Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c50d636-edb6-3717-9a29-6ca0dccc1521.roa
File:                     8c50d636-edb6-3717-9a29-6ca0dccc1521.roa (raw, json)
Hash identifier:          7y417VPH2MJ5vIqoaXKHqhOm2R2opbZIhW/aq1bDwrg=
Subject key identifier:   EE:1D:ED:9B:25:8A:65:96:74:3C:8F:81:F5:FA:B0:7C:73:57:69:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD176600BF0EEAADA42C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c50d636-edb6-3717-9a29-6ca0dccc1521.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d1:76:60:0b:f0:ee:aa:da:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6615a638-842c-4eeb-ab6e-1203d9465325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:84:a4:79:b3:32:99:13:57:cf:b5:52:d9:
                    b2:b1:a5:75:78:45:f4:50:6c:03:a5:1b:22:c5:12:
                    22:3d:b5:71:e4:ce:02:e4:e1:15:66:9a:ac:0b:34:
                    af:7d:ae:f2:24:82:b9:bb:b4:1f:02:82:c8:55:d0:
                    73:77:39:6d:67:44:97:c5:ea:8c:b8:8e:b1:7e:54:
                    84:f9:4f:7b:06:e2:95:b2:25:e8:1c:0d:f0:38:84:
                    76:d6:6d:75:83:a9:12:a6:6b:53:f8:6e:25:07:0e:
                    e6:9a:78:46:8c:bd:12:87:ee:ad:67:de:48:24:15:
                    7a:57:e3:e9:80:bf:72:e9:a2:be:32:a1:af:61:82:
                    13:73:d0:3b:c2:9e:99:9a:43:30:ae:12:85:6f:7a:
                    e6:cb:9c:88:08:d5:5d:1d:90:ff:53:6c:09:cd:07:
                    dc:c0:d4:00:6e:2f:0f:e2:98:f5:21:c5:36:8b:01:
                    38:2a:a1:51:fe:82:56:e5:cc:2a:cf:b0:95:60:b7:
                    ee:b2:39:d3:38:6a:3c:1d:cc:86:0d:f4:f9:ca:f7:
                    a9:e2:0d:70:31:77:38:3b:73:d6:30:2f:a5:bc:2f:
                    24:f6:25:9c:b4:28:cb:29:3c:c8:71:9e:ee:11:8e:
                    d3:73:64:53:12:a4:1c:a6:1e:67:41:e2:0a:cf:79:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:ED:9B:25:8A:65:96:74:3C:8F:81:F5:FA:B0:7C:73:57:69:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c50d636-edb6-3717-9a29-6ca0dccc1521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cb:86:ba:2f:5b:74:a8:02:9d:66:fc:48:5b:64:f7:7c:a1:
         a5:a2:ee:b4:fe:c8:d5:b5:43:e7:c8:56:2a:30:e1:e8:ed:e4:
         81:42:e7:43:e0:e6:69:ee:ab:15:66:e1:03:84:64:45:6b:da:
         c8:f3:7f:74:0a:c6:25:16:0f:02:22:ef:5c:65:5e:b2:dc:12:
         65:d5:37:ea:91:8b:8e:1d:c9:5c:ca:51:ca:a5:71:51:51:dd:
         25:2d:a0:9a:45:dc:5d:7e:f0:3f:86:d6:de:f7:dc:6c:e5:0a:
         57:3b:ef:c8:ea:e6:61:14:55:84:24:9d:0f:ac:ce:2a:21:b1:
         23:c2:1a:89:a0:2a:c1:ed:28:69:c9:d0:2a:6f:c0:4c:ce:79:
         78:7c:5c:58:72:75:b8:82:0e:6f:1b:bf:8f:db:49:82:9c:73:
         58:16:77:bd:6c:59:13:85:f0:56:5b:53:d1:a2:db:54:56:a4:
         63:a6:0b:4a:f1:3d:fe:46:a1:ec:23:16:aa:a2:c7:0e:73:8a:
         68:0e:51:c2:85:d5:ce:bb:d3:96:5c:79:0b:9a:c6:5b:d9:b2:
         00:97:66:7e:d8:7c:4a:27:d6:06:2e:b8:3b:dc:fa:35:11:25:
         2e:96:b1:f6:ce:9d:19:ff:81:40:5e:7c:9e:02:a0:be:6a:21:
         2f:b1:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:07 2024 by rpki-client on console-fra.rpki-client.org