Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d20d47d-019f-3ec9-b391-b045afa88476.roa
File:                     0d20d47d-019f-3ec9-b391-b045afa88476.roa (raw, json)
Hash identifier:          tjzh21E6LYVBXre2LzlmhRlEHbaug6dzsKZzS04tr/Y=
Subject key identifier:   E0:66:17:98:C1:2D:DE:08:7A:6C:41:EF:70:C3:03:5C:60:6C:BE:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD5A6A6AEEAF0131C4000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d20d47d-019f-3ec9-b391-b045afa88476.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d5:a6:a6:ae:ea:f0:13:1c:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1a827618-7a26-425e-8faf-e145c47bec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:eb:7c:b0:6e:0e:f7:1c:c1:86:4e:f1:29:
                    2b:4a:a1:c1:50:3f:e7:01:95:de:39:f4:bf:ec:83:
                    76:fe:b4:6c:3f:fd:bc:7b:c2:1f:de:45:e6:a3:1b:
                    80:4e:b3:76:86:39:c6:24:d0:93:ef:8f:7e:de:b0:
                    cc:24:91:b2:c5:93:13:bd:ff:eb:e0:a8:da:43:48:
                    31:e2:e2:ba:8b:e5:39:dc:c2:53:ad:16:d1:79:39:
                    71:5a:5a:36:38:33:d7:9d:3b:c9:56:c9:ae:1a:e1:
                    05:8f:e1:eb:c8:9a:99:1e:ef:4c:e6:0c:5d:30:c8:
                    c7:9a:88:55:93:76:65:62:1f:a9:40:f8:e0:ca:75:
                    b7:2f:21:db:e5:b6:3e:c5:e6:5c:3a:23:89:92:68:
                    96:da:2d:12:43:43:26:72:27:03:bb:86:f4:3d:34:
                    5d:dc:3a:96:58:37:bb:bc:87:b6:82:42:de:2b:5b:
                    28:d0:1e:74:6f:b4:8e:28:77:e1:e0:e3:99:c1:61:
                    b3:cf:f8:35:66:fb:66:16:4b:a4:cc:a6:3e:57:45:
                    90:86:76:49:1b:99:62:19:28:3b:63:1b:a7:21:97:
                    a5:28:ac:a7:e2:c7:b6:05:7c:17:5e:f2:9a:41:27:
                    1b:a8:cf:33:cc:fe:3e:d2:a2:cc:a4:5d:8e:ab:4f:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:66:17:98:C1:2D:DE:08:7A:6C:41:EF:70:C3:03:5C:60:6C:BE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d20d47d-019f-3ec9-b391-b045afa88476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:74:f9:97:3d:6d:05:8c:fa:6e:8d:bb:06:af:71:c6:94:97:
         45:64:c0:57:b5:6c:21:a1:a2:b7:19:d7:78:02:0a:f3:c6:e5:
         97:10:85:75:77:01:6a:ba:8e:b4:be:88:7f:1c:b0:e8:09:29:
         bb:82:d0:b3:74:78:cd:20:6c:4c:11:a0:f7:ef:c3:cc:1c:f6:
         8e:de:f6:59:9b:cc:ee:0d:1d:a3:45:b6:4b:2c:9c:b2:3e:c1:
         40:a1:a2:87:0a:62:87:d8:4c:04:ce:32:b5:cd:aa:10:fa:d0:
         49:48:fd:4a:00:e6:e0:e9:81:cf:07:c9:71:3a:90:58:20:63:
         2d:0e:8d:93:89:6e:f3:9f:0c:78:b2:9a:1a:55:bd:73:87:26:
         59:aa:a6:50:1b:e4:ad:3c:6d:76:2e:5b:0d:db:44:07:cf:ac:
         8f:9b:6f:9c:ed:6f:0c:e2:c5:46:cc:8f:a9:d8:7c:7b:31:b3:
         44:38:dd:28:56:10:5f:0f:b3:a0:77:88:a2:13:87:f0:b9:9e:
         8b:d8:c5:48:21:26:42:37:27:35:3f:a1:77:85:8c:bc:fc:2f:
         2a:b8:95:b8:6f:2c:19:4b:23:1f:72:e6:34:87:f1:6d:cc:4a:
         0b:c8:09:bf:95:d2:d8:12:92:a6:87:02:40:2c:0b:b0:05:40:
         81:65:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org