Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98dedc7c-0c96-373c-b182-df475a9377d9.roa
File:                     98dedc7c-0c96-373c-b182-df475a9377d9.roa (raw, json)
Hash identifier:          V1tYBQgauwTMhGKy85ENvng4LlXH0ZVGQ4uHxRI+cMc=
Subject key identifier:   E1:0D:97:C8:26:4F:51:93:C1:F9:D0:58:6C:FD:F2:20:A0:42:78:5B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCE4684CCFC4048BD3B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98dedc7c-0c96-373c-b182-df475a9377d9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ce:46:84:cc:fc:40:48:bd:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=51cb72a0-a8fa-4a45-b25b-0d0e1d5431eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:59:65:50:5b:a6:92:fb:43:94:de:a5:43:
                    2d:2f:2b:89:da:da:f9:82:49:42:d3:fd:ce:ba:76:
                    cc:ed:2e:ef:59:a7:56:18:1d:ce:84:2d:7a:20:45:
                    3b:0c:85:17:2b:b9:52:21:25:82:7a:f3:6a:b4:db:
                    52:b4:b8:f1:16:f7:55:67:c4:5e:c7:01:51:a3:85:
                    39:f9:6f:bc:2b:8c:e4:bc:23:05:2c:d7:dc:56:5b:
                    52:71:99:5f:1d:ef:4f:fa:ce:18:51:7b:a9:47:d1:
                    31:7c:f7:13:f2:1c:10:c9:c3:b0:c3:de:ab:00:be:
                    cb:00:11:b0:f2:2e:07:ae:fe:8c:eb:a5:f1:f2:35:
                    e5:d9:c5:4c:61:38:5f:5f:1a:99:8f:e4:a1:82:d2:
                    d4:c8:68:22:0e:49:14:58:d1:0b:4b:0e:c3:18:9c:
                    c1:7c:41:e8:16:0e:ec:8f:46:28:0b:9f:bf:56:a6:
                    f4:01:da:21:a2:21:94:92:f2:fa:84:1d:44:1b:c3:
                    5c:ac:ea:f6:1b:39:43:8b:4d:11:70:a6:50:c9:ef:
                    f9:f4:9a:1e:14:15:7b:73:c3:a0:24:bd:b0:92:8a:
                    32:e9:4e:22:99:ee:dd:de:e9:32:7a:46:a1:19:e4:
                    6a:63:45:8f:04:62:d0:5a:94:29:5c:f7:87:97:9b:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:97:C8:26:4F:51:93:C1:F9:D0:58:6C:FD:F2:20:A0:42:78:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98dedc7c-0c96-373c-b182-df475a9377d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:22:18:78:bf:4e:84:83:46:47:10:3e:fe:b4:a6:8e:70:41:
         af:2a:8f:08:c0:62:92:7c:5b:cf:83:da:b4:e9:eb:cd:58:f1:
         b8:e7:e3:13:01:fb:8c:05:45:f2:40:22:52:ee:d1:a9:d5:56:
         20:bf:ab:2d:f7:92:3b:e8:c1:6a:4a:3c:9b:f4:6d:34:8f:eb:
         5e:1f:f4:f5:51:f9:ac:2c:aa:15:af:72:ba:0b:47:96:96:17:
         31:e8:b5:88:94:73:da:87:06:31:f3:97:39:23:b5:c8:b7:cd:
         4f:a9:42:0e:61:03:b4:bb:fa:e8:83:0d:8c:64:10:bb:4f:36:
         3a:f4:71:ca:59:5b:3a:13:20:3d:ae:5f:00:e7:2a:ba:c0:54:
         93:53:be:78:f3:cb:be:a2:9a:1a:70:8f:45:d4:7a:97:05:67:
         ac:17:d4:78:85:3e:2f:22:fa:0c:7b:68:4c:d3:78:4c:d7:19:
         e3:a7:42:b6:8e:f5:3c:85:d7:de:4d:f6:0d:f3:75:94:ed:e9:
         cd:54:77:2b:6d:38:dd:c6:ce:bb:9b:54:90:3e:d4:a7:49:81:
         72:fb:75:6e:5e:a5:e2:42:3f:ad:bb:e3:76:d8:87:72:7b:7c:
         f9:a4:8b:88:c7:53:26:41:8d:9c:ac:56:90:16:66:64:7e:24:
         34:ce:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org