Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6859f95f-9573-3ec7-a762-bacf9b4db8b1.roa
File:                     6859f95f-9573-3ec7-a762-bacf9b4db8b1.roa (raw, json)
Hash identifier:          7VTpVzLXWjKVdGByPbgpINmMfDBD62srJ1SUVZ1V37Q=
Subject key identifier:   CB:C9:C2:D1:69:D1:A4:E6:17:D2:21:BD:B2:02:7C:84:9F:0A:3A:BD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD2F267B8A27B0CD14080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6859f95f-9573-3ec7-a762-bacf9b4db8b1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d2:f2:67:b8:a2:7b:0c:d1:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=83449ad9-235e-4e99-b275-73057cf82299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:03:b5:45:55:90:6d:08:5a:a1:d3:03:a9:
                    2a:b6:f8:aa:93:7a:40:3c:df:ef:09:be:0f:56:e8:
                    58:86:e9:63:33:21:00:89:46:db:84:fa:7f:97:08:
                    c4:d9:ab:b7:1b:1e:16:8d:2b:05:9f:03:fb:df:49:
                    3f:5a:55:ac:a0:62:96:ad:57:64:57:56:67:79:19:
                    48:3a:28:b3:67:c6:e1:e3:33:2a:6e:ce:c9:81:0a:
                    4c:43:16:5c:61:1e:56:f1:2e:82:f3:49:cd:96:39:
                    a7:c2:bd:f2:14:81:f9:45:ac:b2:34:f0:ab:a4:94:
                    8f:b5:df:3a:cc:15:6a:e8:90:20:88:d2:4b:31:df:
                    cb:03:da:f5:5f:4c:53:12:2d:34:3f:66:3b:b4:8c:
                    76:05:27:a6:09:ef:1a:11:0a:4e:a3:50:da:67:cd:
                    cc:92:4f:87:2d:89:d6:88:00:f8:ba:d8:44:8f:2a:
                    12:80:f9:a3:61:c7:d2:19:82:df:16:df:a0:4c:23:
                    02:c1:e9:23:60:c7:c6:00:ba:00:25:f3:18:e9:76:
                    93:27:3f:8f:b9:d9:c7:e0:2d:f7:2b:6e:70:b1:6a:
                    ac:64:4c:b5:4d:04:b2:fc:47:fa:9c:f7:7a:45:42:
                    92:ef:1b:49:7c:66:13:3d:8a:0c:d2:83:45:d3:af:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:C2:D1:69:D1:A4:E6:17:D2:21:BD:B2:02:7C:84:9F:0A:3A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6859f95f-9573-3ec7-a762-bacf9b4db8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:a5:2e:62:6c:b4:c7:fe:d3:03:9a:98:ed:b2:b2:d2:0c:ff:
         2e:d9:69:9a:23:9c:84:0f:b3:96:db:75:22:1e:2d:da:54:a8:
         2d:46:50:89:64:ea:1b:4c:2b:b9:8f:60:40:24:c6:4f:fc:28:
         5f:3c:d7:b7:09:a0:79:93:e9:a2:a2:82:1c:b5:5f:ac:28:72:
         68:72:d2:dd:18:8e:0f:9d:4e:78:10:3a:76:85:bc:0c:0c:86:
         4f:5b:c2:0f:8a:53:7f:16:4e:80:98:f5:4b:5e:88:8e:f1:02:
         5b:bf:d3:18:6a:ec:0c:67:d1:b1:ad:fb:76:80:ce:ef:fc:bb:
         f9:50:ca:90:1f:f1:65:fd:83:1b:ed:84:94:5f:e1:91:4a:a7:
         9c:0e:5e:ee:b6:a8:38:a7:0a:9d:8c:60:23:5d:d5:00:42:10:
         f7:aa:27:f6:d6:f5:4f:00:d4:96:b0:e8:e3:f3:85:44:65:cf:
         ab:97:d0:d2:06:1b:17:b8:42:1f:ac:17:4d:17:a7:4d:d6:55:
         80:80:cc:8f:54:09:44:4f:8f:bf:ce:c9:5d:ba:f3:60:0f:56:
         66:57:d1:46:48:52:db:dd:70:80:a4:b9:f0:62:2b:7e:d2:4e:
         ee:45:9c:17:2a:46:ec:ed:c0:8b:3a:3c:0f:42:7d:13:8a:e4:
         f6:d0:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org