Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa
File:                     a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa (raw, json)
Hash identifier:          /JYhISCeTWziF/SWKwscxfO24aeKRdyEU/JDMYe6Kpw=
Subject key identifier:   9B:18:DC:A2:74:A7:3E:4A:1C:99:85:E4:79:24:AE:9F:8D:02:1F:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A8851AF65D7B970C2B8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:88:51:af:65:d7:b9:70:c2:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e486830c-9c00-4c9c-b5b7-139b1082dd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:88:09:b3:cc:29:7d:ec:7d:c5:bc:ff:52:
                    13:4c:6c:a6:d3:07:e7:86:66:a2:e0:75:19:29:7e:
                    e5:22:9c:b9:0a:77:15:9e:4c:c1:15:9d:6e:de:68:
                    73:39:a4:79:8f:3f:d7:e5:9d:12:c5:02:89:e4:9f:
                    d8:da:8e:81:0f:6d:59:d8:03:ba:00:ec:6c:c6:80:
                    87:25:57:02:61:fc:ea:50:6e:eb:ac:35:ac:7e:f7:
                    21:cc:29:74:fd:bc:c3:fb:65:8f:58:c7:e2:0d:38:
                    b1:ab:ca:2d:18:49:35:93:52:7d:55:ea:39:50:80:
                    f0:68:09:14:0a:cf:f1:10:9f:59:3d:39:4c:a1:f8:
                    83:5e:30:3e:11:ac:ee:af:53:6b:b3:39:01:29:90:
                    d6:09:ba:3b:3d:26:0b:6e:4f:b2:24:e8:f6:88:e5:
                    46:83:a5:49:f6:fe:21:28:da:20:13:70:3f:28:40:
                    1f:14:e8:ea:50:90:3f:13:6b:80:13:22:00:ed:d5:
                    d6:2a:a1:a3:e4:fa:53:2f:ab:19:e2:1b:a9:f2:08:
                    d8:21:9d:95:00:d5:49:fb:4e:28:37:3f:32:e3:db:
                    56:c0:9e:76:ca:93:23:99:77:78:4d:e3:79:e7:cc:
                    ce:cf:f9:a4:0d:d0:5e:85:c9:fe:fb:30:bd:2b:7b:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:DC:A2:74:A7:3E:4A:1C:99:85:E4:79:24:AE:9F:8D:02:1F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:2f:2d:87:1e:f2:b8:c5:8b:b2:d7:1e:7c:05:82:76:98:9e:
         53:45:c6:5f:21:76:79:9b:52:e7:6b:6b:14:e7:20:f1:3d:28:
         d6:19:3c:1d:4b:fc:a4:68:49:1c:2c:c3:08:52:66:46:15:b2:
         51:cc:9b:39:f6:03:63:6e:65:8a:c5:5b:c4:06:e6:5b:39:f7:
         fb:ec:6d:e0:27:84:68:88:7e:bd:2a:22:8e:df:49:27:74:96:
         c4:3c:91:76:2f:6e:08:f5:b6:14:bf:07:57:1d:79:35:1a:b3:
         ad:1f:37:d4:f4:c2:1f:c8:b2:a7:d7:e8:54:5c:f7:9d:3d:91:
         a5:50:3d:89:6a:13:35:ee:2f:41:66:36:8b:f6:63:b0:c2:4c:
         24:e5:f5:ad:c2:fa:b1:42:d1:f3:46:d5:30:f9:e9:ac:43:c6:
         07:41:a9:1b:6b:6f:dc:33:17:ef:7e:ec:11:82:3e:af:2b:70:
         52:20:d0:c6:9c:77:76:5e:7a:50:52:08:01:61:58:f1:96:24:
         fa:7c:70:a8:5a:9e:b3:f4:43:a2:6e:d2:b3:35:f6:45:8e:95:
         a4:e8:54:e5:91:ad:b6:fb:bc:71:18:b6:5b:2a:40:09:03:be:
         e2:6b:6b:7e:40:91:c9:96:c9:93:fa:0e:88:05:0a:99:2a:e2:
         b3:5e:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:50:41 2024 by rpki-client on console-ams.rpki-client.org