Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cf7a4fb-c475-31eb-8463-dcbd692f848c.roa
File:                     9cf7a4fb-c475-31eb-8463-dcbd692f848c.roa (raw, json)
Hash identifier:          EfwMEXSlSdXHG220qKjxxaRiefIHcgIACJxPIlugnTU=
Subject key identifier:   56:05:49:56:EE:7C:5D:BF:41:55:C7:D2:A8:CF:AD:CB:56:AA:39:1B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E516791135926E76D2EE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cf7a4fb-c475-31eb-8463-dcbd692f848c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:51:67:91:13:59:26:e7:6d:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7c432e23-7936-403c-a775-3f23fb9576ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:32:ac:38:fd:da:a5:fb:43:a9:db:5d:a6:
                    9b:fb:98:be:f7:ab:ed:cf:03:cb:88:ef:46:8a:f8:
                    42:82:b3:1a:77:68:34:4e:58:af:a9:b8:d6:d3:f2:
                    96:38:83:90:6c:0e:a4:63:16:7a:70:03:e9:2f:69:
                    7e:2e:dd:87:e9:d1:fb:18:46:0a:4a:bc:f8:ad:1d:
                    18:c4:5d:98:42:80:e2:70:93:5a:49:7a:1a:f4:6a:
                    82:7e:dc:ce:61:36:15:98:37:78:8a:ac:0d:e3:15:
                    60:03:b9:5d:7a:97:6a:1b:91:9d:0a:4f:50:89:59:
                    42:48:d1:34:75:9c:30:f8:60:8b:a8:82:6c:57:f4:
                    85:a7:7a:7d:1b:5d:c9:7f:c3:e7:a3:59:74:d5:61:
                    80:32:fc:64:04:9b:07:f1:39:fe:e3:1a:3a:62:e3:
                    0b:9e:4e:2f:30:31:17:1b:c0:87:3a:da:8a:19:b8:
                    b0:f8:28:89:0e:10:08:58:aa:29:ef:14:db:01:e2:
                    40:1d:04:a3:ca:37:f5:cb:4b:c8:41:ac:3f:0a:a7:
                    0f:8c:7b:76:81:f9:92:07:2b:9c:52:18:36:27:5c:
                    14:1d:d0:c8:82:1c:d3:17:ab:f9:41:13:f8:94:c1:
                    29:f4:96:5a:ea:ac:51:ca:6c:be:41:86:aa:6f:1b:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:49:56:EE:7C:5D:BF:41:55:C7:D2:A8:CF:AD:CB:56:AA:39:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cf7a4fb-c475-31eb-8463-dcbd692f848c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:08:5c:1f:02:54:f6:a2:33:a1:09:9c:7d:6a:50:fa:cb:e7:
         52:f0:83:76:49:9b:be:40:dc:9c:91:1a:ad:3a:2b:28:11:a7:
         e9:e2:39:ba:8c:58:51:30:cd:5f:fc:37:5a:61:c1:1a:d9:75:
         9e:44:1f:7d:a2:7e:ab:82:dc:88:97:f3:6a:99:e0:76:f4:e6:
         8a:13:cb:84:c0:bd:fd:b1:66:10:73:4d:4a:fd:cc:d8:66:c8:
         52:d4:2f:0a:14:15:fe:aa:35:16:16:8b:e8:dc:7d:17:01:05:
         1f:b3:bd:d9:ff:5d:34:29:01:c6:bf:43:d2:91:82:e5:38:a6:
         0c:89:de:21:fa:3c:21:38:e5:f6:84:b9:f2:c4:d4:c9:3c:37:
         6b:19:82:58:36:27:27:89:62:ca:28:3c:df:64:63:cd:c6:3c:
         6d:e3:ae:94:19:36:90:db:3c:42:54:08:ad:cf:b5:57:33:c6:
         ed:b0:ca:c3:1e:7d:a6:df:42:d1:2a:4b:8b:8b:61:7a:53:53:
         9c:ab:88:11:39:75:52:42:0b:86:ad:67:9e:69:bb:91:33:9f:
         eb:72:98:af:68:b3:90:2b:56:c1:89:fa:39:2d:ef:a2:92:d9:
         4c:f7:ac:d0:72:31:8e:56:ec:ab:2b:eb:dc:2e:2c:2d:6c:9b:
         d0:01:ab:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPlFnkRNZJudtLuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
N2M0MzJlMjMtNzkzNi00MDNjLWE3NzUtM2YyM2ZiOTU3NmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2UyrDj92qX7Q6nbXaab+5i+96vtzwPLiO9G
ivhCgrMad2g0TlivqbjW0/KWOIOQbA6kYxZ6cAPpL2l+Lt2H6dH7GEYKSrz4rR0Y
xF2YQoDicJNaSXoa9GqCftzOYTYVmDd4iqwN4xVgA7ldepdqG5GdCk9QiVlCSNE0
dZww+GCLqIJsV/SFp3p9G13Jf8Pno1l01WGAMvxkBJsH8Tn+4xo6YuMLnk4vMDEX
G8CHOtqKGbiw+CiJDhAIWKop7xTbAeJAHQSjyjf1y0vIQaw/CqcPjHt2gfmSByuc
Uhg2J1wUHdDIghzTF6v5QRP4lMEp9JZa6qxRymy+QYaqbxtiuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYFSVbufF2/QVXH0qjPrctWqjkbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWNmN2E0ZmItYzQ3NS0z
MWViLTg0NjMtZGNiZDY5MmY4NDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAIXB8CVPaiM6EJnH1qUPrL51Lwg3ZJm75A3JyRGq06KygRp+niObqM
WFEwzV/8N1phwRrZdZ5EH32ifquC3IiX82qZ4Hb05ooTy4TAvf2xZhBzTUr9zNhm
yFLULwoUFf6qNRYWi+jcfRcBBR+zvdn/XTQpAca/Q9KRguU4pgyJ3iH6PCE45faE
ufLE1Mk8N2sZglg2JyeJYsooPN9kY83GPG3jrpQZNpDbPEJUCK3PtVczxu2wysMe
fabfQtEqS4uLYXpTU5yriBE5dVJCC4atZ55pu5Ezn+tymK9os5ArVsGJ+jkt76KS
2Uz3rNByMY5W7Ksr69wuLC1sm9ABq58=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org