Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23728c2c-1ff5-3b1e-be0b-18de42095951.roa
File:                     23728c2c-1ff5-3b1e-be0b-18de42095951.roa (raw, json)
Hash identifier:          LBn+F170bpqTj1PaHrW/cxN2oCYPUoxQEG4PViiN6go=
Subject key identifier:   A0:35:F0:81:43:7A:57:64:C6:61:EB:F4:D3:14:84:20:71:6B:C0:1E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E66493C4F8ADF2AFD6F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23728c2c-1ff5-3b1e-be0b-18de42095951.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:66:49:3c:4f:8a:df:2a:fd:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8a7ce064-5b99-44ed-abb6-627a0e88d8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:59:ae:6c:d5:d4:a6:99:1a:a4:1d:13:ba:59:
                    c2:6e:5b:f8:cf:6b:26:4c:10:5e:7b:89:03:e5:7e:
                    95:14:51:23:70:06:56:35:a1:c9:a1:99:47:b8:ba:
                    e1:f4:75:ed:94:d7:31:dc:d9:57:b9:47:48:f2:d6:
                    32:40:e0:55:a4:d6:35:ea:c7:91:fd:94:50:fe:33:
                    b5:e6:20:bb:75:6a:aa:e8:4e:cf:f4:3e:72:79:41:
                    30:b3:54:0b:51:64:4b:8c:dc:48:22:d8:3d:59:36:
                    ef:b4:ca:30:9b:b5:d4:07:11:22:a5:bb:df:1e:7e:
                    34:17:d0:fa:62:d0:16:3b:18:86:9d:a5:d4:79:f5:
                    71:ee:cc:05:de:74:86:f9:fb:b2:87:a5:4e:14:c3:
                    c4:7e:8e:f4:df:61:09:c9:c1:b9:ce:a8:9b:e3:c0:
                    be:ce:bd:1a:11:5e:e8:e8:87:20:fa:02:8a:64:fc:
                    ef:b0:04:b5:6f:3e:7d:95:10:8c:96:35:11:1e:12:
                    78:38:1e:3a:9a:b6:5b:fe:16:c3:c6:3d:8d:fa:c1:
                    25:3e:b4:73:9a:b1:f9:36:55:4a:18:37:0b:1a:c7:
                    8d:93:0f:53:79:07:40:fd:15:16:09:93:94:04:78:
                    fe:64:46:85:b7:56:23:03:35:bb:4d:53:38:e6:d3:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:F0:81:43:7A:57:64:C6:61:EB:F4:D3:14:84:20:71:6B:C0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23728c2c-1ff5-3b1e-be0b-18de42095951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:47:5c:45:25:fb:93:a4:3a:4b:de:e3:99:f4:59:88:68:47:
         9b:96:af:cf:2f:8a:d7:68:3f:b0:0b:ec:73:c9:0d:1c:1e:95:
         a9:aa:4a:d8:80:5f:ef:e7:25:d4:2f:11:61:18:41:62:90:2d:
         4a:1f:67:07:47:76:ee:d1:02:a5:c7:82:1f:7a:01:5a:d7:43:
         20:ed:b3:3a:d3:53:4a:31:53:56:c5:9c:f1:e0:91:d5:cf:d6:
         a3:c9:5b:32:fb:cd:94:52:33:1c:a0:6b:77:55:1e:5c:b2:d7:
         8b:38:e9:f3:82:dc:89:ea:3c:e8:c1:39:8d:f0:69:3d:da:d9:
         7f:56:62:4c:78:6a:85:6b:6f:cf:cc:60:e2:b8:f3:8f:51:fb:
         a4:78:73:2f:06:de:5e:1c:80:ad:c5:17:81:3e:4f:f8:00:9a:
         71:57:16:9e:fe:69:7f:cc:e2:fc:82:ef:3e:fc:b4:fa:92:98:
         7b:68:62:64:a4:78:e6:73:60:b7:c7:53:82:03:dd:21:22:9e:
         a8:15:b0:10:be:61:bd:41:9c:22:30:36:da:74:ef:df:00:52:
         ac:31:19:fb:ea:be:69:79:41:4b:a8:95:58:e7:4f:90:7c:80:
         af:6f:f6:8c:eb:76:d9:af:5d:fc:74:c3:46:10:47:ad:80:76:
         d2:ad:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:33 2024 by rpki-client on console-ams.rpki-client.org