Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12a37952-7f6f-3885-873f-86219dca6448.roa
File:                     12a37952-7f6f-3885-873f-86219dca6448.roa (raw, json)
Hash identifier:          /uXUWrq1PUQqExYD7rPHgbUDlqRLz3Q1NY8kfAkVWrk=
Subject key identifier:   33:55:C8:B7:3F:54:A7:54:A6:FD:B9:5C:AD:9E:FC:05:D5:E3:7D:87
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE4B8C8FCD8A2C79F7D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12a37952-7f6f-3885-873f-86219dca6448.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e4:b8:c8:fc:d8:a2:c7:9f:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=4a19108c-abfa-4d92-85ff-dae02e698464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:1a:7a:18:8f:ed:9e:2d:17:68:ae:30:91:
                    5e:32:ad:16:b4:78:d4:84:bd:33:bd:f4:00:9f:79:
                    a0:23:37:c7:2d:7a:e3:31:83:6f:2c:32:52:74:0e:
                    84:6a:63:4f:1a:d8:76:58:e3:33:fd:66:75:a8:71:
                    42:a8:a3:8d:84:10:de:ad:67:6b:92:23:62:83:37:
                    73:db:ae:8c:a6:9a:37:3d:68:09:74:68:8a:2e:ff:
                    b6:9f:39:fa:93:3d:b9:88:b7:15:12:0e:e5:c7:af:
                    8f:d9:70:07:ea:66:e8:67:e8:ce:1f:3a:de:ae:ae:
                    c2:59:66:0d:de:ed:e7:2a:76:b3:0f:21:44:ac:3c:
                    a2:51:70:5a:3a:53:3d:11:60:d9:f3:91:c6:ff:3f:
                    c0:4d:1c:f3:94:7c:c5:9e:0b:4d:64:0c:a2:04:b0:
                    e6:cd:b8:92:55:5e:d0:11:77:56:f7:1a:c3:3c:ae:
                    5f:57:e8:53:76:43:99:13:2e:de:08:11:f2:38:d7:
                    9c:d9:18:64:0e:28:d0:93:0d:e5:61:da:85:97:a2:
                    b4:98:42:3b:f0:fa:74:ec:fc:31:bb:5c:eb:3e:39:
                    8d:25:c1:96:c1:ee:17:66:b1:23:d6:32:c8:9d:33:
                    aa:e8:9b:29:e8:d3:d8:a7:10:30:12:9c:21:da:86:
                    7f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:55:C8:B7:3F:54:A7:54:A6:FD:B9:5C:AD:9E:FC:05:D5:E3:7D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12a37952-7f6f-3885-873f-86219dca6448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:be:14:56:08:9f:e6:a5:df:91:56:c1:94:e1:a9:67:4a:61:
         a8:66:45:46:92:de:9d:8a:ac:ce:c4:33:99:eb:13:1e:21:80:
         eb:4c:34:44:3c:c7:b3:b5:11:3f:3e:73:31:eb:4b:57:49:c8:
         88:b1:a5:d4:40:8a:6e:e0:18:56:96:ae:55:84:3c:15:71:86:
         4f:5b:65:9d:32:cc:1f:4a:ed:e0:9b:f0:a9:a4:e2:59:9a:69:
         98:3d:82:76:53:31:ed:d8:ce:7a:8f:5e:25:9d:c6:da:89:42:
         16:c3:f6:0b:40:62:59:ad:b6:ea:60:da:a1:c7:fd:de:14:fe:
         db:cb:d7:64:1f:cd:84:84:fe:43:06:61:3d:d1:c8:9d:cf:2f:
         08:57:8b:cd:06:43:c4:a5:85:bf:72:ca:9d:26:52:fa:7d:98:
         85:40:ec:68:67:d8:e6:f0:f5:a3:5d:4d:4f:db:e8:57:5a:0e:
         43:c0:e9:38:05:61:84:26:f1:b8:ee:f6:51:ea:7f:5a:8e:b1:
         20:5e:20:a1:95:66:55:1b:21:36:d7:6e:28:32:b4:98:cc:fe:
         93:ef:81:c0:84:03:fd:11:6f:09:cd:9f:b3:75:84:b5:b2:ce:
         20:43:2e:78:50:73:52:77:81:95:56:ac:f9:7e:13:05:d2:a1:
         19:90:f8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:32 2024 by rpki-client on console-ams.rpki-client.org