Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa
File:                     5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa (raw, json)
Hash identifier:          KxAxr2FPKW0/Dkx8LxFUYcTTxzaI1reE99f2F/6Lwjs=
Subject key identifier:   7C:F7:18:AA:28:7E:C0:2B:2D:03:33:E4:D4:A3:51:89:47:CE:F0:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A801D136AA9796900DB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:80:1d:13:6a:a9:79:69:00:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=37e1273c-81ab-4b4b-8859-fe6eea54bb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:94:0e:0b:b7:4f:5b:04:39:9c:df:42:1e:
                    69:62:af:5f:b9:87:44:e8:1a:0e:75:68:bb:b6:a3:
                    e5:50:05:da:64:73:b8:8a:d4:b7:ff:b8:0d:ce:29:
                    d3:ac:d4:6b:a8:87:ac:51:e0:7e:2a:fe:6f:6a:55:
                    01:05:4f:92:39:c6:58:6c:7a:ca:ae:10:87:ce:d5:
                    bc:ff:eb:bc:65:62:ba:91:e4:86:da:6c:c2:b2:de:
                    de:85:30:56:81:95:08:0c:86:8d:11:ce:d8:8b:81:
                    4e:6d:22:8f:10:e1:de:33:f9:fe:75:54:ef:16:7a:
                    27:79:94:56:be:1a:ee:95:b5:c4:7b:cd:c3:3c:93:
                    fd:90:58:fc:13:2e:f7:f5:88:a9:f9:f9:d0:05:41:
                    3f:4c:c1:2e:7c:46:9e:e8:e3:81:34:87:36:b0:1a:
                    50:ad:8c:c6:71:e0:df:37:b9:32:62:f6:1f:f4:e7:
                    22:41:61:0e:50:dc:85:db:a0:ae:d3:a1:bb:78:3f:
                    e0:a4:40:c5:ab:bd:63:58:77:e3:dc:7e:1f:01:ae:
                    e7:a9:29:85:cd:89:d7:cf:46:d9:d0:2b:3f:d2:70:
                    2e:f5:86:ea:7c:e9:96:1a:fd:b8:a0:8d:ba:66:ba:
                    f4:09:35:45:b6:c8:e3:ff:df:b6:90:ba:aa:05:69:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:18:AA:28:7E:C0:2B:2D:03:33:E4:D4:A3:51:89:47:CE:F0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:e9:2c:76:70:cb:aa:67:b9:76:37:af:ac:fe:f4:aa:eb:
         06:ec:5e:d2:80:9a:8e:e7:54:22:9d:4f:01:8f:15:f7:68:c9:
         65:4a:17:a4:4a:38:0a:05:3c:51:a7:bd:57:04:92:ef:e4:33:
         12:6c:64:4b:cf:67:0b:2d:1d:ae:25:01:e7:c8:4d:bc:13:c1:
         4b:3a:1d:58:d5:aa:83:c0:01:7a:e4:00:1d:a3:7e:18:99:64:
         88:0b:6b:cc:6f:58:72:c6:9d:fd:fa:7e:64:64:b4:b1:6a:c6:
         a8:1a:1e:2e:17:44:9f:78:dd:cb:6a:ab:f3:18:b5:03:f8:e7:
         43:48:b5:66:72:70:70:56:72:6b:a5:2b:07:50:44:29:7f:d9:
         8f:a4:81:3b:b2:e9:61:8f:97:da:9b:c9:c1:0b:9b:03:ac:75:
         8d:7e:a3:3a:5f:fd:a5:a1:b9:be:88:be:95:b5:48:52:cd:1d:
         59:56:3c:60:c8:7a:16:35:bc:3f:76:2e:20:35:ba:df:a4:29:
         55:36:79:a2:6d:86:ee:6f:84:59:e0:35:37:70:13:6f:fb:d8:
         d0:f3:25:0f:6c:f0:ba:4f:17:8a:b3:ac:7f:b9:f8:40:72:13:
         e7:66:56:e1:77:80:49:b3:66:ce:bf:2d:e8:74:19:17:a4:65:
         5c:22:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:01:36 2024 by rpki-client on console-fra.rpki-client.org