMtOTg5Yi0z
ZTMxLThkMjItMTI0YWE3ZTNlODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCxQUKhS7KHpXdagE6exHEMR0lraogWZ1A1BP/e/i1M/iOJfPTX6C5Y
CAlfqArUZLE6wN7URqrm/9FrBs1W2PSPooFxLIav0JuZ1P44HKw8rHtoKojE1t+E
khtydio3LoO99zMfgj1xn12IkWFH50otu8DjzdgbfRLU74xoJJcDgkj5NGBqbZLQ
Bcf6GkgLXnyF7ttkQzSDenMy79v2hEMqzavOsEDCi2wvtGDzUmcaYyaZh7cwPhls
BAe/nvA2VLUgzn/Xbqd6XcdttbzEmhgW6vvERb6KV/DLe0ohzJrZAQWiVDzX8e7a
Hy5Nm7aUZ8CDhmDSiS0qjSG9x+TA0iM=
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:43:24 2024 by rpki-client on console-fra.rpki-client.org