Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8152b46e-c342-33d2-af0e-22c2b29cc6ca.roa
File:                     8152b46e-c342-33d2-af0e-22c2b29cc6ca.roa (raw, json)
Hash identifier:          eltswGd9DhDxh8DIFSjvmFEE/FxS5BDLNBZ77tUOro4=
Subject key identifier:   5F:D3:06:13:57:EE:FE:18:32:81:B6:3A:08:C0:E8:5E:E5:F1:9D:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E58F6E73509805D7E3680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8152b46e-c342-33d2-af0e-22c2b29cc6ca.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:58:f6:e7:35:09:80:5d:7e:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=32912bcc-c4d8-4237-991f-2970457ef67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:c9:76:92:d1:1b:bc:72:7e:20:11:50:5a:
                    98:27:52:80:3b:d1:4d:da:9d:50:2c:38:a9:26:83:
                    8a:92:35:67:a7:2e:2e:db:86:61:51:e7:26:85:3c:
                    6b:1e:f1:6d:fe:9d:f9:fb:31:ea:0c:28:c9:0c:6d:
                    7b:bc:d2:7f:c5:05:52:b7:92:97:ca:b7:4f:4b:62:
                    4a:23:7a:3a:59:16:8f:a4:34:91:6d:b1:a2:29:59:
                    36:bd:83:b1:b2:d3:ec:35:eb:86:4a:03:be:fc:fa:
                    3c:92:78:8f:b3:d4:e8:db:ec:a1:32:09:0b:5b:d0:
                    8a:b5:0a:73:81:9e:11:b3:0e:23:a6:c9:4b:5b:3b:
                    62:1a:42:71:36:3a:cd:7d:72:54:20:1b:ce:97:10:
                    0d:28:36:c6:10:23:0d:30:06:d9:c2:98:fd:be:8b:
                    72:98:ee:6e:4f:7c:62:7f:ab:ee:17:82:22:28:e7:
                    53:b7:51:f3:ce:cc:99:97:f2:4f:ec:62:b2:74:30:
                    36:bf:77:54:53:6a:a3:a1:40:69:bc:26:5c:99:01:
                    9f:ca:b1:0f:58:ed:87:65:9e:c3:a8:fb:5e:dd:e7:
                    ea:f4:74:9b:ab:4b:9a:34:28:c8:17:ca:87:22:b9:
                    c0:32:8d:94:8e:fe:c4:2c:c4:7b:24:14:b6:27:32:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D3:06:13:57:EE:FE:18:32:81:B6:3A:08:C0:E8:5E:E5:F1:9D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8152b46e-c342-33d2-af0e-22c2b29cc6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:6d:ed:13:05:76:7f:dd:74:7d:34:7f:4b:e2:6f:fe:29:
         89:da:60:04:0a:94:97:6f:1b:7b:bf:07:ad:11:a9:8e:cc:cd:
         b5:18:4f:bb:bf:36:57:bf:66:d4:26:57:b2:21:cd:50:c5:74:
         dc:b4:13:63:1f:df:a3:3a:6a:8e:d7:ee:be:d0:9d:52:4b:22:
         a5:9f:fa:a0:5b:5e:f9:ae:10:db:58:2f:47:bf:be:28:f6:16:
         7a:d3:05:fc:59:52:dd:27:2a:a3:6d:40:63:ce:54:3b:ff:fe:
         7d:54:e3:15:6b:91:4d:6e:c7:d5:42:88:46:61:f2:1f:ea:7d:
         f6:d1:d1:ea:9d:c0:5a:9c:41:22:98:20:86:68:57:b7:52:ca:
         39:b8:d2:fe:e7:6d:1f:a6:78:8d:fb:5e:82:7b:69:19:be:cc:
         4a:e9:c9:62:19:c5:78:e9:42:b2:18:43:8f:4a:22:2c:b5:e8:
         10:5f:79:00:21:c0:81:c6:24:21:2b:b2:45:93:ce:a0:23:63:
         7b:61:95:4d:da:d1:61:65:d4:1b:64:f4:38:53:81:49:58:c5:
         55:cc:5c:e0:61:03:cc:db:fd:e5:63:a2:40:26:60:64:43:a5:
         14:d5:ee:49:de:36:35:a3:b5:04:9e:0b:87:27:d6:2d:fc:66:
         e0:1f:67:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org