Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/634d5589-0fca-3c0a-ab8e-9c75b408a534.roa
File:                     634d5589-0fca-3c0a-ab8e-9c75b408a534.roa (raw, json)
Hash identifier:          +5qvPInhleaJ23CQNgTYO7vR31RncrbIJyctCUu3NF0=
Subject key identifier:   A9:56:64:B1:48:32:FF:F3:8B:DD:EB:A5:6D:17:FB:23:93:F8:8D:8F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD116FC7F144B3542BE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/634d5589-0fca-3c0a-ab8e-9c75b408a534.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d1:16:fc:7f:14:4b:35:42:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c24f1b40-edc9-45c1-b863-65650eaa0fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:b8:b2:fd:11:55:77:23:c0:16:d9:e4:78:
                    23:53:11:48:90:6a:eb:db:f2:84:0d:54:16:01:35:
                    4d:b6:16:3a:ee:7a:6f:b0:b3:14:c4:4c:1f:f3:80:
                    b1:25:8b:8b:59:4a:8a:e8:1c:ec:04:e2:7c:ae:bb:
                    be:c9:3f:7d:ea:1b:7f:e4:87:fa:19:0d:18:0e:2a:
                    3f:4c:bc:e7:91:24:75:03:34:3e:06:68:d0:4f:c3:
                    71:69:49:21:36:73:81:31:df:a0:ae:75:6c:9f:83:
                    b9:ac:b6:ae:88:e3:e8:bd:0d:21:1f:b0:b9:dc:08:
                    1d:08:7f:24:49:55:ea:24:80:e6:69:32:43:a5:ed:
                    86:5b:79:7c:49:99:71:b2:f3:43:49:71:aa:40:e0:
                    c9:ad:31:e6:0f:9d:b3:a8:19:ba:2c:46:87:ce:3c:
                    6f:16:d6:50:7a:cd:ef:41:9a:86:1f:72:58:23:11:
                    1a:8e:21:19:b0:a6:32:1b:c4:56:7d:c0:93:3d:dd:
                    63:64:52:97:29:f7:bd:67:fe:00:df:de:83:9a:00:
                    9e:de:bb:ec:ea:b9:30:f5:74:1e:82:c9:93:16:d6:
                    40:51:e0:d7:e3:a8:20:d5:71:01:b8:22:e1:28:c5:
                    5c:ab:d4:8c:7c:5d:dc:e7:07:19:82:1a:3a:8d:65:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:56:64:B1:48:32:FF:F3:8B:DD:EB:A5:6D:17:FB:23:93:F8:8D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/634d5589-0fca-3c0a-ab8e-9c75b408a534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:cd:f3:f2:be:37:f6:cb:a6:5d:7e:75:fa:fb:0f:6a:4c:
         67:f6:34:bc:49:de:6f:3c:75:63:5f:6d:bf:3e:67:fa:41:9c:
         09:6a:a4:b4:b0:fb:5d:2b:af:91:f7:ec:0c:aa:56:14:66:b4:
         f2:d3:e7:00:e9:ea:c2:35:a5:96:89:c1:cf:95:7f:36:ea:b6:
         2b:a4:1f:07:3c:19:b4:eb:0d:7d:68:d4:63:ae:ae:76:c5:b8:
         ea:9f:7c:7c:e3:89:73:d6:82:0e:67:08:a8:9e:69:75:77:79:
         e2:d7:92:00:06:66:5d:eb:af:dd:56:ec:40:b4:fd:59:02:eb:
         25:b2:77:ec:eb:8f:68:a8:c0:d8:03:0a:c8:ad:5e:82:df:a6:
         ce:82:82:2c:16:81:ae:b9:1f:ed:d0:8b:e5:58:ff:5e:22:3e:
         35:a2:07:87:e5:dd:e7:06:99:f5:92:e4:7c:81:f4:33:30:83:
         e3:00:41:85:b1:2c:59:91:99:5b:ad:66:48:7c:46:d3:5c:03:
         da:38:ef:0f:cf:c4:d8:c4:4b:52:9a:b9:92:c4:8a:27:91:3d:
         ff:f0:53:56:b3:aa:32:67:db:0b:0d:a6:cd:ee:0f:25:a1:ca:
         57:9d:2f:46:81:9c:52:f5:2e:52:b0:dc:da:71:19:3b:5c:ee:
         72:86:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:36 2024 by rpki-client on console-ams.rpki-client.org