Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25148778-6ca0-3b4c-9d06-b8a949414941.roa
File:                     25148778-6ca0-3b4c-9d06-b8a949414941.roa (raw, json)
Hash identifier:          LsbyM9Ix4zPFyfkWvrvssbOAHCy3jKZ1K/gmig4VOVA=
Subject key identifier:   65:4D:B4:D1:A7:60:AF:9E:95:C9:57:BD:AA:02:AE:79:83:B3:01:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCEC89AD4FD967A764180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25148778-6ca0-3b4c-9d06-b8a949414941.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ce:c8:9a:d4:fd:96:7a:76:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1ac6abf9-a109-40b9-8e5b-20457d87237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:46:af:28:b5:8d:21:07:e9:1f:9d:71:6a:
                    bd:f0:69:a5:9d:1e:67:f9:64:f1:a5:4a:42:64:d4:
                    96:8f:dd:62:22:50:62:cc:a7:0f:c1:4d:2b:af:38:
                    a4:56:32:18:a9:0d:c4:36:8f:61:6c:38:22:d2:f6:
                    99:67:87:d7:1c:b4:1b:b5:30:9f:c7:f9:95:3f:c0:
                    f4:10:30:09:ef:32:1d:1f:5f:89:c3:55:50:95:7c:
                    4d:7d:fa:74:13:0c:bc:77:89:a2:b5:1c:eb:c3:a7:
                    60:74:47:eb:fe:32:33:b9:09:8f:8a:44:20:ab:3b:
                    a0:3b:f0:0a:08:ed:cd:74:75:1c:25:e8:da:ac:4f:
                    e1:8c:77:0a:88:33:59:61:4f:57:5c:23:5e:aa:fd:
                    88:20:3a:37:78:41:4d:df:67:49:e4:e8:c1:cc:12:
                    02:2b:52:3d:ff:5f:6c:ac:bd:9f:8d:4f:c1:c0:04:
                    c4:96:6d:8c:81:d2:15:8f:d6:29:9d:83:d9:07:f5:
                    c3:86:cd:50:df:6c:04:46:aa:ed:80:5d:a6:c2:2d:
                    75:a5:c3:b8:cc:01:25:c1:25:f3:94:e0:3c:ac:72:
                    e0:ea:c1:66:70:45:4f:22:60:25:65:23:c4:4e:53:
                    8e:c8:4a:a7:a6:5c:11:ba:e4:e5:b6:06:06:ce:fd:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4D:B4:D1:A7:60:AF:9E:95:C9:57:BD:AA:02:AE:79:83:B3:01:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25148778-6ca0-3b4c-9d06-b8a949414941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8a:b5:ed:70:55:81:52:38:7b:31:03:59:1b:11:a7:76:46:
         36:bf:73:2c:d3:ba:b7:eb:38:87:98:2e:53:5a:82:e7:ac:41:
         cf:72:78:b6:ff:ea:b1:17:3d:92:47:4e:33:40:04:66:cd:23:
         27:2b:3e:27:50:92:a2:22:83:cd:92:08:12:74:92:66:1e:51:
         65:c1:83:a8:98:70:6d:40:a3:1d:97:14:b8:f7:04:a2:5f:c7:
         fa:49:ca:7a:be:cf:c3:72:7c:b7:4a:3c:1d:30:03:ea:1e:e2:
         a6:b3:ed:6a:17:66:14:26:08:a7:58:d9:72:96:c2:32:af:c1:
         56:72:3f:ce:d0:ac:d9:12:c1:f2:d5:22:98:4a:89:86:96:83:
         b9:18:3c:50:12:ed:a9:45:61:33:22:61:a3:76:b2:d8:25:bb:
         7b:e6:89:7f:62:42:f9:6e:85:e7:13:7c:10:e0:05:27:90:c0:
         7f:58:b3:65:3d:f7:47:49:9f:60:98:82:f8:e6:21:05:b0:76:
         d3:2a:8d:e3:4c:30:01:b7:f6:35:c6:b9:b5:51:88:2f:36:d8:
         b9:7d:c0:43:71:40:31:22:6e:7d:e2:02:57:c0:b2:f0:b0:6f:
         a8:7f:86:bf:62:74:eb:90:77:9d:3b:f5:45:43:98:01:6f:74:
         5b:a0:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:33 2024 by rpki-client on console-ams.rpki-client.org