Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa
File:                     475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa (raw, json)
Hash identifier:          Irw/p374SRpDf3ob4YIz6/TBIEAMm+82/d1y6cdT0po=
Subject key identifier:   75:49:18:64:18:FA:3A:B1:42:CE:49:EE:19:AA:C6:17:54:2E:CC:FE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCE5637CA92346813D360
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ce:56:37:ca:92:34:68:13:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=503a7ca4-76b9-4120-a6e8-18062034313d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3e:e1:db:67:19:69:09:3f:3b:88:95:0f:1b:
                    3c:9e:77:dd:a2:30:a7:b1:30:a0:c8:b0:c5:56:3d:
                    46:03:59:2a:a7:83:d4:74:06:7d:4d:94:f1:4a:98:
                    25:f1:42:82:db:22:d6:90:d0:35:b5:69:97:a0:77:
                    9c:33:55:9f:23:30:d4:5c:51:89:02:3e:e9:37:a1:
                    b8:f0:f8:64:82:7b:89:89:18:1d:6d:a4:0c:32:b8:
                    66:b7:1d:d0:91:b9:75:73:86:7e:d9:2d:44:53:37:
                    64:57:6f:45:f3:3e:f4:8c:fa:4b:39:ce:7c:b3:3c:
                    de:30:aa:ce:33:ce:7f:c6:eb:89:3b:4a:dd:59:80:
                    cc:93:47:f3:56:97:4c:f9:2a:13:ed:a5:db:a0:f3:
                    b4:b6:e7:bc:ae:2a:e2:ec:a7:c6:c4:9b:96:f7:d5:
                    fb:9a:8c:be:c9:50:de:01:32:80:77:56:d1:76:bc:
                    4f:71:e4:d8:55:e6:10:97:2c:5b:af:e8:e3:3b:db:
                    8c:f8:d2:76:c5:54:0a:dc:64:a7:9f:d0:dd:c5:9b:
                    5a:77:9a:0a:a1:66:35:ac:9e:14:27:55:e1:b1:f8:
                    5a:5f:e0:63:10:57:64:8c:d2:f7:3e:d4:2f:91:f2:
                    94:bb:f4:48:f7:4a:00:62:3e:42:81:55:e2:be:ca:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:18:64:18:FA:3A:B1:42:CE:49:EE:19:AA:C6:17:54:2E:CC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:98:bb:b2:44:d1:47:c1:43:92:fe:e2:ee:fe:72:b2:4e:
         44:b0:98:e7:dd:12:b8:02:e3:80:88:c6:77:e7:cc:d6:cd:fa:
         0e:ff:12:69:46:dd:31:a1:a8:01:71:d8:06:f0:48:46:17:a1:
         b6:57:66:b5:f5:87:81:b5:79:8f:78:4c:bf:da:cc:1e:13:af:
         78:ce:55:f4:89:2e:29:36:54:30:92:1e:4a:51:14:fb:f1:33:
         89:fb:3f:c3:f2:6b:cc:b4:f1:5a:82:c2:59:24:f6:fd:09:eb:
         99:cc:77:ad:26:bf:a2:09:30:78:eb:c6:32:5f:52:e3:26:1d:
         bd:40:28:ad:71:1d:3c:e6:98:7e:e0:81:38:fc:d8:1a:c3:4b:
         af:e5:52:6f:39:37:9f:b1:0c:df:0f:8a:bc:34:bf:6a:30:36:
         dd:12:89:90:dc:6d:9a:e3:0d:73:f4:7e:06:4b:c4:7c:55:b7:
         36:2e:88:be:81:98:6d:e9:b5:08:0c:26:e3:f0:35:62:d3:6b:
         b7:e8:91:7e:f6:94:84:d5:53:62:25:e7:a6:5a:e4:5d:e8:4e:
         74:43:b5:fb:ce:6a:74:27:de:2c:b6:59:02:6d:38:64:f4:66:
         49:52:5f:57:e4:4e:17:dd:46:b0:b6:35:fb:10:8b:a3:ce:59:
         da:a3:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:51:20 2024 by rpki-client on console-ams.rpki-client.org