Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ae3730-5220-3e61-ad46-4c41becbabb1.roa
File:                     27ae3730-5220-3e61-ad46-4c41becbabb1.roa (raw, json)
Hash identifier:          5eZSMOQWyHe0203Q8xm8hgOzdUCD16Y26TYG+CAmgRE=
Subject key identifier:   E1:8C:7B:20:E7:28:5B:06:89:19:CC:FA:84:A6:7C:9C:C4:45:FE:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4F1D07A833DCDAD21A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ae3730-5220-3e61-ad46-4c41becbabb1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:4f:1d:07:a8:33:dc:da:d2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=822c33cd-197c-4002-83f5-621216ec7631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:c1:05:1b:a3:1e:02:1e:21:f6:eb:d6:b1:
                    3f:7b:44:f8:e2:41:3d:01:53:d6:5f:30:c5:61:40:
                    d6:cd:42:41:da:73:ce:00:bb:85:4b:7f:45:d9:86:
                    50:c4:8b:10:35:b7:ad:2a:05:a4:ad:b9:3f:44:e0:
                    cb:ce:a9:79:97:09:9c:1e:bc:cd:35:11:93:13:f6:
                    7b:2a:92:06:3b:2c:11:f3:0d:22:4b:71:4d:88:32:
                    c2:ae:4b:db:04:39:9a:a2:8d:53:2b:39:f6:93:7d:
                    45:1a:01:99:e5:e1:2f:6b:fa:9c:98:09:e4:ea:65:
                    3d:6a:d6:7f:68:dd:69:fa:b3:d9:1f:f6:ee:a3:00:
                    57:44:c7:16:a2:df:3c:51:9b:63:a9:37:62:36:b8:
                    e9:54:df:9b:62:34:02:49:0e:38:30:75:eb:81:f9:
                    07:21:e8:ae:c5:dc:45:e1:98:27:ca:71:ee:94:cb:
                    e6:d6:88:d3:fb:8c:b1:93:f8:93:bc:36:16:07:d3:
                    d8:ea:8b:ba:59:6b:a8:49:00:1e:a6:aa:28:31:01:
                    bf:87:91:9b:83:1c:bd:24:95:13:7c:8a:28:87:77:
                    de:7f:c3:f6:d4:7f:4c:48:ed:16:89:d6:b4:3a:69:
                    2c:fd:b4:7c:f3:03:10:e8:d3:19:46:61:0c:8b:df:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:7B:20:E7:28:5B:06:89:19:CC:FA:84:A6:7C:9C:C4:45:FE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ae3730-5220-3e61-ad46-4c41becbabb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:8d:03:23:91:f8:5f:b2:c3:87:09:98:6d:5b:41:7c:de:af:
         1d:dc:61:7e:85:df:01:90:ff:b6:5c:ba:d0:21:96:ff:e0:9d:
         31:cb:41:9d:45:f4:ce:10:db:39:8c:8f:97:4c:61:fe:49:b6:
         9d:ce:3d:bd:cd:6a:58:18:c5:b2:fd:df:9e:e2:10:64:50:09:
         10:e5:f4:ec:b3:1d:e7:c4:ce:27:ae:75:13:7d:3b:db:30:c8:
         fb:6b:01:0b:03:0c:1b:22:9d:e9:06:30:06:e1:2c:5f:02:d2:
         06:44:91:27:db:fe:e3:fd:1d:ce:c8:fe:a4:01:62:4f:86:0c:
         e3:5c:75:2f:d8:a4:37:c8:0a:ce:af:c6:31:69:ad:c2:fc:aa:
         b7:1e:3c:66:f2:3a:d2:3c:bd:fd:04:1d:e0:41:46:f0:42:7b:
         b6:2b:bf:e1:ec:b9:0d:be:97:9d:55:e4:80:1c:f3:de:03:d1:
         69:45:91:2c:71:7e:c1:2f:08:29:74:ba:df:8b:52:b0:a2:3b:
         61:8e:c0:b0:bc:80:bb:00:50:77:ee:c4:3f:b4:9e:f2:6b:0a:
         2b:f5:23:67:69:46:ce:ae:07:19:10:35:fc:31:65:02:92:56:
         89:c1:75:5c:ec:85:6b:12:32:31:ad:cf:67:3e:3c:44:89:3c:
         88:1d:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:01 2024 by rpki-client on console-fra.rpki-client.org