Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa
File:                     35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa (raw, json)
Hash identifier:          X9lyDWv4B8pz/q/3AdkEnuJnGuoISENgfcn++qRMyeI=
Subject key identifier:   8B:03:E2:FE:24:A4:40:62:CB:2D:D7:1C:52:2D:1E:05:DF:A8:22:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E5282069D12CDCE341280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:52:82:06:9d:12:cd:ce:34:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=50fb9b8b-c203-4e59-a477-94f44e27312c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:d1:f6:f3:3b:52:32:d7:b5:c5:23:8c:ab:
                    ca:9b:73:14:bc:58:80:2f:0e:a9:fb:74:0a:c7:76:
                    c0:91:d7:a2:e0:eb:df:ae:2b:f4:ef:41:7a:29:00:
                    dc:77:4c:0d:16:38:70:84:cc:63:a1:20:97:48:20:
                    68:66:79:ee:ff:53:f6:b3:33:3b:15:87:6f:8a:fd:
                    53:48:fe:0e:6a:b2:37:c6:55:d2:d3:35:6b:1d:e2:
                    69:ec:f4:92:22:ea:ee:75:12:cc:d3:a7:ea:64:99:
                    d1:3f:f0:7f:f3:89:ba:94:d6:f2:1f:40:96:90:36:
                    b5:a3:a9:6f:e3:94:e2:f4:a5:67:27:9c:ce:51:ba:
                    fe:93:68:a0:fa:25:aa:81:4f:f8:f7:c7:fb:3e:b6:
                    5b:cb:3e:49:92:49:ac:13:78:a3:e1:88:fb:c5:df:
                    90:f3:03:e7:00:13:79:23:b7:ba:de:2a:1e:25:c0:
                    86:a1:5c:e0:7e:83:8c:7e:15:08:6d:1d:4e:70:3b:
                    bc:75:d4:15:79:c4:39:b0:78:31:32:28:ab:06:0a:
                    72:ba:fc:eb:44:6e:ed:f0:9d:e4:9e:73:15:a2:4f:
                    9c:35:e2:6e:24:75:10:56:e8:a5:fd:ba:00:cb:0f:
                    ec:b3:ba:fa:d1:6f:a3:7b:1b:a9:a6:49:9c:ec:01:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:03:E2:FE:24:A4:40:62:CB:2D:D7:1C:52:2D:1E:05:DF:A8:22:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:d0:ce:6c:07:9b:c6:5c:82:71:a1:87:65:03:d7:e2:6d:
         8d:13:06:ee:87:4c:11:74:bd:58:aa:74:d9:7f:d7:28:d8:29:
         42:4c:2d:0f:55:a4:0c:8e:ca:cd:61:da:30:82:c2:71:58:b3:
         a3:0e:a5:62:b8:e8:9d:67:c8:55:0c:b0:d0:e5:d2:b8:1f:4f:
         2e:14:b8:3a:0f:53:54:11:39:21:08:72:d6:a0:65:6c:80:35:
         24:e4:04:f4:d5:b6:d4:1b:ca:a8:36:ee:07:6c:40:cb:cf:dc:
         75:c9:f9:1f:23:5b:88:12:7c:7f:d7:bb:f1:d0:91:1a:57:06:
         98:6a:c1:1f:42:e9:0d:02:2c:71:85:b4:b8:d5:8e:28:e0:9e:
         54:9d:f3:5e:f3:02:49:8a:2c:ec:b7:81:ad:41:50:02:eb:3e:
         73:31:90:9d:37:82:78:08:6e:0f:0f:c9:f1:54:ad:f2:bb:c7:
         1e:f7:b7:74:53:de:21:fc:34:25:e6:88:82:c1:00:ed:05:24:
         7d:86:88:b1:cc:44:17:b0:7d:91:73:34:2f:9b:ac:47:b8:bd:
         34:3b:57:e4:cb:3a:1e:fe:28:82:93:e3:68:80:2d:c5:5e:26:
         a5:ac:5e:70:99:6c:e6:45:f0:41:4d:4d:2f:83:a1:30:c9:de:
         f1:ee:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:40 2024 by rpki-client on console-fra.rpki-client.org