Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8726374a-9584-309b-8094-831871bc85c2.roa
File:                     8726374a-9584-309b-8094-831871bc85c2.roa (raw, json)
Hash identifier:          M1wehnwjOIoCTvNGi47Tp20uGTOiTu1Y7ZlyJHCaJRE=
Subject key identifier:   0B:AD:40:71:DC:53:94:CE:9E:96:7A:B3:95:CC:F6:37:3B:8B:5A:68
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCD469E3188D3C5BDF600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8726374a-9584-309b-8094-831871bc85c2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:cd:46:9e:31:88:d3:c5:bd:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6dfad7b2-0d3a-4b66-99b2-a6e2ddcef25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:0d:20:c0:ab:b4:18:6f:8f:cd:26:37:63:
                    cd:9c:94:be:9b:77:20:a2:4e:56:a6:5e:b1:ed:31:
                    67:06:d4:f6:62:b5:2d:99:c0:50:0d:ab:44:a9:15:
                    40:16:2e:f2:a9:de:dd:aa:1b:18:ce:a6:83:9e:6a:
                    41:e8:6d:f7:49:3b:fc:af:87:1e:cc:07:cb:ca:e1:
                    05:6b:7c:bd:d9:2b:54:23:51:0a:ca:0f:e2:54:14:
                    10:22:f0:ae:81:69:de:ae:35:a4:42:b8:b8:d5:bf:
                    21:23:6f:72:b9:d6:84:05:6e:29:ee:5f:26:be:21:
                    ec:04:de:9a:f2:98:7b:3b:12:68:00:b3:49:88:f8:
                    9c:38:ec:43:36:72:7f:1b:b9:98:dd:ad:aa:2c:9e:
                    47:22:02:50:42:15:16:24:97:cb:06:0b:be:4d:5e:
                    86:84:2a:61:16:83:17:95:cd:1c:f6:23:77:44:39:
                    2a:39:f6:86:a7:01:2f:f6:bc:71:da:c7:8a:8e:0f:
                    41:20:37:78:14:4f:6a:46:47:36:da:a4:61:0b:56:
                    60:5e:91:4b:31:10:44:bd:94:85:ef:61:27:5a:7a:
                    56:7d:87:32:eb:60:30:3d:e3:6a:01:29:ec:9a:f4:
                    6d:43:b4:1d:d5:c6:c1:e9:79:d9:00:66:ec:c8:cd:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AD:40:71:DC:53:94:CE:9E:96:7A:B3:95:CC:F6:37:3B:8B:5A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8726374a-9584-309b-8094-831871bc85c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:e4:04:1f:6a:bc:15:7e:fa:dd:cf:8f:ac:4e:2f:ad:e8:
         2f:0f:94:1f:91:f9:c5:77:b6:28:ae:da:2c:76:7e:37:b1:5d:
         b6:cd:91:2d:5a:fe:e4:71:6a:23:ba:d5:6f:49:14:69:1e:4d:
         1a:65:b8:39:89:51:a9:f5:c8:a0:d7:bf:c2:50:0a:25:b7:33:
         81:9a:e7:20:02:47:9a:d7:11:83:4c:f7:d0:a3:96:ea:ab:d9:
         75:88:68:40:d6:39:97:db:c5:12:06:14:2a:75:00:4e:d1:a8:
         0b:71:5b:61:a0:83:9d:c0:c7:7e:0b:7e:aa:8e:fa:d6:ae:73:
         62:c0:9b:35:61:8f:c9:b7:fe:28:22:a5:be:74:47:3f:1e:97:
         44:d9:31:4e:87:27:9c:ac:80:1c:1b:9a:c2:95:8e:5e:86:68:
         61:ae:04:bd:54:60:66:7e:d5:2a:10:7f:9d:6d:4a:88:95:53:
         c6:c7:89:4d:c3:f4:ee:af:27:43:c1:da:00:00:88:c7:8e:38:
         90:5c:19:19:41:b0:4e:65:03:05:0e:b7:b0:35:13:fb:38:66:
         8e:6f:76:de:a6:3b:84:c0:ec:c0:7d:35:66:ba:c1:d2:7a:6e:
         b3:16:78:74:3e:1f:e6:4f:90:74:73:ed:d9:af:19:a0:80:7b:
         99:e4:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:39 2024 by rpki-client on console-ams.rpki-client.org