Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd6f52fc-3b60-3e78-9eae-4612ea68dcbe.roa
File:                     fd6f52fc-3b60-3e78-9eae-4612ea68dcbe.roa (raw, json)
Hash identifier:          x/vWMMG69vRAEJh+6viPR0YTGU1omGOYTmqH3WNKdGs=
Subject key identifier:   F7:1E:6A:3F:39:4F:62:E8:39:07:6E:EC:37:4B:56:7D:24:DF:1E:96
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DC033B08D1E743CF78AE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd6f52fc-3b60-3e78-9eae-4612ea68dcbe.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:c0:33:b0:8d:1e:74:3c:f7:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=d81f5642-84ca-473b-83c8-7f9b8ffa747f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:e4:39:fc:a2:b3:91:24:63:1c:ac:7d:ce:
                    ea:76:11:e8:63:73:b3:d7:d7:d1:ef:f5:cd:3d:5f:
                    5e:91:cd:77:15:51:af:47:dd:60:8a:2b:40:c2:f7:
                    df:2b:e4:8d:e6:0e:9b:8e:28:f2:58:96:cb:16:11:
                    f2:bb:81:52:3a:82:b8:09:5e:6e:ea:cf:13:73:c8:
                    4e:88:d3:cc:ef:a3:b3:14:b2:40:ee:0a:c1:a1:d8:
                    0a:1e:53:e3:ab:34:6b:31:65:44:ad:85:6e:fc:aa:
                    18:ac:5a:8a:bc:fb:37:b0:12:0a:5e:ae:17:8a:2d:
                    2b:32:09:90:fb:27:2f:bc:6d:77:e4:a7:80:0d:2a:
                    d5:d6:bd:1f:65:40:e6:f3:24:97:5e:37:10:fc:83:
                    f0:c3:b4:95:25:8b:57:ec:9d:17:17:bb:b8:f9:de:
                    fa:a4:c6:e9:31:96:79:55:d1:38:7c:05:e3:0b:01:
                    46:34:54:cc:19:de:35:65:ce:71:8d:7f:bf:3c:f9:
                    db:8d:ec:16:d4:d0:9f:9f:10:45:c3:a4:b7:c9:35:
                    ee:65:9b:7f:cc:52:6b:ce:e9:fe:67:3e:39:f2:42:
                    cf:77:68:82:56:02:03:71:e9:cb:fd:3b:a6:b6:c6:
                    ec:86:c2:f8:64:db:ca:2f:60:42:39:10:3e:47:36:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1E:6A:3F:39:4F:62:E8:39:07:6E:EC:37:4B:56:7D:24:DF:1E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd6f52fc-3b60-3e78-9eae-4612ea68dcbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:fb:e3:6a:d6:53:8b:67:a0:bf:36:09:0b:33:e8:8d:87:
         b0:1b:65:68:5e:1f:bb:7e:f4:db:2e:81:50:0d:52:b9:6d:38:
         7a:7d:14:87:57:41:53:ff:b6:3a:27:eb:73:0e:1c:1b:d7:f3:
         72:27:77:28:0a:10:d7:59:49:0c:20:5f:80:12:b1:f9:4f:6a:
         1a:46:2f:6b:86:da:b4:d7:18:bc:16:39:66:d0:f9:12:c9:a8:
         a9:eb:55:3b:04:e1:f5:ec:9c:a0:b4:f4:d0:55:91:65:28:23:
         43:60:5e:1b:9a:aa:fb:bf:69:1e:c2:b8:59:bc:d8:95:74:fc:
         d0:6a:01:e6:f5:25:b4:a0:4c:0c:d5:8d:15:00:54:d0:89:ea:
         29:be:35:2b:e2:db:3f:6c:a0:f6:7d:36:85:a2:40:b3:7f:c9:
         0b:27:24:c9:64:6b:e6:88:57:c9:6c:d2:09:c1:bb:27:08:9a:
         ec:4c:1e:6e:c6:01:14:30:ff:3c:7c:3f:6c:66:05:f4:df:46:
         95:a7:a1:02:9b:d3:35:01:5b:6f:ab:70:5b:ed:eb:df:ef:20:
         3f:86:4f:c3:a8:d2:43:c0:65:1c:d1:2d:3e:c5:2e:b3:59:88:
         a8:f2:53:f7:3c:de:24:cc:15:fc:31:e9:ba:cc:8b:f0:57:58:
         1e:6e:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:49 2024 by rpki-client on console-ams.rpki-client.org