Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa
File:                     893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa (raw, json)
Hash identifier:          0k3uZwZiPZXurOyeewp/kUXvBBxxMACaCIUeaAlDDOE=
Subject key identifier:   86:D8:31:80:1D:F2:BE:3B:63:99:57:02:85:82:DE:53:2F:1E:45:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD39AF613F7685DE22760
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d3:9a:f6:13:f7:68:5d:e2:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=2b19b055-7050-46d7-b178-c07abb774ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:ee:ec:14:3d:58:ca:93:2a:f3:6a:a9:e1:
                    6f:68:aa:0c:ce:e0:5c:b1:ed:dd:a8:cb:2b:9a:38:
                    28:f7:82:04:e2:55:7b:9d:89:12:a2:2d:d8:20:64:
                    95:67:11:d4:bd:49:c4:5c:38:4d:51:67:88:a7:f8:
                    d6:6a:4f:0a:c5:9d:c9:da:25:2b:85:d7:eb:ef:4a:
                    bc:ed:e0:cc:49:68:e1:5e:ef:be:bf:2a:7b:34:39:
                    4d:89:86:05:73:ff:f0:00:60:df:dd:27:f2:f2:f0:
                    f3:01:7f:96:2e:af:19:6f:3f:8e:2c:96:3f:21:f2:
                    76:ba:e7:2e:1c:37:f8:06:6a:ef:d9:66:5b:76:c2:
                    97:01:d0:cc:65:53:67:f8:5e:01:78:b3:e3:7e:3b:
                    ed:bf:52:f2:58:85:bd:82:66:36:15:b1:ed:2b:46:
                    f6:03:1e:97:2b:d9:3d:98:c2:f4:65:a8:24:50:3c:
                    b5:ad:cc:0c:a9:14:64:e9:4e:6d:b4:41:0c:87:5f:
                    9c:ff:bc:dd:d8:ef:6b:13:9f:9e:54:28:7c:4f:d3:
                    69:0b:41:9f:e7:84:ba:5c:53:2e:19:f3:d8:80:52:
                    d7:18:6b:2c:51:af:d3:51:b9:44:fc:fa:be:d1:37:
                    97:c2:63:63:b6:df:ec:7c:8b:4f:f7:c1:cf:10:e4:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:31:80:1D:F2:BE:3B:63:99:57:02:85:82:DE:53:2F:1E:45:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:04:bf:02:d3:cb:85:5c:0e:6b:b0:c5:3a:44:5b:ef:5a:7f:
         e5:87:96:08:ef:1a:17:22:c5:05:10:ab:4d:c7:9e:dd:cf:c8:
         32:9c:e7:7c:f1:96:41:67:a1:b8:99:f3:2b:2a:bb:bd:a4:96:
         6f:dd:44:9f:2e:ec:c1:99:02:5d:c4:fd:96:d9:c7:8c:81:a2:
         61:87:a3:4b:db:ee:34:db:77:9b:47:2c:41:c4:3d:61:50:00:
         a9:a4:d4:66:bc:49:f0:33:f2:42:28:76:2e:0c:2d:3a:fa:1d:
         9a:4e:52:00:ee:8a:6e:85:8d:2e:dd:85:9a:45:3b:49:a2:92:
         11:9f:66:13:77:2c:b6:89:96:7a:73:b3:f5:5e:51:d9:a3:a4:
         2f:99:f0:ee:5a:3e:c1:bd:e2:f9:67:9b:bf:25:ac:3f:a0:36:
         e0:d0:2c:fe:31:0b:4d:07:8d:3b:aa:ad:98:4e:d1:63:35:f6:
         7f:f1:34:6b:18:f9:97:19:c1:b0:96:81:2b:54:85:16:e8:ee:
         4c:ac:f4:6d:00:08:58:65:09:90:f5:d1:d7:7e:db:3f:50:55:
         14:19:79:73:b9:26:4f:74:ad:e6:77:e7:2f:8a:4e:8f:c9:f6:
         da:dc:bb:4f:03:f8:ef:d1:aa:d5:1f:ce:1a:43:7c:c9:7f:ee:
         77:bc:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org