Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa
File:                     85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa (raw, json)
Hash identifier:          KbYsnLEx0sP+myO3whPegAImiXj4xsoXRkAGQ7D39+E=
Subject key identifier:   56:83:51:F6:80:FC:65:24:AA:CE:E0:38:EE:AA:03:A1:B0:CD:56:36
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD8779EA164F960A99BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d8:77:9e:a1:64:f9:60:a9:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=29b7f26a-6c68-447b-a04b-470f17fe1cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:0e:db:d9:4f:fc:35:6c:28:65:5e:6a:c3:
                    1a:0f:41:b8:de:f2:49:24:c5:07:12:6c:b0:e0:49:
                    cf:d4:c8:3b:67:ae:87:ea:7d:6e:b5:0d:71:84:0f:
                    41:24:96:e1:4f:26:c5:2b:a0:77:0f:36:2a:ba:9b:
                    04:f0:3d:de:08:d8:4f:c6:15:bc:5c:fb:09:01:dc:
                    d5:71:d1:1e:21:84:4a:0a:e8:36:c2:56:a9:6c:c0:
                    08:cd:1b:90:cc:c6:93:9f:67:bd:9f:15:de:05:94:
                    5d:04:68:95:4d:82:ac:18:31:44:44:10:1b:d3:6a:
                    3f:61:aa:b4:42:0e:fd:db:99:c5:35:97:68:0c:b3:
                    a4:82:bb:5d:32:0c:11:b0:db:ba:2c:89:cb:64:27:
                    be:94:a8:3e:6c:fc:a4:43:70:f0:97:70:e5:ad:b4:
                    54:32:30:f9:7a:62:ce:48:5a:f4:04:78:a5:2e:3b:
                    91:12:43:bb:1a:bc:8d:dc:08:db:70:f0:90:1e:ff:
                    59:87:13:50:c1:46:1b:e4:fd:fa:a0:3d:26:86:78:
                    60:ff:83:3f:8d:a1:4f:8a:76:d1:e2:23:ab:1b:ac:
                    6c:19:e8:b4:7c:f2:b2:08:d8:75:d7:75:aa:56:46:
                    79:6a:fd:ed:2d:b2:98:2a:0e:50:75:08:59:4c:80:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:83:51:F6:80:FC:65:24:AA:CE:E0:38:EE:AA:03:A1:B0:CD:56:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a3:52:60:4a:6a:52:e7:cf:31:1f:d3:1b:20:9b:f7:20:7d:
         5e:36:bc:b4:f1:3d:5d:43:16:cf:a6:0e:74:58:a4:83:9d:47:
         ce:d1:f8:a5:f0:8b:2a:6f:11:93:1c:de:84:dc:a9:67:94:e8:
         2c:17:be:c3:0c:85:0c:d7:68:49:ca:7b:81:3b:b7:24:96:62:
         f8:68:93:5a:92:cd:02:b7:29:59:5d:7f:5f:b1:2a:ac:07:09:
         45:4f:7c:58:12:c5:c7:d5:a8:03:d9:c4:34:e1:22:97:c9:d5:
         9a:ec:13:e0:70:e6:b6:19:9f:23:75:fb:cb:2d:61:51:aa:95:
         99:9b:fa:a4:22:0c:52:33:8e:26:61:a1:7f:4b:cc:47:f3:a7:
         a9:36:0c:b8:51:9f:6e:7f:4e:26:06:03:fd:42:e3:45:2f:09:
         31:71:1d:a0:0a:95:0c:48:41:05:8e:9e:20:28:ff:ea:e4:8d:
         ea:11:74:c2:a6:b3:77:33:24:8f:92:cf:b9:4c:84:79:4f:d0:
         e8:69:ae:a2:1a:3e:25:92:0a:1c:70:3e:37:fe:ac:85:0d:95:
         da:1c:28:22:cb:27:ef:1d:fb:94:50:4c:e9:e0:af:ee:45:86:
         9f:8e:8d:5e:34:6f:65:07:92:f1:a7:4a:e9:27:32:c7:dd:07:
         0f:c5:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org