Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43b4e130-0a0d-3247-9a5d-ffcaaea45eab.roa
File:                     43b4e130-0a0d-3247-9a5d-ffcaaea45eab.roa (raw, json)
Hash identifier:          0a3dJi+sy8IB+YNohdPJd6KvYbImNIJzcmuKqlDBvZY=
Subject key identifier:   BC:17:72:AF:16:38:B2:3F:7C:10:CE:1A:D6:EF:1C:2C:74:B5:67:6B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE59D05996FBFBA67C300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43b4e130-0a0d-3247-9a5d-ffcaaea45eab.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e5:9d:05:99:6f:bf:ba:67:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=defc955e-332e-475a-9368-953a0f48b4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:73:80:40:e4:04:30:16:82:80:a7:28:06:
                    9f:f5:62:e0:a8:40:33:7b:95:b1:cf:c8:ec:7d:03:
                    02:0f:4f:6b:4b:17:60:47:72:4f:1b:ef:aa:43:57:
                    b9:76:d8:07:08:bb:38:c3:03:93:18:76:46:c6:09:
                    b0:19:47:93:59:e6:76:0c:11:d3:7d:36:f7:a0:ff:
                    08:fa:79:0b:25:3c:9a:48:2b:b0:1c:b8:31:17:50:
                    7f:f1:d8:ed:be:70:5b:3f:db:0d:83:f5:4e:72:7a:
                    39:70:2f:fe:26:c8:ad:06:c4:cc:49:75:e7:7d:3b:
                    e1:68:0f:be:98:6c:45:8d:5e:9b:c6:4a:85:ec:92:
                    76:c3:0f:a6:54:37:a9:10:04:ae:21:9f:15:d3:58:
                    00:56:da:34:67:ab:28:e7:a3:9a:27:e4:49:04:ad:
                    94:a9:4e:24:a0:01:25:c7:20:aa:c3:be:5f:13:c9:
                    09:c9:90:87:30:5c:59:21:32:35:ef:54:68:23:56:
                    d1:15:19:9f:3f:43:c9:42:12:03:93:94:8d:16:a9:
                    e9:bd:ed:b1:95:a9:53:76:3d:35:20:bc:ff:c0:4c:
                    94:95:dc:a2:bf:4a:66:82:30:1b:bb:b0:cf:96:2c:
                    a4:a2:a1:40:4d:c0:15:ac:27:df:f3:8a:c3:1a:ed:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:72:AF:16:38:B2:3F:7C:10:CE:1A:D6:EF:1C:2C:74:B5:67:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43b4e130-0a0d-3247-9a5d-ffcaaea45eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:70:55:a9:59:fa:ed:22:a6:a4:93:33:02:43:90:d5:40:
         8d:5d:38:88:c7:bf:1b:92:b1:4e:84:41:61:6d:f6:bf:28:e7:
         65:6a:4a:ec:11:75:c3:11:a9:f3:12:ab:55:5b:53:04:45:17:
         7a:75:2b:fb:5e:4f:59:85:57:b2:66:ef:cd:0e:7f:eb:8b:8a:
         80:56:99:81:9e:ba:e9:0d:8a:a6:5e:2e:8d:2b:d5:33:7b:2e:
         fa:4d:54:ac:d3:44:f6:75:fe:83:66:7f:02:a6:5f:eb:e8:61:
         6f:19:1a:a0:06:ac:ad:6d:73:5d:7a:b9:1e:01:c1:6b:92:3f:
         67:f0:90:f1:03:0b:62:69:8e:1b:4f:e6:27:64:ce:86:35:8c:
         a7:4e:05:19:23:f5:86:e7:b8:ef:f6:46:5f:d6:61:9e:2c:a8:
         6d:c1:93:8b:bf:69:c9:47:5c:46:47:7d:75:6f:1f:56:5c:c9:
         62:da:8a:5b:29:1d:4c:28:3c:cf:e9:9c:02:b6:46:b7:2a:f3:
         fe:b0:c4:e9:c3:60:86:8e:12:49:f3:b1:0e:a6:b7:69:f8:9a:
         a1:d6:83:94:c1:76:95:a9:38:9e:64:67:a1:10:3e:da:ae:d8:
         f3:a2:3b:8c:ac:07:dc:6a:3b:20:2f:41:5a:14:7f:d4:a3:a4:
         bc:98:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org