Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36851a71-8bc9-3877-9e54-f17db63cb5b4.roa
File:                     36851a71-8bc9-3877-9e54-f17db63cb5b4.roa (raw, json)
Hash identifier:          4eWnVmOZTJvn7GXGmfpnzR9Vtl/K/hhAwD71ri1LRTw=
Subject key identifier:   AF:5A:A0:CE:8E:51:4A:23:84:B1:49:D6:CB:FD:75:61:69:57:26:79
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD07932CB5F5C74759BA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36851a71-8bc9-3877-9e54-f17db63cb5b4.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d0:79:32:cb:5f:5c:74:75:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9bd1bb3d-4fa5-48be-ab70-5d53301f5875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:bf:c4:bf:8d:fa:32:cc:dc:7f:e8:38:51:
                    09:5b:42:ba:dc:f0:11:01:7a:3d:ff:da:6c:3f:13:
                    16:66:a1:88:bc:65:34:ab:24:8b:b0:01:b8:c9:bb:
                    69:17:3a:bb:4c:79:c7:28:12:0f:58:5c:52:96:3d:
                    a7:c3:57:f6:6a:4d:14:54:01:8e:e0:07:7f:0d:04:
                    1e:dc:6a:5a:16:62:bc:89:7f:3d:7b:d8:b1:45:b7:
                    d9:c3:9b:5c:b0:2d:27:51:6c:08:43:d0:62:3e:24:
                    81:17:28:76:57:3b:e4:be:2d:ab:f6:82:88:b2:20:
                    c2:0b:43:5b:63:bd:0e:61:4d:c3:7a:62:c1:e0:90:
                    27:28:33:78:27:0e:cd:cb:22:a1:8d:a7:bc:ef:8c:
                    97:3d:cf:03:7e:1e:ff:87:86:8c:66:77:3f:bd:b5:
                    8d:6c:fb:b8:bb:36:78:f0:6f:24:a1:50:46:06:3d:
                    14:48:d0:42:bf:b4:bb:84:67:be:6c:9a:66:17:3d:
                    eb:82:13:60:86:bc:b1:01:94:41:8d:7a:58:1d:16:
                    f7:53:10:69:ad:c9:36:7a:90:d4:21:9b:6f:36:52:
                    e8:d1:58:08:64:16:a3:f5:83:ad:3b:d5:16:e6:c0:
                    a6:51:8c:23:73:ca:af:15:31:d0:bf:91:97:1f:6b:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5A:A0:CE:8E:51:4A:23:84:B1:49:D6:CB:FD:75:61:69:57:26:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36851a71-8bc9-3877-9e54-f17db63cb5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:55:49:4a:07:99:ce:25:57:91:86:20:85:e7:ee:fa:a9:07:
         b9:f5:81:f1:42:25:b4:7d:80:14:6c:41:fa:4d:2f:c2:f1:64:
         07:10:7a:57:10:fc:93:63:b5:cc:4f:7c:df:f4:b2:2b:5c:49:
         45:e5:85:82:ce:26:cb:2d:bd:41:78:0d:a8:c2:9d:5c:bf:26:
         c4:a4:eb:2a:66:39:a4:f2:ff:66:9b:da:50:f3:2b:cf:01:bf:
         ae:af:99:f2:21:e9:70:e9:9d:05:ff:80:a9:03:40:77:19:30:
         4e:28:f3:bb:bc:8e:5e:1e:bf:4d:f5:c0:3b:76:5c:af:01:0a:
         aa:0c:2f:00:f4:10:bf:61:66:a6:34:eb:73:57:a9:cc:d5:18:
         dc:e5:d2:71:c4:e1:d8:53:3a:38:f7:d4:4c:5e:94:c8:65:9f:
         5e:32:be:db:92:75:95:dc:0f:d4:39:79:d5:f6:37:6d:60:2a:
         24:3f:f1:73:1e:6b:cb:a5:bf:7a:82:ed:ce:42:c1:7f:8f:a1:
         29:6b:82:56:47:cd:6f:ec:d0:e9:e3:ce:83:69:da:1c:9f:5d:
         67:15:32:2c:f3:1a:7b:c7:fc:1d:c5:3c:81:01:52:3d:9e:eb:
         1f:0f:17:e9:92:ea:d3:a5:34:30:71:08:97:ae:b3:fd:8c:ae:
         82:84:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org