Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ff0c68d-a4aa-3d75-b7fc-98971566d580.roa
File:                     9ff0c68d-a4aa-3d75-b7fc-98971566d580.roa (raw, json)
Hash identifier:          XgjTFjK95KA6mpqcg2PRLXGz1Vj1G6Sh9L4VMCVLoek=
Subject key identifier:   E7:8C:DC:2B:60:6C:3C:B6:E2:AC:5A:57:EE:5B:11:3C:89:5D:CF:3B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A90628B3E5059FED56050
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ff0c68d-a4aa-3d75-b7fc-98971566d580.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.62.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:90:62:8b:3e:50:59:fe:d5:60:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b771e0ff-83bd-47fa-97e1-c7b767462b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:f5:05:b4:d8:39:54:88:36:ce:b5:9a:3b:
                    d1:1d:03:0a:ca:7b:a6:e2:35:55:d3:65:c1:74:b1:
                    ac:55:a7:c2:60:3e:1c:11:00:bd:8f:35:9b:8b:62:
                    49:62:2b:a0:fd:ab:7d:5b:25:4c:87:74:5e:93:01:
                    1d:9f:8e:12:1c:40:06:12:56:7f:e6:62:71:81:ed:
                    be:0a:32:de:68:7b:d2:48:83:62:88:ea:72:fc:28:
                    d1:78:75:ff:c7:bf:77:c5:06:9d:49:91:a9:ce:5d:
                    c5:c5:b1:e3:e6:66:67:30:d6:13:48:1a:30:11:2d:
                    c9:91:be:b2:b1:8f:66:5e:61:bb:77:5f:eb:28:fa:
                    13:27:5e:e6:a0:2d:bc:b3:c4:fc:26:ee:4f:e0:6f:
                    a1:f9:fa:b4:f5:bd:22:27:e5:71:45:a1:24:89:90:
                    22:10:e5:9d:3a:64:e9:cc:b4:49:8a:99:65:82:9c:
                    40:97:4b:cf:f5:66:a2:5f:3a:e7:52:0c:bb:6b:71:
                    a2:d5:20:26:44:95:da:65:2a:2e:7a:bc:92:a0:da:
                    91:c6:72:1b:d9:ac:f2:fe:2f:ca:9c:57:ff:8c:38:
                    f2:bf:b4:26:0b:dd:e4:94:7d:77:c2:39:00:b9:e3:
                    e8:2e:f3:b2:90:6e:86:e4:75:de:ed:0d:ae:bb:f2:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8C:DC:2B:60:6C:3C:B6:E2:AC:5A:57:EE:5B:11:3C:89:5D:CF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ff0c68d-a4aa-3d75-b7fc-98971566d580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:20:11:55:21:0d:89:1b:19:93:41:8c:c1:a5:98:c2:69:4e:
         b8:85:8f:e5:49:15:92:9b:bc:ba:e0:a8:2f:11:4a:28:15:9e:
         f3:c7:a1:1d:d1:ef:34:d9:6c:81:8d:6a:97:37:31:b7:57:11:
         c9:4d:b7:14:b0:1d:0f:82:8c:0e:44:7d:74:be:5e:af:d2:28:
         fe:e6:50:d3:60:cc:ff:36:93:d5:05:7d:d7:b4:02:ec:81:cb:
         78:7c:47:c3:c1:6a:6c:89:35:6a:14:11:7f:08:8b:4b:2a:06:
         f8:a2:32:dc:9d:14:64:cc:9c:35:ba:9c:05:ff:8e:7b:c3:db:
         a8:2b:73:aa:00:50:ea:1e:26:40:39:1e:51:7a:cb:6e:0f:11:
         0f:65:26:01:45:58:ad:b8:08:45:1a:83:03:1f:05:c3:f0:6e:
         9a:ed:bd:50:4c:8c:cc:55:24:00:1c:21:44:f0:6b:3f:01:c3:
         e1:83:69:dd:6f:17:ec:e1:d2:de:11:a4:6d:89:b8:3f:c5:3d:
         e6:9f:a5:00:da:ad:df:a6:a1:7b:cb:e5:25:f9:25:cd:11:f7:
         91:50:84:3b:88:d5:af:1d:b9:5b:04:f5:35:c5:73:10:c6:43:
         55:f1:1e:c7:6c:17:c3:d1:39:f0:66:38:e0:c2:3e:d0:03:0c:
         d7:3a:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:05 2024 by rpki-client on console-fra.rpki-client.org