Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74588545-fb2a-3a53-94a9-bbd40d9cddac.roa
File:                     74588545-fb2a-3a53-94a9-bbd40d9cddac.roa (raw, json)
Hash identifier:          CLaIY2/kf+UKI8fwvNPFjvMsFOshtH2kcqlG4xyMRjA=
Subject key identifier:   F1:8B:DB:00:84:33:28:78:43:3E:A6:8B:31:6D:F6:AB:3B:77:DE:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A8D01E64D1AFB3E1A7220
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74588545-fb2a-3a53-94a9-bbd40d9cddac.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.62.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:8d:01:e6:4d:1a:fb:3e:1a:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=004c94e1-2407-4aa3-826c-728b45a93ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:90:ad:70:16:d7:9e:b9:ca:f0:94:a4:4f:
                    dc:cd:6e:ab:f3:83:f1:33:2d:42:32:78:03:fb:dc:
                    44:d2:e4:12:f2:1d:4b:b3:47:d7:97:00:6b:6c:be:
                    84:d1:dc:0a:74:eb:b7:01:31:6c:02:33:86:c2:fc:
                    75:57:e6:2a:e4:ff:fc:87:29:53:57:19:52:17:ba:
                    d9:cd:3f:fd:23:5e:aa:89:37:f3:56:e5:88:82:67:
                    e7:f7:f3:22:72:1d:be:67:59:98:72:b0:26:d9:68:
                    5d:bf:17:ae:45:8c:bf:76:33:af:eb:98:81:06:bb:
                    3c:02:03:94:1b:8e:bd:a3:c4:d1:2f:b9:0e:d4:75:
                    e1:68:2d:2a:13:4c:5c:ea:ff:c3:53:f5:8f:76:02:
                    ab:22:ea:33:8a:7f:c5:7e:d6:34:95:2b:f5:38:18:
                    0b:97:f6:2e:91:88:ab:ca:97:82:12:36:f5:41:57:
                    34:87:f2:1d:91:e5:8a:4c:8e:d0:e9:b2:89:1c:b3:
                    e1:2e:8f:3b:f5:e6:93:8a:d9:83:61:78:08:8b:1a:
                    6c:72:08:be:8a:c4:e3:06:93:e8:09:2a:f1:b5:30:
                    0e:77:48:ff:85:ea:e9:0f:46:87:fb:88:56:73:e5:
                    86:0b:2d:99:49:fc:38:f2:27:a4:e0:7b:4f:f2:c6:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:DB:00:84:33:28:78:43:3E:A6:8B:31:6D:F6:AB:3B:77:DE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74588545-fb2a-3a53-94a9-bbd40d9cddac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:77:e7:e1:30:2d:d2:19:c0:e8:92:6c:6d:b4:69:1b:08:a6:
         19:cc:64:78:a0:9d:40:b2:c0:8b:7e:94:58:06:79:f4:c2:94:
         61:11:72:b7:4b:bc:98:d2:e9:e8:71:5f:9b:f5:a7:c9:01:a9:
         39:6c:42:39:0e:f1:d8:ed:c7:02:ef:1e:f6:9f:92:c0:18:ab:
         ac:5c:46:c2:ce:10:2c:eb:27:7b:41:38:6c:6b:2c:bf:2d:51:
         86:18:a1:17:ec:38:1b:e1:41:8b:57:51:dd:73:a7:b7:b6:8c:
         2e:4a:e6:43:f0:ac:60:b5:a4:5e:fa:97:b3:ff:0e:0b:87:57:
         2b:40:03:d5:a4:38:49:87:0f:72:10:c6:ad:5b:3f:b1:e2:6c:
         75:b8:d0:9c:6d:69:9a:39:1a:75:06:0f:e2:5b:83:78:23:f5:
         7c:f2:74:6c:ec:ec:50:34:aa:49:d4:31:6d:94:c3:24:de:50:
         5c:29:3c:32:c6:b0:e2:31:10:60:36:fa:16:2d:a2:e1:0d:8f:
         12:cd:df:fc:a2:fa:c8:2c:52:82:b9:4b:02:7f:e6:b4:41:92:
         c5:31:1f:07:23:3b:83:6a:dc:1e:9c:33:0c:1a:99:50:fb:77:
         35:63:4c:48:6f:b5:76:02:a6:5a:09:4d:70:95:15:29:ad:ab:
         bd:6b:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:46 2024 by rpki-client on console-fra.rpki-client.org