Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9005d78f-cbc9-3c9b-b44f-354d39d5bf50.roa
File:                     9005d78f-cbc9-3c9b-b44f-354d39d5bf50.roa (raw, json)
Hash identifier:          V6Kq4jMjwt+WtvrsDdFgwgN9qqzK24S8Iw9C72o2IcQ=
Subject key identifier:   10:54:B7:58:61:97:9B:CC:A1:21:43:E2:C5:61:86:0B:34:AC:72:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B132B4B2D8A38EA106C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9005d78f-cbc9-3c9b-b44f-354d39d5bf50.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:13:2b:4b:2d:8a:38:ea:10:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d49c70a5-bcfd-48c8-9b5c-eb8dc0f762e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:af:fd:3c:91:d2:28:5a:d6:15:cf:3d:5c:
                    37:e6:ff:31:2d:21:38:e2:3a:df:ad:85:54:8f:dc:
                    67:ca:0e:63:55:14:24:c3:f2:45:36:79:d1:76:1a:
                    3a:60:1e:cc:84:f2:3c:e3:a9:f7:30:b3:c8:7e:20:
                    84:e5:a0:9c:38:2e:d0:b0:b5:f4:81:ce:c0:65:8d:
                    62:0f:e6:0d:f2:74:a7:ae:8f:55:20:08:75:9b:73:
                    77:c7:1d:00:e1:68:4d:15:f2:4e:8c:4e:a6:37:5b:
                    0f:a0:f9:c6:f9:3f:09:61:db:40:e7:63:e3:ad:32:
                    c4:2f:45:c1:b6:e3:f8:5b:f4:d2:9e:10:d0:e8:6f:
                    45:c1:7f:81:aa:89:67:54:e6:06:dd:44:ad:f9:27:
                    22:54:37:cc:9e:61:24:59:5d:3f:d4:18:53:4c:0e:
                    46:12:6c:92:b8:54:5c:61:c9:60:c2:ca:b9:97:c5:
                    3f:99:36:72:8e:71:29:b4:af:99:45:a8:5e:2d:a7:
                    d5:0d:fc:41:2a:17:52:e3:e3:75:8d:ff:6c:e0:a7:
                    e4:5a:1e:65:66:98:75:81:69:82:8c:9a:99:ab:9e:
                    16:16:4d:23:67:76:ac:66:6e:a5:3a:c1:98:d2:5a:
                    75:00:40:fb:b0:0b:dc:46:4d:00:48:ae:ae:ab:e4:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:B7:58:61:97:9B:CC:A1:21:43:E2:C5:61:86:0B:34:AC:72:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9005d78f-cbc9-3c9b-b44f-354d39d5bf50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:9d:85:4f:86:96:0c:87:04:89:e8:1f:29:7c:48:77:92:
         c9:87:3a:f1:07:69:ad:65:82:a3:3a:5c:4c:dc:b1:85:8f:db:
         7b:6b:ef:1d:8e:6b:04:4a:9c:3f:2c:ae:f8:85:fb:97:62:4a:
         f7:7e:f5:ac:34:99:c7:e0:d2:83:a3:fc:79:31:d3:3c:89:92:
         0c:d1:f0:b7:dd:56:48:d0:ca:71:ea:38:82:5f:5b:fa:28:e0:
         26:ca:ef:cd:2d:ba:a9:38:b6:c9:9f:f3:f1:b8:8f:90:e5:2b:
         c7:2e:92:32:f3:99:86:45:ea:b4:d9:90:b0:66:5e:90:b2:67:
         47:7e:85:3f:d0:8f:58:7d:17:8c:8e:57:b0:90:d4:d4:87:9d:
         39:ac:c2:d8:1c:d6:6c:b8:83:a9:9d:79:de:71:0d:6a:ee:ea:
         c7:bb:fc:3a:78:f4:3f:1e:55:1c:3e:94:30:c6:49:a6:e5:e9:
         06:aa:d4:db:26:bf:0e:5a:a5:50:ee:57:89:c0:36:c4:16:2f:
         1e:d3:13:f7:2c:d8:de:e5:91:1b:53:15:ea:e4:1b:e4:eb:3a:
         db:7a:f0:58:f5:a3:31:a1:87:d1:58:76:9f:72:9b:f0:1b:87:
         fa:d3:89:9a:c7:5f:aa:59:15:de:9e:76:33:c2:1e:1c:a3:01:
         f1:88:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:58 2024 by rpki-client on console-fra.rpki-client.org