Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa
File:                     2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa (raw, json)
Hash identifier:          Aj8CVZIOQnD55d+N8/iVImHVMdVsMuDvT4IojqmtK0A=
Subject key identifier:   D7:39:C2:3B:D8:77:4F:0A:22:A1:73:7F:3A:ED:25:36:F6:51:B7:8A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD7DD25357A89001488C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d7:dd:25:35:7a:89:00:14:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=852ab23c-6cf6-4e4e-b608-d3e9c61dbadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:f6:4c:0e:07:87:f4:b4:bd:a4:63:c6:6f:
                    8c:eb:3b:5b:a0:95:27:fb:17:0e:a3:bb:cb:10:6e:
                    df:5c:66:d7:6a:bb:5c:61:ba:41:43:82:a2:4a:ae:
                    01:86:85:2f:e8:e0:37:97:f7:1a:94:74:dd:8f:d1:
                    3d:de:8c:18:da:62:e1:e4:8d:50:36:61:7b:c4:fe:
                    62:ec:9d:aa:6b:ad:7e:23:89:55:b1:46:e9:89:92:
                    74:a3:ec:a4:7f:7f:72:a5:c6:d4:3a:da:c7:84:6e:
                    88:c8:0f:57:47:aa:ac:fe:d1:98:c8:c5:2e:d6:4e:
                    55:a1:36:99:cc:50:90:c2:cf:42:b0:89:51:cb:1a:
                    5f:86:81:bc:ec:52:fc:f8:3b:21:46:8a:f8:84:bd:
                    5a:51:10:6b:7a:09:8d:d3:45:4c:98:9b:74:e3:02:
                    0e:a4:2d:aa:e0:2b:7e:c5:3d:03:4a:5c:7f:72:08:
                    af:5c:bb:58:78:39:7f:ac:11:6d:03:f7:ce:62:e7:
                    e7:2c:b4:29:90:56:fa:0d:1e:8c:6b:70:2a:4b:b8:
                    6c:ce:88:db:1d:b1:ed:6e:a8:f9:fe:50:a6:17:1e:
                    50:57:9b:21:7b:b0:b3:20:52:7e:62:46:02:b1:a0:
                    d2:08:f6:1b:74:5e:35:f0:a3:99:f6:a7:92:54:0b:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:39:C2:3B:D8:77:4F:0A:22:A1:73:7F:3A:ED:25:36:F6:51:B7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c9:92:4a:70:c5:e2:ac:c0:3d:71:61:38:78:aa:5f:d6:95:
         39:b3:22:84:ba:ea:ae:01:4e:83:ac:ad:c3:33:58:3c:e6:68:
         ef:57:fb:50:02:e4:31:73:34:4a:2c:75:a5:cc:aa:e9:a7:0d:
         6b:0f:e3:ca:eb:e8:2a:09:b5:c3:48:bc:75:7a:e1:9f:fe:f2:
         da:f3:0b:bc:04:08:5f:9a:78:91:db:87:40:32:07:29:c2:6a:
         f3:d6:9f:08:63:81:d2:4d:4d:cf:28:a2:af:5e:4c:c4:28:be:
         e4:3a:f2:f7:05:6f:06:5f:4d:7c:68:53:d3:a3:e3:ff:f1:8c:
         4a:d8:7c:46:c6:06:e3:e5:a7:e6:f8:50:a1:63:10:52:b1:8d:
         d7:57:c1:f1:86:44:68:89:af:84:52:a7:1f:33:1f:b4:8e:cc:
         ea:ba:28:50:d7:a9:8f:01:58:d0:33:88:c6:92:a9:1e:2e:97:
         b0:42:2c:29:d1:2a:c7:21:e2:2a:e2:89:9c:75:c3:09:d8:54:
         7b:4c:b3:85:e9:1a:5f:b8:33:86:3e:77:ef:30:c9:97:fa:7b:
         fa:e0:0f:71:75:e8:1d:35:42:16:cd:df:20:d6:04:73:a7:8d:
         d0:cc:5c:a3:d5:9c:14:21:ed:f0:d4:1e:2b:05:82:e4:28:ca:
         c6:e3:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:01 2024 by rpki-client on console-ams.rpki-client.org