Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55020afe-5efd-3f84-b441-282744946c11.roa
File:                     55020afe-5efd-3f84-b441-282744946c11.roa (raw, json)
Hash identifier:          bGIbdHaJzIFXREZr2wPNZ71Z9sL5r1VeqKFgCrR+YJc=
Subject key identifier:   92:68:96:C4:C4:AB:2E:B9:25:A3:68:E9:A6:E1:C6:EB:F1:9E:42:44
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A88D2342D17C1FF9C3D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55020afe-5efd-3f84-b441-282744946c11.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:88:d2:34:2d:17:c1:ff:9c:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=f75c28b0-bb35-467f-b2f4-6060a6b62a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7a:64:85:59:eb:bf:74:74:7f:83:7f:cd:e2:
                    ed:8c:1d:96:74:8f:1e:b7:5b:27:52:26:83:67:30:
                    1a:4c:e2:eb:26:16:7a:9b:b3:a7:ba:e5:cb:4f:39:
                    46:81:28:43:8b:da:60:91:0c:d7:29:43:4b:00:4f:
                    c1:26:07:2b:62:fa:48:b1:c5:ff:2f:c8:95:62:8a:
                    06:c9:ab:ee:d9:85:87:db:d7:37:64:c1:1c:42:96:
                    59:da:5f:f7:25:7f:14:f7:02:35:b5:19:ba:35:ce:
                    0a:04:e0:84:66:60:8b:67:aa:02:51:40:4c:2b:3b:
                    2e:a8:8d:45:c3:9c:ee:d3:06:ad:0b:35:b8:6d:37:
                    f0:6f:3b:00:c2:81:d4:4d:f0:2f:4a:00:99:81:18:
                    9d:f2:55:bb:c8:fc:04:35:a1:b4:de:ad:8c:74:fc:
                    8b:94:7d:6f:b3:9f:f3:56:66:d1:f1:59:e6:b3:4a:
                    36:a5:6a:18:54:41:c7:ba:c6:32:77:8d:2d:ee:1f:
                    9f:06:61:06:3f:f8:5d:95:c7:59:89:b5:50:63:37:
                    5a:ba:f5:dd:a0:1d:cd:7c:6b:ca:1b:6d:92:86:4b:
                    62:bf:90:d5:19:1a:78:10:92:c3:e2:d0:2a:05:b1:
                    a8:0e:ff:d6:8c:64:27:ef:d5:3e:1d:26:c9:73:04:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:68:96:C4:C4:AB:2E:B9:25:A3:68:E9:A6:E1:C6:EB:F1:9E:42:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55020afe-5efd-3f84-b441-282744946c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:87:a9:3a:59:92:20:6e:4e:cb:91:11:fe:f8:58:58:cc:ac:
         72:22:98:4a:aa:05:6a:3f:63:29:3e:b0:db:3c:2a:cc:4b:26:
         30:e8:5d:80:41:10:c6:af:1b:d2:ad:0c:a9:5a:be:a6:cc:6d:
         28:68:14:10:ec:5d:12:34:62:89:b7:51:04:7a:e6:6c:62:ae:
         89:0f:ea:b4:c2:da:9d:23:71:0d:f8:fe:36:c6:e0:3f:63:7b:
         e9:71:c6:69:6c:43:29:2a:63:1f:b4:72:7f:81:2e:0c:c0:c6:
         b8:8b:b8:ea:87:3c:c1:50:cc:a0:54:f0:2f:6b:00:6a:3a:37:
         e6:46:3c:28:5e:4f:a4:20:00:d4:6b:1e:75:bd:fa:3b:c4:61:
         e4:45:1a:97:34:65:8a:54:7c:c6:be:30:3d:42:b8:b8:21:08:
         ba:be:75:ab:5b:f7:70:3c:78:5c:28:99:ad:3b:a7:4e:32:b9:
         e0:9b:a8:f0:45:16:0c:e2:db:7a:b2:e5:8e:ae:f8:89:45:40:
         56:a0:bd:2d:fd:5a:5f:70:1b:df:fa:84:2e:e7:84:53:00:ee:
         7f:d8:b4:7d:b5:cb:60:82:1e:4a:31:ef:d4:ce:76:1b:0c:75:
         b0:ff:e3:8d:10:42:8e:9a:ba:c0:88:7e:89:33:be:6f:ec:7e:
         93:f4:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:33 2024 by rpki-client on console-fra.rpki-client.org