Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20378327-b77c-3094-8e85-6770c935542b.roa
File:                     20378327-b77c-3094-8e85-6770c935542b.roa (raw, json)
Hash identifier:          CO5cyIDPC6fyqOy0Yd2SYlQhwdhh0PL4fOBliIcA76w=
Subject key identifier:   8F:04:14:BA:E3:5A:C1:58:B9:15:FD:5E:2E:0A:27:23:CC:ED:E5:AE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E5088CB84E735830F5080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20378327-b77c-3094-8e85-6770c935542b.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:50:88:cb:84:e7:35:83:0f:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8ef6e987-a8c2-45fa-b6a2-3d4f346c64ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:2e:df:71:5c:4e:06:f5:34:13:84:64:a7:
                    4f:68:d2:63:e4:7a:df:da:51:6c:04:e9:da:a8:cc:
                    cc:ba:a3:09:55:3c:97:a0:81:5b:44:a0:99:96:ce:
                    18:43:3b:91:b3:1e:ef:7f:e4:74:fe:4d:88:59:64:
                    00:84:a4:5c:40:b5:3b:0a:7f:55:39:0e:64:9a:f5:
                    5f:4a:ee:fb:ec:db:92:44:c1:c6:72:73:0c:10:d1:
                    75:81:ca:6a:3f:4e:27:78:c3:5a:ee:45:df:24:05:
                    b5:df:58:bb:0d:c5:8a:81:59:15:cf:fc:8f:5c:ac:
                    f7:8c:09:ac:5a:e4:d5:88:3f:1e:3c:49:c0:bd:73:
                    aa:08:fc:2f:00:1b:b6:87:23:b9:28:1b:68:fb:9c:
                    b1:af:05:f6:16:0c:a8:d4:f2:a2:ce:1c:07:59:eb:
                    8a:45:50:40:57:ba:9c:10:23:69:bd:f6:5d:c1:68:
                    25:92:c2:a9:77:c9:34:0f:4e:84:80:73:1e:c4:da:
                    79:b8:fc:1c:63:bb:57:17:71:b3:e8:04:2e:d2:7d:
                    c6:66:9c:ac:5f:97:b5:f6:cf:25:3c:6a:c0:f2:81:
                    09:ec:c4:2b:a3:0e:77:e9:49:8e:f9:34:0c:de:cb:
                    02:50:b3:4b:e6:39:bb:2f:a0:19:7d:34:8b:d4:54:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:04:14:BA:E3:5A:C1:58:B9:15:FD:5E:2E:0A:27:23:CC:ED:E5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20378327-b77c-3094-8e85-6770c935542b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:77:98:54:68:ca:6d:6d:7a:06:8a:fe:90:de:42:27:5a:98:
         1b:7e:c5:2f:54:59:ef:52:95:4d:1a:5d:1a:35:f8:5f:d3:fe:
         24:07:75:19:fc:d7:4f:c8:e6:3f:66:a1:76:a2:30:83:3c:68:
         7d:2f:28:83:0b:ea:f8:b0:de:c8:d7:09:1b:15:f7:10:ba:8d:
         dc:6b:8c:af:38:84:0d:cf:9e:8c:07:21:ae:47:90:0e:05:77:
         4e:79:a1:e9:66:58:a6:54:79:21:2b:09:3b:0d:35:cc:14:73:
         7a:a5:98:d4:99:e4:c3:6a:89:b8:45:01:03:7e:19:1e:b0:58:
         c7:b8:0e:84:e4:74:0f:11:9e:87:30:cd:03:29:e0:ee:ff:e9:
         15:48:ed:9c:17:aa:36:e8:0b:a4:79:cc:5d:77:45:08:8a:87:
         37:a6:86:84:bb:11:d8:00:ff:7f:51:89:18:ee:5e:52:e6:f6:
         f5:65:b5:fe:9e:0c:95:43:83:cb:99:25:de:e4:a1:46:6a:70:
         76:9e:d9:c7:48:ce:b9:15:ac:63:50:cc:fa:1e:84:d7:31:53:
         60:11:2c:47:fc:4b:f4:ef:e9:37:d7:28:c5:06:8b:d4:dd:74:
         65:f6:a6:a1:82:67:71:ca:cc:f5:35:2d:47:9b:07:f9:2d:ce:
         09:45:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:32 2024 by rpki-client on console-ams.rpki-client.org