Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/945cbec7-2eb2-3fea-834b-c432487f8054.roa
File:                     945cbec7-2eb2-3fea-834b-c432487f8054.roa (raw, json)
Hash identifier:          p9q1HrZiERzCopLOmSEn3EKa64aTmV4KuJykx5pt/Hg=
Subject key identifier:   56:58:C7:B3:E9:45:A2:AE:B5:24:05:2E:76:89:25:E8:32:26:36:E7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE478D7221E338259E300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/945cbec7-2eb2-3fea-834b-c432487f8054.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e4:78:d7:22:1e:33:82:59:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=297000f9-536f-4903-9f6b-f8d194de0341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:5a:ff:47:0d:a1:47:e0:9a:79:8d:ed:44:
                    c3:95:94:20:8a:b3:23:13:a7:74:45:85:17:1f:0c:
                    01:85:de:33:85:86:01:06:a6:e1:72:9d:5d:81:3d:
                    f0:3e:52:1a:e8:46:87:b2:ed:c6:49:cc:10:39:7a:
                    47:ae:db:0d:70:04:63:4f:4a:25:68:67:46:2d:63:
                    17:6f:0d:6d:e2:cf:43:05:21:39:fe:87:b1:6e:dc:
                    e1:06:68:9f:42:42:c5:df:17:65:8b:56:e6:9c:af:
                    f6:b2:e4:b9:1d:1d:1d:18:32:ca:83:de:e2:27:ea:
                    39:6c:08:2e:ea:2d:2d:ec:9c:df:56:04:d5:26:e2:
                    d7:c1:0f:32:dd:22:0c:62:2d:3e:c1:e8:80:9f:0f:
                    ea:85:bc:cd:ef:0b:75:2a:d5:47:67:9c:a9:49:e0:
                    18:ce:e4:1a:aa:22:fa:e5:ff:92:13:e6:5e:77:1f:
                    9a:81:f7:27:2e:34:76:25:2b:df:54:fd:e0:06:14:
                    d6:ae:f9:de:58:e9:f9:2a:9c:2f:b6:2c:56:1e:ff:
                    4b:5c:ab:71:ad:b9:a5:ef:55:de:74:be:28:9a:89:
                    47:dc:1a:1b:a8:94:e9:9a:bc:24:be:0c:3d:e5:34:
                    a0:ca:0d:73:b5:cb:2b:7d:f8:1b:cb:a1:aa:50:66:
                    2c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:58:C7:B3:E9:45:A2:AE:B5:24:05:2E:76:89:25:E8:32:26:36:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/945cbec7-2eb2-3fea-834b-c432487f8054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:be:7b:3f:7f:e7:cc:92:17:4c:2d:57:74:8f:7e:f9:41:db:
         57:86:b5:64:bc:8f:fd:44:a0:69:38:f7:ca:ec:76:6e:76:fe:
         c2:6c:25:80:02:21:d3:e5:5f:27:0f:c8:85:6d:1b:9e:b9:71:
         6f:92:b9:2f:1e:e9:ff:16:f9:6b:a7:65:b4:6b:53:50:b4:ef:
         17:15:b9:d1:d3:1e:41:cd:36:6f:a5:69:45:28:bc:fc:6d:8a:
         af:46:df:3d:82:88:0a:87:e4:b0:d6:7f:f1:f8:1f:24:b3:fa:
         d0:cd:3d:38:dd:13:03:37:68:ac:96:62:88:a5:68:31:44:bc:
         c8:90:3f:e0:37:52:92:61:4a:db:ec:38:13:0a:44:47:35:78:
         2d:01:8f:9d:9f:da:1d:46:77:2a:38:9d:85:a4:33:5e:a9:15:
         00:a7:73:f7:77:29:3b:c0:1e:51:a3:a5:7b:fb:8c:25:6c:70:
         dd:ae:01:95:ae:b5:ac:1f:f5:1f:69:e0:3a:f1:f5:05:96:4f:
         29:7f:f9:d8:26:49:73:c9:e5:de:a6:12:b9:19:d6:4b:ff:5d:
         5e:2d:00:60:ac:fa:ea:ca:38:cf:65:2a:af:58:06:77:d6:ee:
         ab:2a:b6:d0:fa:30:2c:0b:e3:e6:51:49:b7:12:c6:19:b6:c2:
         7f:94:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org