Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa
File:                     69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa (raw, json)
Hash identifier:          4xICOU7eEECNlNjpr75GM/bah2BCClhDcUnodUvaxqg=
Subject key identifier:   14:9E:D1:21:D0:3C:66:BB:DC:13:F1:80:87:E2:2F:EA:2C:2B:44:50
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4CFCBB1CB03FC21A3A10
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:4c:fc:bb:1c:b0:3f:c2:1a:3a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=762988b8-6974-4741-94eb-699eae1be6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:fa:a9:a1:54:41:35:25:57:2a:5b:00:69:
                    e5:1f:a8:70:a3:80:b6:c1:96:13:04:94:52:cd:43:
                    61:bc:20:3f:89:f0:50:2c:df:1b:33:41:86:5a:75:
                    f3:7f:00:4e:34:bb:00:d7:6f:9f:81:e2:72:b2:62:
                    17:88:af:53:ae:21:f2:ff:45:46:58:d9:c3:94:bd:
                    20:b1:b2:2c:51:a7:c4:46:68:e9:43:3c:34:bd:02:
                    38:4d:67:49:51:ad:b3:0d:59:e5:4e:43:4b:17:f6:
                    aa:4a:7d:39:3e:ec:7e:63:7f:0e:18:92:58:6d:c3:
                    22:e2:80:38:2f:2c:82:a2:fb:32:42:14:87:06:ea:
                    03:9d:32:28:d5:fd:34:36:af:7a:70:7d:f1:a8:df:
                    bc:e2:f0:73:54:1c:30:db:3a:6e:76:8e:03:13:58:
                    de:ac:b7:e8:09:0f:d4:24:56:37:d9:b6:0a:99:c1:
                    26:61:f6:2f:d7:d9:74:43:02:45:c5:2c:80:0d:3d:
                    3c:c8:f5:1f:37:58:7d:30:3a:9c:5c:6b:25:53:bd:
                    36:b9:96:fc:53:27:25:d6:1a:90:26:be:56:e0:9a:
                    e4:88:77:f7:f0:60:8b:4b:89:79:ff:97:78:6e:eb:
                    86:0b:7c:b4:b2:cb:9e:cf:de:d3:cc:e8:3e:cc:ab:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9E:D1:21:D0:3C:66:BB:DC:13:F1:80:87:E2:2F:EA:2C:2B:44:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:30:dc:f8:49:cf:79:06:60:1a:bc:cd:7c:0d:11:2e:82:9f:
         41:ef:e2:2c:00:f8:6f:fd:ca:88:db:d4:ee:63:c8:8f:08:22:
         08:e4:b8:9d:5e:aa:6a:4b:32:25:17:23:20:b0:1c:1c:7d:62:
         95:f3:65:22:8c:34:7f:4d:64:67:25:ac:ea:c7:9a:c8:84:88:
         dd:ce:eb:7e:dc:65:a0:85:28:53:59:7e:99:af:0c:2a:37:8d:
         d4:f4:f9:3f:ff:d0:60:87:a8:dc:6c:3b:64:db:7d:fb:61:40:
         46:0a:77:d0:26:f9:07:c6:eb:24:1b:70:75:63:c2:61:e6:cc:
         48:07:7c:95:33:f0:fd:75:a2:9c:8a:aa:24:91:96:4f:21:38:
         ee:67:7b:36:d7:11:56:e6:b7:50:e4:03:82:ee:db:da:a6:c7:
         a5:e6:86:f5:3e:57:b4:be:86:5c:f7:72:a5:88:5a:64:dd:e8:
         50:e5:88:fd:1c:ee:44:20:3c:1a:3d:05:ab:6e:59:81:2b:51:
         21:4c:d6:29:4e:c0:bf:47:a3:26:ba:ae:99:1e:04:bc:ce:e6:
         1c:ae:09:54:e9:b2:d6:ed:00:f1:89:e8:3f:74:f7:7e:ba:c7:
         95:2e:db:f4:31:13:92:6b:01:18:0b:9d:07:36:ee:9e:b8:87:
         19:97:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:38 2024 by rpki-client on console-ams.rpki-client.org