Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa
File:                     1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa (raw, json)
Hash identifier:          7AZC6GUWVBp43FiuGV5SG+2Q3OQe5/OPcWZKEwvZkfw=
Subject key identifier:   90:6D:D7:A5:A7:81:BF:61:86:B3:E7:AD:EB:5F:91:D0:CA:F4:DC:53
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E53B5EF3DFD8EB48D9580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:53:b5:ef:3d:fd:8e:b4:8d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c95008ee-2483-4d41-8ba5-b7a4e490f1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:56:7b:f6:32:6e:cb:59:9b:7f:97:41:9d:
                    1a:93:b0:31:73:f6:ad:ca:50:d3:da:6e:aa:48:f2:
                    d6:62:8e:8e:6e:2f:8f:f2:b7:02:eb:c1:0f:dc:89:
                    cc:37:fa:be:38:45:67:cf:19:4e:39:43:be:79:53:
                    5c:b4:de:1c:e2:38:c1:95:3c:13:42:20:81:6c:48:
                    61:a8:82:d8:de:e0:0a:7f:5b:b3:10:f3:3c:26:c6:
                    f9:ca:af:44:6e:ae:40:44:b6:ee:24:45:67:af:4b:
                    f1:3f:0f:53:28:a0:e3:9a:c7:d6:47:8a:4a:f9:06:
                    29:b5:93:2f:7e:8e:a0:c2:49:f8:7d:0a:52:88:1e:
                    e8:cc:e3:fa:5e:39:3d:8d:53:c4:50:73:26:3d:30:
                    9d:23:a5:1f:fc:6c:0f:35:31:69:e6:6f:80:fd:4b:
                    30:53:a0:9b:ea:3b:60:07:7c:48:f9:5a:23:eb:dc:
                    fd:ab:8f:af:bf:06:da:ac:34:9e:34:87:11:71:4d:
                    23:2d:f5:ba:de:e9:93:0f:2a:eb:f0:4b:b5:b4:08:
                    b9:ab:bc:42:5f:21:de:5d:14:03:eb:f7:8a:2e:26:
                    75:a3:d3:cd:23:12:55:45:ce:3c:70:ad:3e:ca:c1:
                    c2:a2:19:1d:f0:78:38:e5:43:ee:2d:ee:06:5f:51:
                    5a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:D7:A5:A7:81:BF:61:86:B3:E7:AD:EB:5F:91:D0:CA:F4:DC:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5e:cf:f4:8e:11:a8:68:af:43:0d:c3:37:bf:89:93:6b:0c:
         6c:58:e7:51:e3:7d:f5:63:c5:75:68:ac:8e:f1:1c:06:65:a7:
         6e:ff:22:bf:de:1c:53:6e:be:53:14:88:fd:58:54:a1:27:df:
         cf:1f:8a:cb:7a:09:11:59:7f:9c:6c:53:79:a6:2b:d6:ad:38:
         55:7e:be:d3:26:3a:49:88:ce:ea:81:fb:19:1b:cf:e9:4a:07:
         ab:3c:29:0b:37:41:82:61:9a:e1:e1:6c:30:e2:6d:a3:29:27:
         77:94:22:4d:4b:48:72:d3:41:5b:84:62:d6:56:42:66:6e:ba:
         09:da:a1:e0:5e:1d:be:f3:46:3d:8f:d6:e4:ec:02:65:d8:fa:
         dd:bb:7c:7b:fe:00:1a:28:7d:eb:d1:fd:0b:ff:9e:e9:bf:d3:
         af:9a:c0:6d:c6:de:08:ae:b2:c4:07:27:1f:27:09:16:04:54:
         8e:e4:b2:2a:17:b5:f4:17:e7:dd:1d:1c:35:a1:0a:3f:e0:df:
         1a:e6:bd:d6:fe:02:29:15:01:68:c2:10:62:bc:3f:f2:c8:f3:
         50:40:53:6a:24:bd:d9:95:88:14:27:0b:05:0b:4f:d5:5f:b7:
         44:2a:80:f0:6d:b2:68:1e:77:82:1d:6c:ad:bd:2a:f5:3e:d1:
         15:17:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:19 2024 by rpki-client on console-ams.rpki-client.org