Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14abd616-1953-3ce9-981f-23a0551028ec.roa
File:                     14abd616-1953-3ce9-981f-23a0551028ec.roa (raw, json)
Hash identifier:          lubDiAslibZCSIftHqzodggotgbkVXeSL4H5LbFyvVs=
Subject key identifier:   AB:2A:89:6A:31:80:C3:D0:5D:EC:99:90:11:9E:82:1D:34:9F:0E:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DDDB187AA9A0645F2B5E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14abd616-1953-3ce9-981f-23a0551028ec.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.62.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:dd:b1:87:aa:9a:06:45:f2:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a285c347-a5e8-4767-9ab3-99cb57e3aa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:f4:47:69:13:71:55:a3:9c:57:ef:d8:c4:
                    73:70:71:7d:09:41:64:6c:61:b6:92:85:84:ae:f7:
                    66:5c:9e:f2:c2:cf:54:a7:75:01:d1:4b:15:0a:70:
                    2a:1a:f5:a8:c8:91:68:ae:af:e4:71:c3:5d:b5:56:
                    0b:46:a7:46:2e:af:de:b2:98:31:e2:3c:f0:3a:ec:
                    73:5a:a7:fc:74:96:9e:79:d1:e3:90:1a:ac:c9:2e:
                    4d:55:a0:ca:4f:e8:e6:9f:9b:b8:75:f3:18:ec:ca:
                    4f:e7:da:d8:0a:89:ea:d5:80:e8:c1:85:70:27:ad:
                    c5:a3:42:a3:c9:e1:60:da:ff:09:e6:cd:9e:94:b1:
                    a1:67:a1:14:2b:4a:bc:9a:c2:f4:02:60:65:54:b8:
                    d4:d0:d2:cb:7a:3f:2b:a0:fb:89:bc:d3:26:cc:3b:
                    fe:57:c6:ec:8c:3f:ab:b8:b9:84:12:74:c5:9a:20:
                    1f:08:a4:3a:20:72:c4:ad:d7:eb:82:00:21:e5:dd:
                    ea:7b:36:17:89:c4:c9:2c:1d:6e:92:13:0a:1a:c3:
                    33:6b:c0:be:e3:21:af:61:8c:d0:a3:97:bc:da:c5:
                    14:b3:91:01:8b:7c:e6:f5:b7:fe:1b:e2:2c:da:e5:
                    9e:12:59:e4:1b:41:a0:e9:f7:77:09:d5:3e:29:e3:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:89:6A:31:80:C3:D0:5D:EC:99:90:11:9E:82:1D:34:9F:0E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14abd616-1953-3ce9-981f-23a0551028ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:20:ef:19:b0:33:4a:fe:48:ea:9d:5b:65:17:9a:59:01:2f:
         e5:55:57:0f:57:2a:fc:b7:0f:a9:f2:a3:e2:51:41:60:b1:8a:
         02:43:04:22:8f:aa:d6:74:13:0c:90:be:13:d7:b1:5b:81:b5:
         18:9d:50:27:eb:8d:f9:4f:31:4b:06:48:44:b3:3b:b3:d2:21:
         34:a9:f2:86:77:45:86:66:fe:a8:70:f1:64:1f:e4:de:87:3b:
         f1:fb:1e:c3:a6:83:26:c7:75:6e:f0:2d:a1:f5:27:50:75:cf:
         38:01:34:fb:cc:fe:82:98:79:e7:14:90:bb:32:77:db:d8:5d:
         2b:a0:0c:29:e6:c9:fa:4d:21:fd:6f:c1:79:3e:35:db:62:66:
         3b:e8:89:2b:e5:ee:1d:71:8c:b7:d5:55:21:a8:f0:30:43:e3:
         14:4f:b7:9e:83:2a:38:f6:34:4b:dc:e6:7a:51:59:99:f9:1f:
         07:54:5c:9e:d9:e8:d6:2e:ef:d4:99:07:e5:cc:51:7a:6e:c8:
         87:50:fc:f7:6c:6b:9b:7a:33:b1:ce:6d:a7:c4:17:ea:88:1f:
         81:38:29:db:9f:32:e1:52:ee:f4:82:12:bd:6b:97:f8:40:96:
         4a:f9:9d:62:3e:88:07:18:24:68:17:bf:e3:38:85:54:e3:e8:
         12:82:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org