Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0ce859ac-db72-3ce1-a25b-5f73cc8ca61d.roa
File:                     0ce859ac-db72-3ce1-a25b-5f73cc8ca61d.roa (raw, json)
Hash identifier:          rYWWsKj51FgzLVUMjdHzQshaKWbDifcq43wCvg2KVb8=
Subject key identifier:   27:EE:5A:41:84:8F:08:04:A8:1C:D4:23:01:8C:F8:FB:6C:CB:74:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCDA8363CF3055778B200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0ce859ac-db72-3ce1-a25b-5f73cc8ca61d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:cd:a8:36:3c:f3:05:57:78:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0ad744b2-0ef3-404c-987e-137006b11c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:37:f5:07:ee:ca:9c:73:83:dd:ac:bb:cb:
                    5c:1a:c5:bd:50:5e:21:2a:8d:c8:e5:c2:21:2c:6f:
                    8d:54:48:98:59:5a:55:b9:f3:79:1c:09:6b:09:03:
                    cd:97:c8:a1:6f:2c:09:e2:01:8a:16:f8:5c:b9:09:
                    78:d8:bc:0f:8c:80:36:5a:41:36:62:f7:9d:da:d9:
                    28:4f:2b:4e:c6:d7:4e:40:25:b2:81:6a:e6:e4:40:
                    98:be:b1:52:23:99:55:17:9c:99:ad:e2:c4:e6:b9:
                    83:b6:46:b4:86:c5:f7:28:b1:86:54:f3:4e:e1:1a:
                    f9:cb:6a:f7:84:7f:b7:04:a7:fd:54:5a:a5:17:11:
                    49:ae:a8:05:96:b1:c2:11:3e:c8:00:74:47:a1:93:
                    7b:70:da:fe:a8:b0:02:c0:6b:45:4f:16:97:2d:64:
                    c4:0c:16:95:fe:64:7d:5a:d0:f4:1c:dd:18:99:3d:
                    e9:26:c9:1b:51:fd:f0:53:c9:62:f3:72:9f:36:0b:
                    42:b5:4f:e9:50:b8:8e:fa:b7:54:23:5e:fc:ec:49:
                    81:bf:b6:75:f9:0d:8d:a8:75:05:45:e3:1a:d4:67:
                    13:bb:aa:50:bf:9d:72:33:1c:50:a7:18:93:68:0a:
                    ba:b5:5c:6a:63:ae:5b:31:2b:00:13:a6:1c:53:81:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EE:5A:41:84:8F:08:04:A8:1C:D4:23:01:8C:F8:FB:6C:CB:74:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0ce859ac-db72-3ce1-a25b-5f73cc8ca61d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c2:27:aa:3f:f3:f2:2e:cc:a7:33:60:59:c1:2d:fe:4b:34:
         9f:9f:b9:3f:b8:b0:65:b5:e8:8f:c5:84:60:7a:33:80:6d:2d:
         8a:2a:cd:67:30:10:71:d6:92:37:b9:55:43:76:f7:b4:16:41:
         1e:17:ef:b1:6d:78:68:85:a4:49:d8:ca:5c:f6:20:9c:65:c7:
         14:ef:11:59:0d:be:55:b0:2e:16:80:6f:95:cc:f7:31:2b:53:
         bb:2b:ad:72:3d:cc:62:4f:51:9f:de:9b:3b:6f:b6:d8:b4:6a:
         de:52:c7:e5:a9:f9:9d:cc:c3:72:e7:d2:a1:32:a8:55:0c:2b:
         63:89:6c:fd:9a:cc:c8:fd:1b:91:f0:a5:6d:f1:cb:b3:1c:a7:
         a4:ab:b0:5a:09:93:38:f4:d6:cd:64:a3:61:2f:42:98:eb:d0:
         27:f6:36:37:01:cf:7c:c2:bf:aa:14:8b:9b:00:5e:3d:8f:42:
         9d:37:5b:47:76:42:06:43:d3:d5:3d:81:0b:67:ca:18:84:7b:
         59:e1:5b:84:43:4e:81:ac:c6:23:9f:b8:03:d5:35:87:f9:69:
         c3:b0:ab:18:46:1d:dd:d0:7c:f1:86:07:ba:e7:59:5e:4b:59:
         3f:fb:56:69:91:53:03:97:6a:b6:a9:3c:59:29:55:12:b8:05:
         30:97:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:28 2024 by rpki-client on console-ams.rpki-client.org