Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90a7d710-d191-32fd-97cc-732b76d12f3b.roa
File:                     90a7d710-d191-32fd-97cc-732b76d12f3b.roa (raw, json)
Hash identifier:          m0ixTW/yTY3lnkWl2tI78kNQ9OXMRo5za2B6/erbhrk=
Subject key identifier:   E8:85:6A:40:F5:83:5F:AD:01:0F:B4:00:E1:D4:91:54:E0:1B:F7:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4E7E2EF435A9E3EAC480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90a7d710-d191-32fd-97cc-732b76d12f3b.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:4e:7e:2e:f4:35:a9:e3:ea:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c790558a-2452-4e88-b34e-28b77c5c9531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:b0:12:db:33:72:df:e2:c3:ba:7e:f1:49:
                    15:97:b1:bf:6f:76:3c:e8:dc:1a:e6:e6:56:03:81:
                    9f:d0:05:fa:0d:b8:27:79:4a:96:c1:4c:a8:32:ea:
                    d7:8c:26:53:8e:c4:18:51:84:70:72:8d:a1:7a:fd:
                    b6:46:52:e0:31:7a:6c:6c:ce:76:03:9e:ec:b2:79:
                    6c:8d:2f:df:35:6f:90:2a:98:c1:75:ca:83:09:cb:
                    1b:1f:64:e7:44:88:3d:7c:40:1d:6c:f5:60:fd:3f:
                    87:17:3a:23:2d:3c:d0:10:c6:b6:b6:de:1f:20:b7:
                    63:00:f8:26:83:34:de:83:f1:13:c4:0f:77:64:7e:
                    24:0c:ee:99:16:b7:45:32:67:6a:20:94:f3:d5:c7:
                    ad:71:b9:5a:d7:18:90:13:c1:f7:08:db:63:90:d7:
                    b0:65:dc:a2:a2:10:39:28:85:30:a0:51:48:4d:da:
                    46:78:5a:03:c2:62:92:ce:fe:c4:02:bc:aa:bf:c9:
                    95:8f:a3:8e:c1:a4:e9:03:77:65:55:32:fc:2e:36:
                    ef:25:05:38:13:83:d9:54:e4:02:3b:e3:ea:aa:1c:
                    21:a1:4e:4c:05:11:b9:4b:16:f3:06:37:b5:b1:d1:
                    6e:87:3f:a1:a0:f1:3b:ea:5c:0b:9b:92:80:f3:02:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:6A:40:F5:83:5F:AD:01:0F:B4:00:E1:D4:91:54:E0:1B:F7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90a7d710-d191-32fd-97cc-732b76d12f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:e3:03:65:9b:04:e6:4a:0b:6c:ae:c3:07:67:fa:9e:12:
         a1:0f:9a:a5:78:cb:75:81:b4:f7:c7:97:b6:be:23:d9:c3:24:
         9f:ca:62:52:c2:b7:3b:f7:d9:b6:41:29:c8:23:67:94:50:ad:
         54:fb:fe:23:0b:60:be:83:0a:70:b7:40:5a:fd:ce:67:e3:e0:
         1c:b7:b1:a8:a7:48:52:07:01:13:a5:ff:68:a0:4f:ac:50:28:
         00:3e:f4:07:05:b4:18:77:2e:0b:08:8a:1c:2c:5a:08:9b:a2:
         a6:59:d3:29:f3:61:75:8a:51:ad:b4:4a:0f:bf:bc:a5:fe:a6:
         d9:08:5c:6f:5d:dc:e3:a4:ee:a4:8f:1f:0f:a9:75:9c:bd:c5:
         62:99:4e:b4:c0:14:e4:fc:93:1d:08:de:f4:25:48:fc:ad:cb:
         e6:6d:a4:39:54:da:6f:74:24:c9:92:9c:94:b9:f4:ff:b0:4d:
         0c:ac:1a:67:10:5b:20:12:be:58:47:46:c9:bf:0f:fd:56:fd:
         82:45:16:ca:cd:56:f5:4a:5d:e7:5f:9a:fa:0b:20:00:3a:2a:
         95:1f:76:8f:fc:c8:25:4e:d3:ad:81:0c:ce:94:e0:fc:ce:d3:
         8a:cc:66:13:98:79:62:14:da:f5:b0:eb:29:00:a9:c8:2f:9a:
         a7:94:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org