Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99e29ee2-6389-3e87-9899-c49e8997035e.roa
File:                     99e29ee2-6389-3e87-9899-c49e8997035e.roa (raw, json)
Hash identifier:          ttZD2hdzMJ7Xz7FOPx4BVRV/K275VN94dUCBg+/Yyh4=
Subject key identifier:   13:54:67:E9:9B:98:CD:8D:39:D1:7C:A5:50:9F:72:5D:EA:DE:A6:0B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A804F7DE4C7BD501D0200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99e29ee2-6389-3e87-9899-c49e8997035e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:80:4f:7d:e4:c7:bd:50:1d:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6ea1e93a-76bf-49a7-8883-33d1f34c3533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:db:8f:6d:80:ea:66:56:57:f5:08:61:ee:67:
                    00:a4:63:80:46:96:8f:71:a5:b2:5c:38:36:30:b5:
                    28:57:92:33:3e:12:de:82:f9:31:d8:30:84:f4:01:
                    8d:ef:0f:93:93:9d:73:f8:5e:31:05:02:5f:82:7f:
                    1e:b5:94:95:c4:c6:0d:70:2e:a3:3d:69:2c:81:f9:
                    46:bf:79:25:a8:67:56:26:36:58:52:1d:7e:33:32:
                    a9:b5:bd:5e:6c:18:e1:5e:a1:77:12:c7:f6:2a:a3:
                    b4:ab:70:1a:2c:38:8c:33:96:1e:16:52:f8:24:a4:
                    a2:2b:21:91:5e:d5:65:2a:94:94:34:2d:8c:bb:1f:
                    68:43:a6:15:6b:95:74:3c:7c:06:86:b5:c2:58:31:
                    07:2c:15:01:e9:66:96:d8:96:be:9e:56:20:19:7f:
                    28:31:95:88:fc:04:6c:42:8d:88:de:cc:27:8d:72:
                    ae:24:b7:0e:84:a3:fe:a5:60:7f:b7:ee:de:ad:0d:
                    5d:ae:18:62:c2:13:93:b7:ac:4a:31:43:47:ed:f7:
                    fc:40:50:4d:79:13:59:b0:27:16:4f:fb:a9:ab:71:
                    85:1e:ac:a4:21:b0:8a:32:2f:2c:1d:9c:4c:b8:63:
                    d2:61:46:02:4b:af:82:e4:67:eb:16:3e:08:7f:76:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:54:67:E9:9B:98:CD:8D:39:D1:7C:A5:50:9F:72:5D:EA:DE:A6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99e29ee2-6389-3e87-9899-c49e8997035e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2b:0e:44:28:8a:c7:a6:fa:1a:a6:62:ff:3c:9d:03:ce:73:
         9a:f2:e0:ca:5d:e8:a3:dc:88:36:ec:91:77:a6:65:84:fb:45:
         7f:65:92:e5:4f:d9:f6:74:b3:1b:52:12:ee:17:f3:fe:dc:9c:
         93:7e:f4:68:30:7b:fe:88:19:ea:97:66:91:ba:96:31:d0:53:
         e1:9e:dd:94:c5:4a:11:78:12:80:ec:e7:c7:1b:17:7e:dc:f9:
         bb:e7:64:16:f6:7c:84:86:6e:62:04:3b:89:44:8b:ab:29:fd:
         f0:8d:24:b2:01:21:9e:3c:7a:53:e7:63:f6:8d:9d:6a:dd:dc:
         43:a1:05:ab:f0:75:7b:84:f3:36:05:59:1c:89:b2:6e:95:90:
         d6:9a:6c:d5:a6:27:b8:9f:58:67:99:e4:89:6f:eb:d8:bc:e3:
         1c:75:73:c1:66:e5:e9:e3:7e:d9:dc:2b:5f:9e:e8:2c:66:29:
         54:44:08:3f:75:ff:ea:26:4d:d1:af:29:d9:d1:95:a4:83:2e:
         3d:4f:88:b7:9b:5b:b8:94:f7:db:e2:b7:a7:1e:41:d1:5b:25:
         20:ef:53:53:d1:e4:ae:7d:4c:93:d3:21:82:dd:44:70:3f:7a:
         f5:a4:64:91:4b:25:37:2c:21:af:f9:8b:d8:3f:14:35:7e:d5:
         1e:66:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:16 2024 by rpki-client on console-ams.rpki-client.org