Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4304c04e-d437-39de-8fb0-266720cd7a19.roa
File:                     4304c04e-d437-39de-8fb0-266720cd7a19.roa (raw, json)
Hash identifier:          r3LttfcC5w3QCjnPWgagCloQVW6n+XMC1Qfs/5VZsGI=
Subject key identifier:   EE:2D:CD:8E:DB:1C:48:AA:D1:D2:95:3A:6F:EC:C4:AA:5F:22:1D:4B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B24BC86896E44A9C466A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4304c04e-d437-39de-8fb0-266720cd7a19.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.63.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:24:bc:86:89:6e:44:a9:c4:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4af5aa57-e9d1-4be8-90ec-b9a29283a5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:8d:8b:31:36:a8:67:e0:c1:76:6a:c5:ad:
                    51:cb:12:3c:5a:be:bc:46:63:cb:a5:dc:d0:65:92:
                    bd:45:56:c0:77:80:9f:e4:fd:2f:2f:55:5a:31:fc:
                    6b:3e:40:f6:77:7e:86:6c:2d:be:3d:78:0a:a4:12:
                    32:2b:60:0d:ee:ab:88:e4:7c:75:c7:01:1b:3a:fc:
                    27:a6:31:3d:b5:61:f4:8f:d7:3e:32:44:aa:ca:6e:
                    fa:e3:cb:49:6c:fc:f0:1a:f9:5d:3a:0e:bf:c0:06:
                    8a:03:c2:6b:b5:44:c0:f9:90:a2:25:3c:76:2d:a7:
                    b9:c4:22:a3:ee:c8:e9:7a:55:02:95:27:1f:6f:a6:
                    a8:44:d5:b7:54:6d:06:4b:90:c6:fb:c3:db:82:6c:
                    8f:9d:34:e9:e5:bf:3e:6e:89:63:bc:a7:b5:18:79:
                    35:9d:22:b9:95:d2:0d:b6:c9:03:5e:6c:34:b1:88:
                    e9:47:94:0e:eb:37:21:55:a0:04:5c:c1:ba:44:f4:
                    17:cf:f2:89:80:b3:69:c1:c5:8d:60:1c:ed:0b:b7:
                    f1:8f:f2:3d:54:97:25:c1:b2:f4:e4:e7:64:e7:18:
                    7a:f3:ba:b6:41:79:f9:ff:ba:71:16:f5:81:40:eb:
                    9c:42:9a:d4:2d:7c:2c:52:e5:8e:26:13:fc:02:79:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:CD:8E:DB:1C:48:AA:D1:D2:95:3A:6F:EC:C4:AA:5F:22:1D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4304c04e-d437-39de-8fb0-266720cd7a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:e5:87:e5:ad:e0:55:2e:42:ae:d7:f1:9f:b3:90:11:30:
         7b:a1:f7:54:92:f6:d9:8f:1c:44:79:de:fa:f5:38:47:a9:d2:
         5d:e1:e1:f2:bc:35:68:6a:1b:32:89:71:af:4e:3b:62:c1:cc:
         c5:84:a2:59:8f:4e:09:ea:56:bb:08:10:ad:8d:dd:bd:d5:80:
         7e:88:2f:4a:bc:87:3c:45:4c:00:58:6c:fd:b8:58:df:25:31:
         4c:d4:cc:ce:f6:ae:8b:82:3a:c1:bd:b2:bc:f5:1b:46:f5:4e:
         bc:87:e8:f7:6f:0f:1d:c0:45:3e:9d:16:f0:d4:94:7b:b3:cc:
         ec:df:38:6b:07:a9:b3:74:f9:46:af:55:09:39:58:97:4e:25:
         b3:90:7d:d4:7f:65:96:05:09:12:5e:7e:39:a4:27:1c:c7:cf:
         de:ea:a4:03:5b:d6:a1:db:0c:d3:f5:40:fd:83:d6:d9:33:e4:
         a2:13:00:ee:4a:ae:6d:da:a4:aa:ff:2b:7d:67:7e:0f:df:38:
         59:8e:d3:84:af:2a:dd:84:09:f8:9b:a3:26:5a:f4:8d:2d:54:
         56:f2:d2:13:02:05:b0:92:7d:e8:95:15:d0:d1:53:3d:a3:26:
         c3:08:07:af:b9:86:ff:18:a0:10:0e:f0:03:f9:f3:d3:14:a3:
         7f:be:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:38 2024 by rpki-client on console-ams.rpki-client.org