Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18696bae-b029-38e4-9fa6-a336c835249f.roa
File:                     18696bae-b029-38e4-9fa6-a336c835249f.roa (raw, json)
Hash identifier:          J5Ze57wVu8BP6G706I43/PPrVwezpTBPbJzXTdy1C38=
Subject key identifier:   20:19:05:36:21:2E:67:53:1E:76:CF:4C:80:E9:5C:ED:92:3D:E0:09
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE5FA416E08A49197D600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18696bae-b029-38e4-9fa6-a336c835249f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e5:fa:41:6e:08:a4:91:97:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7f77ff75-5c1f-4513-a421-d253ecd1e4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:13:ca:66:a3:71:5e:36:59:c6:ef:b9:d3:
                    8f:35:ed:5c:fa:10:04:ad:b3:50:13:fd:ea:3f:05:
                    8d:fc:c8:81:c9:8e:e8:1d:3e:2e:24:86:09:60:ea:
                    7d:02:ba:da:3a:88:fc:5b:a2:45:8d:9e:21:37:00:
                    da:2a:0f:37:1c:ef:e9:b5:63:62:e6:22:ca:be:3f:
                    34:f5:df:6d:08:dc:62:69:d7:b2:8c:57:e9:bc:27:
                    99:29:7c:ad:bb:c4:78:04:55:14:bb:91:c9:5e:7c:
                    e8:ca:dc:2a:a2:11:be:7e:d1:b5:d9:a5:5c:41:83:
                    13:c4:bc:b4:f2:99:9c:7a:8a:15:6e:ac:27:c1:4f:
                    2b:cb:db:5b:48:63:8e:d7:7b:84:c2:46:46:4d:04:
                    ed:8b:e1:fe:35:e0:b5:26:0f:9e:fd:27:c6:c2:6b:
                    55:20:c2:c5:fd:8a:1b:3d:42:bc:69:c2:77:1c:34:
                    8f:e1:de:8f:58:f5:53:56:c7:e6:de:8b:29:14:77:
                    25:7a:1e:09:a5:4d:cc:0d:91:c2:ee:da:97:95:5e:
                    9a:8d:9b:a4:5b:eb:cf:5f:52:25:68:4a:02:ed:07:
                    ac:6e:77:37:85:b4:97:4f:80:c0:9d:4e:09:e5:41:
                    42:71:f0:e5:81:35:a6:ac:77:17:d1:80:9a:12:4d:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:05:36:21:2E:67:53:1E:76:CF:4C:80:E9:5C:ED:92:3D:E0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18696bae-b029-38e4-9fa6-a336c835249f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:3f:79:c2:79:95:9b:31:19:63:4f:e8:59:4f:94:fe:6f:58:
         00:6b:cb:ef:0d:83:57:6b:9c:dd:03:91:cb:bd:d1:6e:a2:58:
         88:8d:75:aa:ee:d0:07:50:c6:8f:70:bf:54:b6:3c:d6:17:60:
         88:0d:04:57:3c:9f:ea:8c:07:71:bf:03:59:ae:f2:64:ac:00:
         6f:2f:0b:a4:dd:a6:1a:03:0d:75:86:68:94:23:ec:44:83:f1:
         d3:6c:b7:f0:f8:3e:b3:43:7b:9b:6e:ce:99:96:1f:38:19:93:
         36:c0:78:05:b9:e2:30:e7:3a:ab:9b:da:70:1e:a8:4e:88:c9:
         0d:f4:56:57:c9:f2:e9:77:1a:74:71:8f:54:35:57:15:b1:b8:
         29:02:3b:1b:36:06:cb:13:af:bf:14:74:18:fd:79:8c:58:55:
         eb:92:7d:17:75:23:27:3a:25:d0:26:64:a9:17:6a:78:4e:3b:
         15:e1:df:4b:2e:c4:41:cb:0a:eb:e3:90:80:d6:65:45:a5:99:
         2c:8f:5e:06:af:06:42:ec:ae:88:8d:3d:36:80:56:a2:4e:9b:
         c0:0e:44:7a:6c:04:ba:93:7d:8e:50:63:27:fa:3d:b1:8d:94:
         a2:af:44:9b:76:1b:bb:0b:45:2b:8f:38:c9:05:f0:9c:7b:30:
         af:4a:d5:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPeX6QW4IpJGX1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
N2Y3N2ZmNzUtNWMxZi00NTEzLWE0MjEtZDI1M2VjZDFlNGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GUTymajcV42WcbvudOPNe1c+hAErbNQE/3q
PwWN/MiByY7oHT4uJIYJYOp9ArraOoj8W6JFjZ4hNwDaKg83HO/ptWNi5iLKvj80
9d9tCNxiadeyjFfpvCeZKXytu8R4BFUUu5HJXnzoytwqohG+ftG12aVcQYMTxLy0
8pmceooVbqwnwU8ry9tbSGOO13uEwkZGTQTti+H+NeC1Jg+e/SfGwmtVIMLF/Yob
PUK8acJ3HDSP4d6PWPVTVsfm3ospFHcleh4JpU3MDZHC7tqXlV6ajZukW+vPX1Il
aEoC7Qesbnc3hbSXT4DAnU4J5UFCcfDlgTWmrHcX0YCaEk2j/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAZBTYhLmdTHnbPTIDpXO2SPeAJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTg2OTZiYWUtYjAyOS0z
OGU0LTlmYTYtYTMzNmM4MzUyNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD98MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJg/ecJ5lZsxGWNP6FlPlP5vWABry+8Ng1drnN0Dkcu90W6iWIiNdaru
0AdQxo9wv1S2PNYXYIgNBFc8n+qMB3G/A1mu8mSsAG8vC6TdphoDDXWGaJQj7ESD
8dNst/D4PrNDe5tuzpmWHzgZkzbAeAW54jDnOqub2nAeqE6IyQ30VlfJ8ul3GnRx
j1Q1VxWxuCkCOxs2BssTr78UdBj9eYxYVeuSfRd1Iyc6JdAmZKkXanhOOxXh30su
xEHLCuvjkIDWZUWlmSyPXgavBkLsroiNPTaAVqJOm8AORHpsBLqTfY5QYyf6PbGN
lKKvRJt2G7sLRSuPOMkF8Jx7MK9K1SI=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:00 2024 by rpki-client on console-fra.rpki-client.org