Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/489b9232-a645-33f1-9d80-cb82b06fd380.roa
File:                     489b9232-a645-33f1-9d80-cb82b06fd380.roa (raw, json)
Hash identifier:          yFOyYgaZszNXwlV9l8nL2EljD0weBmENq9ydXpVH2Jc=
Subject key identifier:   DC:3B:36:97:DF:4E:08:84:A8:00:E3:5E:DB:BC:CC:31:40:F1:8A:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD1296120FD140CF098C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/489b9232-a645-33f1-9d80-cb82b06fd380.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d1:29:61:20:fd:14:0c:f0:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3947ace7-0f19-4ba9-9685-c1025ca6f0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:f2:d0:2f:9b:82:8a:30:bd:1c:7a:d5:33:
                    91:9e:df:24:aa:39:78:80:77:94:5d:ee:1d:a8:43:
                    ad:a3:d1:33:e5:17:8b:51:55:1c:50:61:81:27:53:
                    a5:c0:12:54:bb:b0:a3:b8:7e:6e:c2:0e:48:c7:c1:
                    b6:de:fc:f5:92:b2:32:87:76:06:94:ea:9e:2a:6b:
                    21:41:5d:bd:12:6e:d4:e2:6e:d4:ac:f2:fc:d4:b4:
                    52:fb:ac:6d:71:d5:d7:9c:75:46:5e:37:b6:e6:7a:
                    63:16:f2:7a:66:93:8f:0b:4f:24:30:92:c5:d8:4e:
                    bb:77:29:1d:30:f9:41:fd:a9:f6:4f:cd:57:df:a1:
                    81:1e:02:22:c3:bb:c5:45:d4:a8:35:fb:75:28:b2:
                    45:c5:51:42:3e:97:64:36:b5:b1:cd:47:19:7b:ec:
                    98:51:e5:ae:6c:ec:8d:51:60:80:e9:13:f1:65:a1:
                    05:a4:98:b6:4f:9b:98:d0:9a:7f:14:34:c9:30:d7:
                    46:fb:3c:51:6c:da:bb:ae:54:1b:a3:bf:88:f6:ef:
                    70:8a:78:76:d2:22:ae:ac:53:0f:67:e5:fc:84:16:
                    2c:df:d3:98:7f:05:07:fb:8c:1e:d7:4b:a5:2c:b2:
                    d6:7f:73:bf:af:f2:3a:a1:da:b5:dd:bb:3f:8c:50:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3B:36:97:DF:4E:08:84:A8:00:E3:5E:DB:BC:CC:31:40:F1:8A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/489b9232-a645-33f1-9d80-cb82b06fd380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:49:0d:da:7c:44:fa:ba:36:47:a6:42:ff:31:9f:6d:30:cc:
         46:3a:0f:d1:c7:e2:73:73:24:c4:3d:62:17:82:4e:c5:9e:88:
         f0:46:9f:b8:65:2a:30:12:a8:11:cb:b4:eb:1b:3d:a6:14:00:
         40:23:1e:8f:32:9c:cb:27:79:19:a0:c3:a2:e6:ef:e0:b9:b5:
         9f:3e:98:83:5f:8e:63:64:39:4a:d9:21:36:ec:28:0d:b6:76:
         92:32:fc:48:f1:68:90:04:6a:35:af:22:11:5d:fd:9b:9d:ae:
         89:b5:93:c5:be:f8:f9:fb:b2:9e:04:0b:03:b7:d9:60:5c:8f:
         e5:e0:63:53:9f:f2:a2:59:55:e9:a5:19:31:2a:53:d2:02:98:
         d0:f0:ad:2e:a3:a2:b3:5e:4f:cd:05:13:85:22:91:a9:05:b1:
         28:92:bb:39:92:51:6e:2c:8f:50:4c:fb:37:49:ff:61:ce:80:
         ed:78:de:6e:f2:99:3c:e2:1a:ea:cd:a6:9f:ee:9e:f7:b8:8a:
         3a:16:a5:99:b6:e2:e3:42:a9:c6:4f:45:37:c0:30:b7:55:6e:
         d0:2f:b7:fa:03:1c:6b:86:9f:4c:36:2e:77:b8:31:e4:c3:01:
         c7:85:45:ac:17:8a:31:75:c2:ce:b1:cc:d0:76:64:61:64:c6:
         06:51:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:02 2024 by rpki-client on console-ams.rpki-client.org