Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72e86536-e355-31f7-8566-0c582a1f56e6.roa
File:                     72e86536-e355-31f7-8566-0c582a1f56e6.roa (raw, json)
Hash identifier:          VpJd2P+t0MX2f5AlfeRYpEsRDr+7V3V8ftUmeb+VHhw=
Subject key identifier:   B4:2E:25:D4:A0:AC:83:07:E4:C2:05:EB:84:D1:91:58:E3:26:C8:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE4480569EF4286CADC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72e86536-e355-31f7-8566-0c582a1f56e6.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e4:48:05:69:ef:42:86:ca:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ef0564c4-fe6f-4131-bc43-3fe3beff01fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:cb:c7:35:cf:75:bd:4a:61:f6:d4:f4:6c:
                    86:20:d6:d0:dd:03:0b:a7:cc:14:46:2d:5d:b3:b4:
                    97:6e:73:17:d6:42:9b:89:29:e4:81:4e:00:92:9d:
                    f0:5f:97:2e:f9:a6:e6:b8:69:cb:7b:b4:e4:52:34:
                    36:9a:ae:b9:1d:b2:ee:13:2c:5a:73:10:cc:28:1a:
                    f0:09:0e:e5:86:0a:1b:79:c8:77:e5:25:7f:db:e8:
                    b8:67:ec:e8:a8:6c:b5:c4:66:8c:dc:1a:91:73:16:
                    14:37:f9:e5:11:42:92:43:26:68:6c:c1:14:e1:8b:
                    a4:b0:4a:47:34:5b:ae:30:1d:01:11:f0:88:08:61:
                    ac:e7:70:47:16:71:c8:14:2a:b0:c2:a8:6b:d1:8b:
                    24:ff:e7:bb:94:d1:95:70:45:79:d8:dc:51:a1:14:
                    e3:bf:a3:a5:68:16:f9:b0:00:dd:89:d8:6b:e2:54:
                    27:59:37:1b:f9:84:c3:00:92:5e:39:94:85:54:74:
                    ec:9a:53:e1:45:92:b3:8a:91:f6:95:3d:7d:88:db:
                    48:52:79:28:ed:47:05:b4:61:eb:9a:ca:5a:f4:e8:
                    7c:1a:df:a2:f1:cb:20:73:87:92:18:dd:fa:f1:25:
                    28:f4:47:92:ba:f1:29:0d:44:76:4b:b0:49:1b:93:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:25:D4:A0:AC:83:07:E4:C2:05:EB:84:D1:91:58:E3:26:C8:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72e86536-e355-31f7-8566-0c582a1f56e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:38:d2:0a:83:dd:8f:cf:e4:0a:3f:b6:16:bf:50:16:10:
         31:9e:91:3d:b9:d3:f3:e7:12:6d:26:5f:89:30:b1:fb:ce:f2:
         e1:4e:d7:96:72:7c:43:60:53:76:2b:ad:dd:87:18:d6:b8:dd:
         f4:dc:69:f7:85:04:7f:9f:8a:6a:b8:f2:d9:4b:ef:39:fa:5e:
         d2:ed:84:f2:c2:af:23:37:75:b2:13:26:13:f0:92:92:09:84:
         1e:2c:7e:ec:03:a4:22:13:f9:4d:93:b9:31:53:cf:f3:18:34:
         27:7a:7a:36:b9:54:f4:4f:04:00:ad:91:c5:d3:ed:27:09:73:
         cf:b3:59:af:b3:d1:1c:67:b9:58:94:57:d1:f8:fb:7f:e4:93:
         43:f7:6a:b6:ed:b2:0b:2e:bd:ec:c1:cc:74:c8:08:26:5a:8c:
         7e:39:f6:9b:c7:f4:5d:b5:6c:fd:c0:ab:9a:7f:3a:c7:28:e7:
         d9:01:24:e5:9c:ac:43:a8:4a:14:90:6e:a1:9c:02:8e:d0:f1:
         69:34:b3:c2:81:02:41:d6:93:fb:87:1e:83:94:ac:60:77:5c:
         8d:73:19:d1:8a:71:d2:51:d9:80:9e:aa:be:f8:59:46:52:54:
         8a:99:6b:f0:08:e6:61:4c:82:b0:ad:83:f5:fc:a0:96:2e:78:
         a1:c3:52:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org