Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa
File:                     4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa (raw, json)
Hash identifier:          klEAzyK9yr5S9kD6oi6wGKJN4ycoW8k4j3OHp4FkNUI=
Subject key identifier:   BF:6D:B6:27:E6:63:8F:17:0F:0C:64:83:C0:93:46:22:A9:4B:CE:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B2B19880352C36E235E60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.63.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:2b:19:88:03:52:c3:6e:23:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2c05efd1-baa0-44cf-85c0-d80d84802e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:af:5d:d7:66:18:14:9b:6e:e8:97:f5:87:
                    3f:97:7b:aa:40:31:36:bb:62:44:01:24:b2:c6:36:
                    30:86:0e:b3:0f:dd:7e:1b:e0:8c:8c:8f:9f:fb:b1:
                    97:b5:b9:4e:88:d7:92:a4:68:45:37:f5:6e:e8:de:
                    db:13:96:d1:d6:41:34:a4:b2:2a:02:c3:59:b9:f3:
                    96:6f:94:91:64:4e:ad:4f:83:dd:b3:49:5d:0c:f8:
                    79:24:92:dc:86:85:c8:3d:35:d4:e1:27:11:fb:a5:
                    26:b5:c6:3c:39:27:8c:84:1e:06:77:f8:bc:ce:cd:
                    93:4d:b7:20:a5:5a:e0:b8:05:9f:4b:ea:e8:4d:fd:
                    6b:bc:9e:64:3b:06:99:87:82:47:04:fe:ae:a4:59:
                    f4:4b:e1:ed:30:2f:99:32:84:3e:ed:02:08:1c:17:
                    63:b6:13:2b:36:7e:b3:9a:37:14:30:70:54:51:61:
                    3d:39:ef:a7:04:15:01:b2:c9:ac:9e:ad:32:c5:94:
                    0a:ec:99:8f:de:9d:0e:a1:e4:9a:61:63:ba:56:4d:
                    de:2e:73:a7:00:89:f5:60:f8:6b:89:e1:e3:a4:6c:
                    bc:c0:bb:87:c2:b8:11:82:6d:97:80:e4:35:e3:34:
                    7c:4a:07:a6:fe:bf:66:50:6d:e4:2b:59:f9:81:4e:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:B6:27:E6:63:8F:17:0F:0C:64:83:C0:93:46:22:A9:4B:CE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:67:49:fa:8d:bd:2a:07:d4:aa:89:94:4a:f6:33:34:bb:9d:
         80:a8:d2:2a:66:a0:df:56:fb:f2:24:4a:c2:a0:8a:2a:2a:58:
         5c:1a:e7:18:b8:85:15:9a:3a:a0:4a:39:3c:f4:eb:87:84:9a:
         24:30:7b:cd:6d:c7:1e:f2:66:bc:7d:6a:cf:f6:b1:87:d6:2d:
         7c:ac:f8:11:6b:0b:51:49:1a:dc:26:ab:3c:cd:3c:c4:a7:45:
         4e:0c:d9:c8:ce:b4:96:a2:56:7c:ef:6d:f0:9e:6f:53:62:54:
         55:4f:5d:de:93:df:37:01:12:75:3c:65:87:50:b2:5b:67:00:
         05:35:8d:76:2e:d1:92:6f:86:36:fc:e0:16:f8:a5:48:9b:72:
         62:9b:d6:fb:bd:5e:c5:e1:3c:10:ef:a6:db:85:8b:e0:c5:03:
         14:e9:30:cb:1e:44:1e:4a:97:a5:fc:13:c9:94:a2:c4:a8:a8:
         ba:cc:25:26:34:db:96:e9:ca:27:c1:20:24:c5:18:66:5b:a7:
         3e:16:f6:86:d3:59:28:79:cb:c1:69:b7:54:a8:49:67:98:f8:
         81:20:da:4c:07:91:ce:4c:01:ad:b3:78:51:55:17:9d:44:68:
         29:32:c2:0f:a0:13:9f:0e:1e:40:e0:f7:c6:83:87:e2:2e:b8:
         0c:6e:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:37:58 2024 by rpki-client on console-fra.rpki-client.org