Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa
File:                     9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa (raw, json)
Hash identifier:          09nn3eClQ3VojJ0MoYQIgGMU4Vq/nJ0l8AKB3iYoc+Q=
Subject key identifier:   FB:C2:93:CE:E8:AE:AC:CC:B2:2B:66:07:04:55:A4:9B:4A:DD:04:7A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEA0B1C1A52AB4B3E6600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ea:0b:1c:1a:52:ab:4b:3e:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7da8d485-3c4d-4d0d-b69f-0dbe16a641ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:c6:12:be:e5:34:82:a0:23:16:4b:63:79:
                    e4:1c:01:8b:ee:40:46:55:d6:54:69:bd:62:75:c8:
                    96:68:e3:25:5b:f9:0c:89:f1:aa:bb:45:58:b9:09:
                    a5:a4:18:ec:69:a3:33:ae:59:e3:63:70:5b:50:21:
                    53:ed:57:06:52:f4:a3:24:6b:53:a9:33:df:9c:52:
                    c7:57:e9:23:68:e1:68:ce:d5:51:84:28:02:0f:cd:
                    cd:10:9c:19:49:e9:cd:d6:d3:e4:8c:3b:1e:5f:fd:
                    12:e9:f7:42:cd:9b:55:ab:8f:8a:50:fb:fb:54:11:
                    15:28:f6:85:1c:40:48:4c:79:57:07:1c:20:be:89:
                    44:7f:56:fb:34:c0:21:32:76:07:a0:37:6c:dc:b6:
                    bb:19:e2:a0:70:a7:e8:45:bc:f7:fd:f6:29:cb:53:
                    96:6e:39:a0:f8:f5:dc:33:af:59:48:0c:fd:c7:b1:
                    5f:13:5f:cb:4b:45:9d:90:6c:99:8b:ec:41:44:23:
                    08:5a:8e:b8:7c:6d:1b:d8:fd:ca:3d:38:a5:a1:8f:
                    06:34:db:ad:6b:9f:10:ea:97:9a:4f:99:64:7e:b6:
                    42:41:a6:a2:7a:69:f5:80:ac:d6:50:8f:33:38:d5:
                    2e:1f:a6:ad:a2:e1:c1:cd:5e:3c:5a:2c:26:61:2d:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C2:93:CE:E8:AE:AC:CC:B2:2B:66:07:04:55:A4:9B:4A:DD:04:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:24:66:8c:95:bf:10:6e:3a:53:db:dd:72:14:35:5b:46:
         cb:67:66:c6:14:98:1e:f3:f5:30:0f:64:23:c7:92:3a:e2:c1:
         75:d7:83:cd:42:fc:4c:a9:ac:92:07:b8:e2:dc:12:5c:5f:90:
         c4:ba:f7:5f:a8:75:ea:55:92:cb:93:7a:53:a1:a8:c0:5a:e8:
         57:8e:07:d3:db:ee:43:1f:58:80:76:ed:cc:50:9b:82:ea:d4:
         0a:ac:91:e3:d2:4e:3d:e7:71:33:0e:ab:86:56:96:37:90:ba:
         52:4f:55:14:d2:c4:53:92:93:ee:e6:c8:ab:c9:0c:0f:4c:3e:
         7d:bd:81:83:da:d9:61:a2:61:5b:9c:e2:bc:85:11:f9:6f:fc:
         d0:e3:ff:dc:8c:d4:7f:7d:3f:7d:0a:eb:c3:48:7b:80:e6:28:
         de:4e:18:d4:cf:c6:eb:b7:a9:28:d9:9e:1c:cf:65:15:8b:c6:
         65:ee:96:98:c7:e6:09:85:1f:fd:c8:44:9e:32:20:95:cb:d8:
         85:09:8d:0f:d0:41:5d:d3:48:56:08:a1:0e:6f:d3:d9:2f:89:
         5b:8a:06:fe:59:da:f5:dc:ad:d8:8a:8a:95:33:5d:4a:12:46:
         11:0c:aa:46:9e:77:c8:51:71:cc:ac:04:57:51:57:47:e1:39:
         96:b8:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org