Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa
File:                     60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa (raw, json)
Hash identifier:          CoTFfzp6rVvcN0ctYgafLND0gtfsjndWnD9aNkSdFco=
Subject key identifier:   1C:4B:05:AE:9A:BE:A9:97:DB:AA:13:88:4A:3C:CE:D3:80:8B:68:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A8339F1015EEA99414380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:83:39:f1:01:5e:ea:99:41:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e438afa6-a1dd-4f11-a7e6-e8e074c5b6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:a2:33:30:1b:90:5d:d6:c5:0b:4a:f9:a1:
                    91:b0:b7:f5:9d:9f:57:db:19:10:61:ce:39:e8:7a:
                    42:de:8a:85:00:7f:4b:b7:6a:32:8b:14:47:3c:16:
                    75:68:4d:60:b9:18:a6:c0:f8:ae:54:b6:f8:0e:3c:
                    d1:cd:43:dc:d6:db:32:df:19:c7:a9:af:8f:02:c1:
                    e6:0b:cf:cf:59:8f:26:a3:93:ef:4a:cf:c4:49:33:
                    3e:46:ea:80:f9:81:48:0d:ac:fb:9e:4e:e5:23:dc:
                    83:b8:67:96:20:54:ca:e6:9d:2e:e2:89:93:ef:49:
                    e8:87:93:1a:79:17:2f:66:22:b3:77:ef:30:b9:52:
                    b2:2b:da:54:c3:27:8d:b5:27:6b:9b:38:42:65:9b:
                    2d:80:67:9a:3e:3d:d8:f0:67:7c:57:c1:ff:7a:83:
                    a2:d5:5f:9f:93:d7:30:b7:2d:09:20:61:b7:bd:ba:
                    50:a5:93:fc:46:08:fa:e3:99:d0:96:89:2d:11:4b:
                    04:f2:ff:86:a0:6a:c7:90:74:dc:62:c2:e9:96:02:
                    ff:66:c6:8c:b3:43:87:de:da:51:e7:b3:e0:5e:d5:
                    7e:f5:a3:29:57:87:79:3e:ed:c9:ea:ed:16:49:5c:
                    32:56:ac:7a:ac:f4:3e:a8:6a:f6:a8:a4:f4:b2:29:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4B:05:AE:9A:BE:A9:97:DB:AA:13:88:4A:3C:CE:D3:80:8B:68:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:71:72:4a:85:d4:b1:14:52:d2:df:c5:65:b5:8f:3b:c0:7f:
         25:92:e5:9a:13:41:17:2c:d2:6a:44:53:db:e9:c8:96:33:ed:
         a7:2d:2c:e7:a5:f2:09:7b:c2:db:64:ec:82:2b:87:d2:3f:ca:
         78:76:e1:64:fe:c2:0f:6c:1a:bb:b6:b6:71:f9:fa:9d:cc:70:
         dc:7a:22:6a:a2:67:e0:54:b2:5a:27:d1:e1:6e:7e:7c:c7:15:
         80:7f:02:b5:2c:e5:ce:9c:c8:14:97:4b:16:2f:ae:aa:55:99:
         f9:11:4e:b0:5a:83:a3:4b:58:73:49:11:de:d1:ae:12:09:81:
         37:2f:3d:3e:d4:4d:b4:87:9d:7f:0e:0c:9c:ab:83:6a:a8:0a:
         f9:22:8f:76:42:e2:86:00:cc:be:e0:27:49:e4:a5:9f:a0:12:
         93:40:fd:3e:71:ba:98:7e:89:75:ef:ae:ea:93:c7:8b:22:02:
         55:c7:56:60:e2:af:1b:22:2f:19:2e:b5:a3:a7:b3:55:8f:30:
         d1:21:67:e7:5e:e7:a4:ad:69:f1:e3:d0:aa:e0:9f:fa:6f:a3:
         b3:79:bf:8d:23:97:ab:c9:3d:cc:e4:f7:cd:7c:1b:6d:d9:8c:
         31:2a:b9:25:f7:58:f9:5d:b9:e7:78:0a:99:d3:87:ad:52:51:
         53:81:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:51 2024 by rpki-client on console-ams.rpki-client.org