Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20378327-b77c-3094-8e85-6770c935542b.roa
File:                     20378327-b77c-3094-8e85-6770c935542b.roa (raw, json)
Hash identifier:          3fw4u48/F61CMu3cfcbaU/NebD+l8TOazy4RrIeuSoY=
Subject key identifier:   12:13:85:3A:B1:43:E4:94:8B:E0:15:A8:57:B3:87:A5:D8:29:08:F0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B15BBC10AEE6BEEA177C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20378327-b77c-3094-8e85-6770c935542b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:15:bb:c1:0a:ee:6b:ee:a1:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=3a5eb66d-2e26-4acb-8c54-62907de8ca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:cc:2b:11:a6:d9:06:82:b6:2c:fa:fd:00:
                    55:07:9a:22:a2:f9:fb:18:15:67:cf:92:c1:13:f0:
                    5c:9e:8d:0c:8f:0a:43:35:72:26:10:f9:80:40:69:
                    a9:33:6d:5c:69:95:c6:fa:98:69:af:93:97:6b:05:
                    56:8a:7e:f5:7b:89:78:e3:15:1d:b7:06:ab:13:e2:
                    08:ad:62:7d:cd:16:3c:a5:c7:22:88:59:5b:37:1f:
                    12:3d:9f:81:8a:8b:f8:1c:b9:3f:84:b4:54:95:90:
                    78:21:f9:21:5d:1e:43:0b:29:11:74:22:55:93:f2:
                    ee:2b:ba:78:0c:fc:2d:8a:3e:eb:b6:6b:0b:67:51:
                    d5:42:44:d6:55:83:77:0c:0b:5c:a4:f2:db:a3:c3:
                    e0:34:b0:9d:4f:47:25:e9:24:48:dd:61:f4:6b:76:
                    d7:ed:3c:e3:7d:a0:d3:5c:ea:b7:46:99:7a:29:55:
                    1e:12:00:e7:a5:c0:51:3c:08:4a:7b:c9:40:8d:b8:
                    24:8c:8a:c7:fa:ee:6e:cc:8c:2b:a8:ef:f4:de:b0:
                    30:66:cb:05:6b:f8:03:e5:c6:63:b1:d3:80:59:f0:
                    6d:42:5c:e1:cd:c9:51:15:e2:50:be:d4:b0:27:2b:
                    0b:2a:73:eb:37:ee:0d:42:6c:bc:37:12:cf:05:4f:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:13:85:3A:B1:43:E4:94:8B:E0:15:A8:57:B3:87:A5:D8:29:08:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20378327-b77c-3094-8e85-6770c935542b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:3e:aa:f7:a1:ba:e9:fd:dc:cc:ea:ea:7b:16:ff:67:1e:
         f0:db:77:58:ef:78:37:72:dc:91:bc:eb:5b:61:2e:85:8a:35:
         d6:86:38:44:20:7c:74:4c:fc:04:30:5f:0e:6f:3f:90:35:ce:
         ce:c8:b9:db:32:5a:c2:4c:0e:3d:a5:72:f9:93:be:b9:9d:5e:
         13:31:12:b4:3c:87:e3:1f:56:78:47:f5:71:44:46:5e:b9:0f:
         17:95:28:6c:99:5d:d7:3c:e4:c8:4d:5f:4f:f5:34:f7:e4:6c:
         8c:61:a4:2a:e5:f4:38:88:29:ec:ca:44:34:9e:2b:2c:a3:13:
         a3:b7:ac:7f:ce:66:5d:21:e3:43:27:98:69:23:73:18:75:02:
         1a:91:a1:53:b5:14:3d:c7:1d:9a:52:e7:7f:4f:ba:a7:3f:de:
         b3:ab:b7:6c:df:e3:5b:14:d7:e6:7d:0e:f0:78:4c:36:24:58:
         06:95:f3:36:64:9e:fe:c9:81:d4:dd:51:6f:f1:4b:f9:84:d7:
         de:1a:6f:fd:f0:e0:5c:06:ab:08:ae:1b:87:cb:3f:78:c0:2c:
         f6:e4:17:cb:36:91:80:14:b7:4a:a0:a4:e5:5c:e0:06:9a:94:
         5d:15:e8:b5:21:d5:5f:7c:b9:8c:5a:1c:d3:86:73:63:8f:08:
         81:b7:90:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:18 2024 by rpki-client on console-ams.rpki-client.org