Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa
File:                     fe09bc36-af6b-314b-bd5b-973946014ec1.roa (raw, json)
Hash identifier:          i9cgsyL5gwLIuxe2QQkbdIQYGv685lR1ToQzeCy8EpQ=
Subject key identifier:   A1:9C:6F:21:A6:C2:AA:89:CC:4A:CD:CE:78:F8:C7:58:9A:DA:2B:79
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D7B968662E2B793B75F10
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:7b:96:86:62:e2:b7:93:b7:5f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=bf16b089-21a4-42f8-84b8-dc54cfaebf6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:f3:20:88:b4:08:0b:b1:85:6c:93:39:c8:
                    41:4a:55:ef:1a:7d:75:ee:7a:8c:12:d0:19:cc:49:
                    e1:a6:44:63:14:2a:e6:a3:00:cf:1e:f7:55:ce:26:
                    42:4b:6e:27:a5:ec:8c:13:02:04:b0:a5:48:c3:47:
                    f3:70:a6:92:4e:4d:a6:25:69:d9:53:23:55:87:67:
                    8e:cc:91:b2:41:16:f0:28:a9:5c:a5:03:b9:45:5e:
                    44:e9:e2:90:60:fe:23:04:56:3d:21:b4:14:49:f7:
                    d4:40:d0:55:07:51:5a:f7:b2:ac:d3:c2:4d:21:51:
                    3b:e5:ba:5b:2e:d0:2b:39:5d:94:c1:af:cb:86:d1:
                    c8:8b:37:8e:f4:6f:59:cd:cc:31:f8:e3:bb:ed:c4:
                    3a:af:64:81:39:30:36:2c:e3:31:c6:c7:f7:45:cc:
                    40:c7:f6:69:30:15:a8:f2:99:1e:65:a2:92:8a:a0:
                    05:27:79:ae:a2:09:1e:1e:e6:5f:e7:22:34:c0:fb:
                    64:9b:3b:22:eb:95:b1:51:59:96:df:a8:d1:63:7e:
                    13:92:e6:3a:1a:cf:42:5d:37:25:5a:16:e5:c2:0f:
                    6b:18:65:fd:98:a8:93:29:46:05:e3:6c:8c:cb:49:
                    ee:52:37:37:b5:58:cd:88:55:f0:40:0c:20:31:be:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:6F:21:A6:C2:AA:89:CC:4A:CD:CE:78:F8:C7:58:9A:DA:2B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:fe:37:6f:f7:35:1d:0b:e1:97:cb:f1:68:21:0a:b8:42:e2:
         b6:aa:c2:16:83:56:59:ed:b7:bd:72:82:ab:3f:ed:88:72:1c:
         f8:10:30:5b:05:d7:60:f4:7c:38:f2:6e:79:41:ce:7b:3d:f7:
         de:79:3b:8e:46:c7:3e:2e:5b:71:86:96:fd:99:f8:23:8b:bb:
         34:c9:2f:de:b5:4a:df:c6:1d:2b:cd:62:d7:14:96:75:1d:02:
         dc:0b:db:3a:8f:b4:3c:a5:e7:55:39:e0:05:38:12:09:8d:df:
         59:53:5c:84:a6:c3:26:40:b8:b4:4d:37:68:9c:18:bd:59:9b:
         8a:95:0b:21:65:ab:41:ff:a7:a8:2f:41:fe:08:cd:58:cd:3a:
         b9:ed:35:91:39:ee:21:46:61:66:1b:ee:f5:68:fe:c5:ae:03:
         fd:14:73:a1:b9:08:4c:22:83:ee:ac:de:7f:e1:fe:7c:86:26:
         b6:b5:72:c2:7a:ce:b5:4d:88:9c:75:9b:19:02:0e:f0:4c:7e:
         aa:0c:a7:9a:15:a8:e1:5a:50:85:51:88:cb:6c:2a:c5:d4:df:
         25:4c:8b:b9:6e:dd:2a:07:9b:8f:39:d2:0a:22:43:a8:a2:6f:
         5d:a3:96:8d:a8:f8:e2:90:6f:7f:3c:64:45:88:a9:7e:5a:c1:
         b3:16:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:51 2024 by rpki-client on console-ams.rpki-client.org