Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ce5b042-1812-36aa-afb9-fb479a83d522.roa
File:                     5ce5b042-1812-36aa-afb9-fb479a83d522.roa (raw, json)
Hash identifier:          Ax3bIVO7fu5lZHJ77VSoIi+/9hjVtxEDtiSQTdpyhCo=
Subject key identifier:   1B:DB:B7:4F:68:92:04:D0:8F:13:79:7D:01:3E:57:91:DB:95:51:86
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCF018BE9612C550E9280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ce5b042-1812-36aa-afb9-fb479a83d522.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:cf:01:8b:e9:61:2c:55:0e:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a19a57b7-ffa8-4846-86d8-5610a918e2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:6a:6a:eb:90:df:9f:67:48:07:f5:88:50:
                    41:2f:aa:3a:65:bb:95:de:30:60:32:b5:be:65:5b:
                    97:58:ee:86:d1:38:5d:ac:33:fc:12:17:5d:cd:e1:
                    0c:b6:32:4a:fa:c5:44:35:d6:4a:f2:a1:b9:a4:4b:
                    22:cf:1b:90:7c:98:96:3b:10:da:12:6c:de:9a:2e:
                    d9:17:fe:2a:b4:09:12:c0:fa:49:33:8c:5b:2a:4a:
                    22:35:0d:23:61:28:c6:ca:3f:79:35:ba:26:41:49:
                    f0:6e:81:ed:27:a6:17:ee:68:cb:4b:5b:4f:aa:2a:
                    24:c8:5d:5c:95:35:08:b5:0c:72:cf:b1:2e:b4:aa:
                    8d:81:fc:75:ad:2a:cb:fd:0b:41:e9:34:68:3a:0a:
                    99:07:a6:c7:20:2e:4c:c6:94:fb:fd:4e:8f:85:3b:
                    9b:8a:3b:b4:f2:d2:42:da:0c:d2:50:30:15:3e:0c:
                    6e:25:ce:75:f1:9b:d0:6a:af:8d:97:55:f9:ac:58:
                    54:49:28:96:a1:f4:2b:a4:98:9b:ca:35:62:e0:0c:
                    0a:f1:9a:f6:cd:ce:22:27:9c:81:46:b5:b0:61:7c:
                    8c:8c:ab:94:35:2b:4b:c7:73:93:fd:8a:a6:89:01:
                    8a:9d:b6:9d:2a:00:89:12:aa:14:28:fd:6d:26:2e:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:B7:4F:68:92:04:D0:8F:13:79:7D:01:3E:57:91:DB:95:51:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ce5b042-1812-36aa-afb9-fb479a83d522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:bd:40:b4:4e:b4:a0:4a:37:fc:7f:15:85:fb:7f:8d:aa:
         fa:dd:29:9f:50:26:10:58:4d:91:94:43:86:dc:87:5e:0c:ae:
         28:58:68:b3:5d:bf:76:96:69:56:5b:8a:37:24:15:c7:56:03:
         f4:0f:2b:89:47:6d:98:c6:4b:e5:1c:4b:60:4a:6a:54:6c:81:
         ba:74:4d:97:65:cf:5e:ab:7b:7e:07:ab:6c:0f:50:17:7a:df:
         0c:3c:a2:10:c3:60:5b:4a:13:32:3e:9a:08:45:48:2f:5d:e3:
         14:29:25:e9:6b:88:26:28:01:e3:16:b9:6e:71:5f:1e:19:6b:
         f7:f0:49:1e:55:99:64:27:28:9b:62:16:7c:23:38:6b:30:e6:
         c4:4a:e8:bb:69:5c:54:74:a5:27:f3:5f:d1:bf:23:14:cd:20:
         a7:7e:d2:10:c3:d2:92:61:f6:48:41:f0:87:12:4c:5d:4d:16:
         47:2f:ee:af:c7:80:40:9e:2d:53:fb:68:35:12:a0:9c:dc:c5:
         c9:0c:79:a5:7d:00:f5:db:e7:a1:84:6e:89:e3:22:ba:cd:29:
         6c:0e:93:a7:29:ac:2a:6d:8c:c5:1e:0c:4f:8b:79:b3:5e:a5:
         aa:41:e3:37:88:d4:5f:dd:3b:32:aa:20:46:2f:0b:cc:50:f1:
         50:af:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org