Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5057e038-3c57-368b-869f-09f2d465feea.roa
File:                     5057e038-3c57-368b-869f-09f2d465feea.roa (raw, json)
Hash identifier:          JfYvPbsNwblQC5ApJyr3sNM53tcXyGelUgo1TRhnYnk=
Subject key identifier:   5E:51:30:C0:44:E4:DC:BE:4A:C6:9F:47:E3:8E:85:65:31:1D:71:AD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD109F7104C360C2EB480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5057e038-3c57-368b-869f-09f2d465feea.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d1:09:f7:10:4c:36:0c:2e:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a480a4fb-6d4b-4872-832d-3d2c01716854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:d2:51:b6:75:ce:bf:2e:9f:83:77:d0:a1:
                    a5:05:0d:c1:5d:ac:dc:5d:8c:f7:96:0f:c7:fe:63:
                    40:46:ca:7a:70:5c:5d:b4:63:48:51:56:98:41:35:
                    6e:fc:c0:fb:ad:6d:42:3b:85:8a:4a:c0:8a:32:c9:
                    fa:bb:00:76:53:a2:ca:8d:43:5d:f4:c0:ad:8f:97:
                    bf:e1:98:ea:7d:b1:d9:53:77:f0:7e:1f:53:ba:b7:
                    91:cf:64:61:75:cf:4c:e6:95:2b:18:40:ce:42:9f:
                    26:c6:50:d1:59:57:dd:8f:b6:b7:cd:fc:4e:c8:e5:
                    72:5d:22:06:d4:0e:a5:76:bb:c4:19:2c:8c:3f:17:
                    40:f3:b2:2b:44:7d:64:04:44:af:6a:83:69:cb:b2:
                    2e:15:1f:88:2f:e1:8c:ec:db:d7:48:e1:d8:aa:97:
                    7f:af:36:5e:75:ce:53:d9:21:47:ff:f6:28:1b:15:
                    85:2f:9c:43:93:db:dd:e1:cc:32:93:a2:42:0d:d9:
                    fb:bd:fc:29:d2:8c:ce:03:19:fb:81:98:0f:28:27:
                    66:13:6a:0d:96:c0:e7:b0:fa:82:50:b4:a1:75:09:
                    aa:1e:db:93:3f:8d:da:21:dc:41:f4:5f:1b:be:03:
                    3c:b5:5b:fc:81:c2:77:bd:ab:5a:81:15:98:29:e9:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:30:C0:44:E4:DC:BE:4A:C6:9F:47:E3:8E:85:65:31:1D:71:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5057e038-3c57-368b-869f-09f2d465feea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:23:5f:4e:cd:56:ce:d7:d8:51:c1:6b:e4:7b:78:f2:c5:92:
         4e:e7:70:56:6a:a6:0c:18:92:80:0c:37:16:2e:8c:7b:24:c8:
         5c:9d:b2:81:4c:0a:7f:dc:d0:7a:86:59:2c:3c:81:61:41:34:
         b8:8d:b6:c1:4e:b0:76:5d:14:cf:dd:c8:df:2f:73:00:d7:18:
         a6:c1:3a:cc:47:38:7b:a5:34:e3:58:0c:a3:58:97:05:38:6c:
         14:dd:9b:eb:79:5e:b1:08:b8:9c:5c:53:5d:88:44:eb:5c:7b:
         5a:16:88:75:b9:e4:0e:6b:db:bc:f1:b4:8b:60:96:19:05:65:
         ab:cc:58:a8:40:64:29:62:76:ea:00:00:29:f8:39:c7:75:3d:
         2b:57:67:52:d7:b1:67:19:98:cd:7f:19:4d:6c:80:23:75:e0:
         12:dd:5f:9b:a3:8f:cf:16:10:01:9d:ad:68:1c:32:67:d2:f1:
         dc:32:ea:80:54:4c:30:bc:95:6c:22:69:e2:17:fd:c4:55:35:
         20:a0:24:25:e0:86:45:05:08:ec:ed:ea:69:be:87:37:df:ba:
         76:0f:97:5b:a2:d4:a6:34:0c:a8:f8:1d:1f:01:3d:58:ef:16:
         ca:bb:62:0a:64:b9:d6:04:37:13:01:b8:99:ec:3f:cf:8f:a1:
         ff:50:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:22 2024 by rpki-client on console-ams.rpki-client.org