Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf083ea-1322-3adc-94d4-cf7cd3d19146.roa
File:                     2cf083ea-1322-3adc-94d4-cf7cd3d19146.roa (raw, json)
Hash identifier:          1XF2AvC4cznKB2wmV9vj0GtyZm0eQRalGf88oAVjlk0=
Subject key identifier:   91:A5:C8:25:E8:DA:5B:01:0C:90:2A:84:27:FE:89:54:20:89:03:5C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E534BA65A1030B8B7E8E4
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf083ea-1322-3adc-94d4-cf7cd3d19146.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:53:4b:a6:5a:10:30:b8:b7:e8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3371664e-6f3f-4e0f-83ff-e249ffd108f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:dc:31:40:9e:5d:2c:f0:13:cf:6f:63:b0:
                    45:52:7e:2e:9e:9a:bc:fa:1f:b7:f5:4f:54:09:47:
                    c7:f7:44:d2:b0:40:d7:e3:84:e6:c8:41:3a:df:28:
                    5d:74:27:9a:19:d0:02:5f:9b:12:8e:e7:b0:dc:a3:
                    e1:ea:7c:ad:bd:0e:7d:0c:6a:87:f4:3e:9c:d7:35:
                    12:c4:22:78:05:ef:40:58:ff:ec:34:41:60:46:b8:
                    90:33:20:94:fb:c5:c2:41:12:a1:22:d2:bd:83:b4:
                    7e:ba:af:ad:a3:44:e7:83:26:d1:9f:e5:d6:95:47:
                    85:58:9f:9e:a2:09:6a:d5:9c:ee:26:92:32:77:a2:
                    cb:f9:b0:5f:ab:d3:e3:9b:d6:ac:4d:09:74:d7:85:
                    72:c2:0a:73:5f:4a:e9:f3:f4:3b:9f:72:82:8b:0e:
                    17:8c:9d:67:21:48:10:6e:14:6d:f4:5f:4e:0e:7e:
                    a6:b5:ab:11:99:60:f1:20:97:2b:9d:4e:e5:27:33:
                    8b:23:46:cf:ec:69:c3:9e:54:ee:9f:9d:02:82:5e:
                    19:72:0c:ad:23:ee:2f:cc:d7:09:9c:a7:6c:29:f2:
                    df:30:7b:21:33:98:6f:0f:c8:f9:bb:44:21:c1:74:
                    04:5c:db:6f:49:1d:0d:a6:b9:27:46:49:0c:4c:26:
                    fa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A5:C8:25:E8:DA:5B:01:0C:90:2A:84:27:FE:89:54:20:89:03:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf083ea-1322-3adc-94d4-cf7cd3d19146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:47:a8:25:d1:89:d4:dc:7f:ba:eb:b4:f7:9e:c1:4b:b9:7d:
         cb:f4:8f:9a:13:68:e6:04:11:c2:6c:9d:e9:67:7b:a5:23:85:
         4a:21:10:db:8c:0c:cc:0b:b7:19:da:f2:e6:2b:5d:94:d1:5d:
         16:33:c8:fa:9c:77:9b:5d:c1:d6:94:b0:dd:25:5f:d3:d5:36:
         0b:90:07:10:c7:cc:39:f9:db:2f:53:b0:90:25:cd:8b:c5:b4:
         f5:f3:bb:eb:5d:92:e0:87:f3:6c:f9:de:49:ca:fd:21:ad:6f:
         fc:b6:9d:0f:b2:41:33:34:3f:16:66:ce:a2:7e:9c:50:b6:8f:
         bf:f5:37:5c:e9:a8:d6:d9:71:c5:2d:1b:7a:89:5a:1b:0f:5f:
         1b:d8:00:1b:0c:ca:bd:e0:2d:18:a9:61:a2:39:a8:95:e4:dd:
         79:d1:85:8a:f6:f1:88:74:bc:fd:38:fb:d8:88:17:bc:f7:a4:
         de:39:88:03:50:09:c7:4c:51:e4:e8:78:28:e0:f2:b0:85:3e:
         30:b2:12:d7:b4:3a:6a:b5:d7:ed:64:ef:21:a0:37:53:29:b0:
         de:2a:3d:22:59:0b:ed:2f:54:ae:ad:95:c8:82:3d:67:2c:96:
         a2:c6:a0:23:ee:3b:35:a5:96:da:32:30:0d:ab:48:d4:ba:b7:
         3f:de:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:33 2024 by rpki-client on console-ams.rpki-client.org