Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77027cb0-7a90-3605-ab07-a991f4ebffce.roa
File:                     77027cb0-7a90-3605-ab07-a991f4ebffce.roa (raw, json)
Hash identifier:          jwxIRTWs0ganUuyLmThIZGkxjUNWn0YuVJ+mbK2ul7M=
Subject key identifier:   64:D5:FD:24:A1:37:1E:E9:00:73:B4:9D:3B:48:1D:70:49:4D:F2:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A88734FC345D6F6319E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77027cb0-7a90-3605-ab07-a991f4ebffce.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:88:73:4f:c3:45:d6:f6:31:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=f460824e-bd64-4968-ac11-4df2e614d5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:06:4e:10:9a:a9:51:27:76:ce:72:d8:42:
                    a1:0d:11:4b:6b:14:28:d1:42:15:9e:1d:e3:85:30:
                    88:27:b2:76:0e:81:a0:ca:36:73:12:f1:e0:a3:4c:
                    cc:2e:73:27:c9:c7:be:5e:dd:02:24:46:9f:33:8e:
                    60:0a:f2:b1:91:23:06:54:18:ec:b7:09:ab:85:fd:
                    f6:ff:0d:6b:f5:68:68:a8:84:f2:26:b0:40:b7:6a:
                    6e:b8:74:b5:50:e3:89:9e:63:a6:91:ae:f5:2e:12:
                    b9:02:15:c4:5a:25:75:85:56:26:01:e4:b6:e7:17:
                    a4:25:86:44:06:14:2f:e1:31:a4:af:ba:6a:aa:ba:
                    a6:53:ff:d5:2e:2f:59:9e:ba:b9:6a:d1:9b:8b:65:
                    ef:86:10:65:9c:5c:f8:39:97:c6:f2:85:ff:b4:77:
                    4c:bb:2e:bf:40:8f:bb:c0:22:d1:90:92:13:bb:d0:
                    c2:3d:3f:ed:f4:75:63:ab:b7:76:57:1b:c4:f3:dc:
                    de:e1:95:49:b3:19:3b:33:9e:b3:ea:e7:c1:37:90:
                    1d:04:5d:da:77:5c:46:c1:5d:c4:82:9e:2f:f9:10:
                    db:45:2d:ad:22:de:ed:fc:15:6d:c9:23:42:8e:ee:
                    b0:32:98:6e:ec:18:4c:c9:3f:8b:2d:db:a2:7f:87:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:FD:24:A1:37:1E:E9:00:73:B4:9D:3B:48:1D:70:49:4D:F2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77027cb0-7a90-3605-ab07-a991f4ebffce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:79:39:45:7a:bf:02:3e:7a:81:50:6b:9b:0b:68:b7:c0:
         c5:f7:97:91:9d:1f:0b:9e:5d:ae:d4:31:2d:c6:1d:f9:2d:8d:
         cc:e4:a1:c4:aa:ee:b0:26:0d:df:ae:cb:0c:68:01:10:35:8e:
         26:fe:e3:97:1f:b1:22:1a:d2:67:f1:6d:5f:12:ed:ec:7b:a1:
         d9:e1:cd:44:a4:7c:20:98:8c:c0:6a:f3:79:aa:c4:a9:6e:dd:
         dc:d2:7b:13:7d:09:e8:ff:ff:37:70:bd:17:df:01:de:ad:4a:
         51:1a:7e:4b:53:a7:f5:18:e6:7e:60:fc:f2:c0:f4:60:ae:13:
         f0:f2:e6:8f:23:86:ab:dc:c0:e5:57:82:79:4a:ce:ef:bf:fb:
         d2:a1:bb:59:4a:67:25:d0:03:1d:ce:e3:0d:73:31:9a:4e:4b:
         e1:42:ed:67:ff:de:cd:9f:c2:00:b4:c7:e1:68:4b:0b:da:90:
         13:84:21:6b:c0:56:eb:ad:d5:59:a8:21:c5:de:ec:98:22:e4:
         63:e3:11:49:ee:2d:d1:38:d7:88:6e:cf:25:84:d3:3d:eb:71:
         04:86:72:db:a9:1d:5e:87:9f:20:6d:92:53:99:2f:d7:a7:1c:
         3b:f1:ba:e1:35:78:4f:87:7d:40:62:d9:24:a0:04:c1:ba:b7:
         56:48:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:47 2024 by rpki-client on console-fra.rpki-client.org