Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7861d398-cc5c-3b3a-9a26-112acb1bc0cb.roa
File:                     7861d398-cc5c-3b3a-9a26-112acb1bc0cb.roa (raw, json)
Hash identifier:          H6Qk7Eb1JdPUHMPhtoAn+AL6nNVDTFbe3pbY1ebQMQ0=
Subject key identifier:   47:87:16:62:28:18:46:52:48:7D:4A:8E:E5:CE:74:C7:3B:96:C4:FE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A8661AEABC9197EBF8100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7861d398-cc5c-3b3a-9a26-112acb1bc0cb.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:86:61:ae:ab:c9:19:7e:bf:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=f46b2fd5-e999-4c23-8818-f0cf150898bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:26:23:dd:86:aa:af:58:ba:d9:88:3c:7d:
                    8f:15:5a:c2:2b:0e:77:db:c7:49:81:c3:77:fe:68:
                    fa:5d:ce:c6:b5:27:22:78:10:5e:39:0c:93:2a:c0:
                    e4:3e:42:ba:60:27:b8:70:f9:26:3c:e9:5f:c5:c8:
                    6c:9d:8e:a3:3e:85:f1:d9:f2:83:eb:4e:32:f3:ec:
                    b9:e7:e2:27:10:4a:00:d3:e4:3e:e2:a0:90:76:cb:
                    47:f5:a1:58:62:74:e0:c7:2f:ee:9d:cd:e9:69:59:
                    00:1d:ba:29:1f:1c:07:f2:26:7d:51:c2:81:a3:3c:
                    70:ff:6b:01:74:f6:fe:f9:2e:cc:87:19:c2:32:69:
                    54:7d:50:a0:67:64:2a:ee:da:0e:11:78:56:3f:f6:
                    af:cc:d6:2e:24:85:7b:42:2c:d0:f1:31:96:dd:44:
                    c8:74:78:7f:02:a9:f1:a0:f9:13:d8:2f:15:49:43:
                    6c:7d:95:5f:1f:3f:9e:15:f6:4d:02:d8:7e:b0:6c:
                    d8:0b:bb:1e:c8:10:25:6c:1a:cb:b0:0c:4f:75:12:
                    2c:a2:32:0c:16:f6:40:fb:81:e9:e6:f2:64:44:5b:
                    87:6c:ef:39:a9:3c:d1:63:fc:87:9f:23:79:31:a4:
                    68:04:2e:9d:35:5d:d4:b2:22:3e:7b:fd:ba:48:4a:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:87:16:62:28:18:46:52:48:7D:4A:8E:E5:CE:74:C7:3B:96:C4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7861d398-cc5c-3b3a-9a26-112acb1bc0cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ba:1d:50:f0:d2:03:ad:4b:3b:57:26:4d:8f:13:48:97:6f:
         a8:76:a0:e3:ec:35:47:d7:97:44:d9:6b:f3:59:50:7e:58:d4:
         9b:9e:80:22:c6:a3:c3:97:d6:91:51:28:6f:cc:e0:d9:8f:dd:
         94:f4:f4:4b:7f:ff:f4:fe:75:7a:e8:f9:44:06:9e:25:6e:ed:
         40:7c:55:0d:cb:8f:63:e7:d4:b8:86:e7:89:99:91:d3:ad:75:
         da:ca:aa:70:90:09:7e:37:a5:02:73:10:62:e7:4e:3c:d9:82:
         f0:41:7d:d2:fe:43:df:c4:80:e6:b7:b7:bf:7a:05:76:d7:fb:
         2a:cd:98:26:49:cf:16:62:29:3c:6b:fa:53:a0:ae:1f:fd:b0:
         62:81:8b:28:b9:75:e6:90:14:92:c3:0a:d0:be:5f:59:87:f5:
         70:10:d9:af:0d:56:de:be:b3:5d:3e:4a:31:52:90:d6:24:d0:
         28:e7:ff:64:5d:20:3d:10:f0:68:28:96:13:19:5a:4b:e9:59:
         92:e2:2f:74:65:af:f4:24:c1:c5:bf:a1:72:df:67:b8:7a:7b:
         43:a6:2c:e0:5c:1d:9a:db:13:5e:e0:50:03:49:94:42:48:30:
         2a:65:5a:23:ce:ab:14:3c:c0:8a:88:6a:32:57:01:89:0e:1f:
         e1:4e:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:01 2024 by rpki-client on console-ams.rpki-client.org