Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73b5439f-730f-3f25-89ea-d764c4bab90c.roa
File:                     73b5439f-730f-3f25-89ea-d764c4bab90c.roa (raw, json)
Hash identifier:          GAPFOVfNss1DHbsnl2GYsvSN982ysQ4+xSqToXbx7uY=
Subject key identifier:   A4:16:1F:4F:A3:A4:C6:30:88:A9:85:6F:46:0F:45:85:EE:7B:38:D5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A87985251368758F13E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73b5439f-730f-3f25-89ea-d764c4bab90c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:87:98:52:51:36:87:58:f1:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=aaf43aee-9b5a-4969-8fa9-409399bbb4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:85:2e:e3:6c:9b:af:93:7f:c8:a4:6d:3b:
                    b4:65:fc:48:5c:74:dd:e2:58:ee:82:4a:d7:d6:7a:
                    5d:73:6d:6e:04:0f:b0:ea:d6:14:db:e9:e3:24:89:
                    7d:88:99:c7:db:75:a5:6a:4f:d8:05:11:a2:8b:41:
                    b3:fa:48:f2:dd:43:56:a5:ad:b1:b6:58:13:ed:09:
                    a4:12:7b:43:0e:6f:bb:dd:60:fd:62:ad:87:2a:8e:
                    11:38:71:f6:73:fe:42:49:36:4f:a3:50:a8:47:21:
                    b3:ba:96:61:a7:1a:cb:37:6e:24:1c:d2:80:22:12:
                    19:73:97:ed:e3:d2:76:34:89:dc:85:55:65:aa:c4:
                    b2:32:d5:9f:e4:18:d8:9a:b6:e2:21:4a:38:a1:bb:
                    19:87:06:b5:d3:88:b3:a3:26:f6:a9:a0:8a:03:21:
                    87:bb:9f:be:d0:e6:31:26:b5:ea:95:1a:3b:98:c6:
                    dd:2a:90:04:90:8e:56:1d:fe:fb:d4:a9:d7:0a:87:
                    37:05:b7:9c:84:cf:19:cb:b0:8a:6e:f4:2e:ab:98:
                    88:bd:8e:87:e5:9a:41:09:d7:65:9e:89:f2:95:9b:
                    9d:18:7b:a0:e4:f4:8a:bd:ad:f9:10:5d:3f:3a:9e:
                    dd:c4:34:d7:bf:03:c8:18:b3:9f:d6:51:54:89:58:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:1F:4F:A3:A4:C6:30:88:A9:85:6F:46:0F:45:85:EE:7B:38:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73b5439f-730f-3f25-89ea-d764c4bab90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:8e:d6:a4:87:ce:e0:17:ec:5f:c6:2b:c6:f0:96:7e:d8:
         49:dc:9a:0e:c6:1e:bb:61:42:fb:6b:1b:6b:f0:11:bc:11:92:
         99:91:cf:8a:a5:52:da:ab:bb:1d:53:f5:70:39:cb:7c:00:21:
         17:d5:03:b6:7b:f7:73:bb:8f:57:1f:5a:c6:5c:4c:cc:9d:53:
         b5:fe:4a:51:a2:19:73:27:db:ea:2d:f9:f2:75:66:16:b5:6d:
         0a:bb:43:5e:30:08:43:75:8b:58:ac:31:e9:9e:16:77:a2:6f:
         fe:d7:8f:03:8f:cd:b5:80:cc:37:c8:99:d2:19:0b:66:73:6a:
         7f:09:92:a8:44:60:5d:df:94:52:9b:cf:b3:f1:e1:96:b3:7b:
         48:0b:86:7d:23:1b:71:71:ba:6d:46:c1:de:36:4b:41:3f:40:
         05:d9:55:5a:6b:c4:f8:88:0d:f2:f3:6e:74:e6:34:2f:c2:cc:
         51:f7:4a:76:39:7f:58:5b:e3:28:75:e3:4c:b7:a2:97:a9:ee:
         1d:5a:ff:2c:43:e0:e3:ce:6e:6d:1e:fb:b1:a6:5f:9c:74:28:
         03:72:99:20:24:80:bd:fe:73:65:1a:f3:f6:fe:d7:07:0b:50:
         cf:2c:4c:bf:fd:90:58:c2:49:51:9e:c5:65:f0:6f:54:97:bb:
         9f:86:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:59 2024 by rpki-client on console-ams.rpki-client.org