Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa
File:                     7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa (raw, json)
Hash identifier:          68YoVIWySJUoojywaSd+wonWI+8ThdWjUR2SsTALqG4=
Subject key identifier:   A1:8E:4A:8E:19:68:D8:BA:A9:50:C6:AE:B7:76:46:3A:05:10:B2:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE5E9F771C267E4E088C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e5:e9:f7:71:c2:67:e4:e0:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6822b179-ef61-4bf4-917a-0ced0108edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:46:66:19:4a:34:93:56:a5:fe:d0:b2:85:
                    5a:e3:7c:34:0f:4f:c3:b2:83:db:0b:42:da:fc:d0:
                    d3:d3:55:10:66:df:e1:3a:5a:8f:76:8e:d5:b9:7f:
                    72:b3:d9:a9:9a:64:1b:e6:06:34:33:bc:d0:4c:14:
                    11:5c:6a:f3:53:c8:5e:ce:c9:d7:7f:9a:e2:40:80:
                    43:10:4c:23:15:da:cd:2e:00:b3:d8:56:33:f1:9a:
                    1d:fb:37:ce:65:18:4e:e3:95:1a:87:36:bf:60:04:
                    b1:8f:79:da:6c:fd:62:cb:cf:c5:21:53:af:a3:c5:
                    ab:e7:e2:f6:27:87:82:fa:7e:79:1d:16:b4:e0:e9:
                    b7:30:bf:4c:53:78:b5:4a:ad:bf:73:5a:3b:ad:0b:
                    f2:02:f1:06:6f:9f:80:3a:c6:8b:9e:0f:ba:e3:30:
                    d5:d0:39:2f:81:37:99:ae:25:bb:97:1c:95:e1:de:
                    99:1c:2e:6b:3b:66:e0:45:f2:12:8b:8e:53:49:24:
                    9d:32:a9:c6:73:2c:65:5f:61:6c:ce:3f:dd:00:0f:
                    44:49:44:7e:92:da:1c:54:ef:aa:de:67:93:41:ba:
                    9e:b3:5b:56:68:bb:ba:d8:eb:c7:de:78:8b:b6:a6:
                    bb:d0:a4:91:c2:70:7d:83:c8:81:42:9e:be:6c:e6:
                    d0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:4A:8E:19:68:D8:BA:A9:50:C6:AE:B7:76:46:3A:05:10:B2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:68:2e:e6:00:cb:c1:f2:60:dc:1e:de:07:85:27:18:2c:
         f8:d2:1a:4d:46:b3:a5:10:5d:b7:8f:6b:90:ca:0f:93:de:e5:
         0b:6b:42:8b:53:7e:b2:93:ff:72:5a:d3:b6:22:9f:70:86:d7:
         41:f6:60:d7:8c:0b:77:cb:30:a6:18:c2:d9:1c:9c:5c:28:3a:
         ed:6f:91:bf:dd:fe:a5:c5:86:21:ce:bc:94:60:5c:ae:1a:0d:
         a2:9b:e6:d3:8c:ca:8f:3d:89:c6:3d:e9:c5:2d:20:16:c5:0f:
         d9:52:ee:97:c7:35:15:93:d0:62:7d:9a:e4:13:82:d4:ce:cf:
         b4:77:ed:fd:da:f8:7f:86:b8:f6:63:83:70:39:0d:e8:8c:5b:
         c6:29:56:be:04:6d:49:e6:54:8c:81:58:e2:c7:41:35:7d:93:
         bd:6e:f4:25:84:d5:f1:ad:78:40:10:18:fd:aa:e8:5f:66:73:
         d3:0c:01:3b:e6:00:cf:d7:89:95:97:e2:dc:86:47:4d:b7:0c:
         74:d1:fe:81:53:85:3d:54:ea:87:f4:6f:cf:4d:49:17:03:ed:
         a0:34:e9:7b:c2:af:f4:f0:32:f7:b3:05:23:5c:79:a1:ed:88:
         3a:05:df:2f:ce:ae:5d:ae:00:20:34:a5:ba:e2:49:55:32:9c:
         7d:7b:d6:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPeXp93HCZ+TgiMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
NjgyMmIxNzktZWY2MS00YmY0LTkxN2EtMGNlZDAxMDhlZGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjdGZhlKNJNWpf7QsoVa43w0D0/DsoPbC0La
/NDT01UQZt/hOlqPdo7VuX9ys9mpmmQb5gY0M7zQTBQRXGrzU8hezsnXf5riQIBD
EEwjFdrNLgCz2FYz8Zod+zfOZRhO45Uahza/YASxj3nabP1iy8/FIVOvo8Wr5+L2
J4eC+n55HRa04Om3ML9MU3i1Sq2/c1o7rQvyAvEGb5+AOsaLng+64zDV0DkvgTeZ
riW7lxyV4d6ZHC5rO2bgRfISi45TSSSdMqnGcyxlX2Fszj/dAA9ESUR+ktocVO+q
3meTQbqes1tWaLu62OvH3niLtqa70KSRwnB9g8iBQp6+bObQlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGOSo4ZaNi6qVDGrrd2RjoFELLXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2MzNmNmZTctYzRiOS0z
OTgzLWFiYWQtMTEzZmJlMjgzMWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD97MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAo7aC7mAMvB8mDcHt4HhScYLPjSGk1Gs6UQXbePa5DKD5Pe5QtrQotT
frKT/3Ja07Yin3CG10H2YNeMC3fLMKYYwtkcnFwoOu1vkb/d/qXFhiHOvJRgXK4a
DaKb5tOMyo89icY96cUtIBbFD9lS7pfHNRWT0GJ9muQTgtTOz7R37f3a+H+GuPZj
g3A5DeiMW8YpVr4EbUnmVIyBWOLHQTV9k71u9CWE1fGteEAQGP2q6F9mc9MMATvm
AM/XiZWX4tyGR023DHTR/oFThT1U6of0b89NSRcD7aA06XvCr/TwMvezBSNceaHt
iDoF3y/Orl2uACA0pbriSVUynH171gg=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:05 2024 by rpki-client on console-ams.rpki-client.org