Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90d13aa6-3017-32ac-9722-91fa30abae01.roa
File:                     90d13aa6-3017-32ac-9722-91fa30abae01.roa (raw, json)
Hash identifier:          xuTfaAPXn3n0LGUfqFqcIVvIP6xAr2rv0sLmcm6NPA8=
Subject key identifier:   18:51:F9:CA:AE:28:62:8C:B4:FD:26:D9:A0:C3:36:A0:A7:30:85:31
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E594D18532336F1BAF280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90d13aa6-3017-32ac-9722-91fa30abae01.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:59:4d:18:53:23:36:f1:ba:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1ab82519-63c2-41c5-bc10-ed9b429d2397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:db:20:90:85:90:b7:6e:48:74:06:bf:98:
                    80:ff:ee:af:26:05:e7:4f:55:82:a4:1c:47:03:29:
                    cc:a6:d6:e1:34:04:f9:64:65:6d:3c:9e:78:5a:38:
                    76:df:16:27:37:53:98:55:90:9f:65:a0:2d:ee:ee:
                    25:36:11:91:2f:7f:76:2b:eb:fe:f4:24:f7:50:ff:
                    61:f4:c0:78:bf:c2:f8:3e:33:80:31:5d:d2:e0:9f:
                    ab:ac:1c:d8:e6:7c:10:e5:03:6e:fc:be:7d:26:fb:
                    c5:e1:3b:8a:d9:5b:da:da:86:64:bf:ba:24:d1:1c:
                    3d:3b:a9:5c:9a:1b:1a:4b:bd:4e:bf:6a:b8:ee:7a:
                    e1:c0:39:1e:2c:8e:b9:92:00:ae:13:2b:35:55:93:
                    8c:58:4e:e9:3a:85:a6:79:7e:86:7f:ea:e5:d6:1c:
                    79:05:70:7d:84:d0:38:41:e5:fc:5c:43:3c:73:55:
                    53:3e:14:e3:b2:2a:e1:4d:4b:76:20:1d:98:e6:0f:
                    e5:50:89:5f:b6:ea:cb:47:ba:fb:2c:25:b9:28:94:
                    33:d0:46:92:8e:11:4a:2a:9e:a8:69:93:3e:2b:9f:
                    46:07:a9:b0:90:f3:66:c0:74:fc:c8:33:3d:b3:5a:
                    66:aa:a7:6b:e2:9e:ce:06:3c:fc:c6:d4:62:3f:53:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:F9:CA:AE:28:62:8C:B4:FD:26:D9:A0:C3:36:A0:A7:30:85:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90d13aa6-3017-32ac-9722-91fa30abae01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:a1:b0:b6:dd:b1:ab:da:ca:4a:ed:c3:9d:b0:54:58:ee:
         f0:ad:96:ec:e2:b3:d5:e0:22:90:b8:d3:0a:85:c4:d5:3e:11:
         f5:cd:a1:14:eb:82:31:65:38:47:f1:a0:c1:80:13:29:c3:8b:
         1b:1a:5e:dc:00:98:8e:45:e0:c1:ec:e2:3d:15:d8:11:d2:0c:
         2c:c5:33:8c:30:7d:90:72:f7:b4:ca:73:0a:b8:02:e2:af:cc:
         e8:0b:ad:f3:06:f8:cc:78:ac:f2:21:be:82:81:b6:e6:09:65:
         e2:fe:2e:6e:ac:04:21:7c:7f:95:61:41:db:5a:bb:6a:43:d6:
         fd:a0:52:5c:3b:cd:cf:fb:50:43:d0:3e:26:33:a1:31:ba:10:
         13:dd:33:2d:e8:0d:aa:a6:b8:2f:48:6f:72:0b:1a:fe:cb:29:
         70:d3:25:1b:f6:79:2f:83:83:af:36:bb:d4:c4:88:ec:76:ba:
         ce:d4:fc:55:81:1e:77:fd:ea:0b:7f:2e:02:73:dc:d9:b7:85:
         f0:92:87:18:31:73:d3:81:ad:e1:2f:f0:06:99:2f:6c:d6:13:
         d9:1f:78:e7:fc:0c:49:e2:54:0c:76:e6:01:51:5f:26:fb:95:
         0e:8d:44:18:b5:62:a6:aa:cb:45:c7:79:c7:a0:94:73:67:38:
         10:ea:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org