Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2467165-6937-38e5-895e-14ae6b8550bb.roa
File:                     a2467165-6937-38e5-895e-14ae6b8550bb.roa (raw, json)
Hash identifier:          jAnJoJ2gsM6O3UuDqpTVjeSpVkezJP6jZ8arnEHeKvM=
Subject key identifier:   67:90:69:B2:77:63:5B:93:3C:A3:7A:3D:08:50:AF:31:49:79:D3:32
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE9090E25BAE8C4918200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2467165-6937-38e5-895e-14ae6b8550bb.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e9:09:0e:25:ba:e8:c4:91:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=cbeaf374-b33f-4492-a604-1de387e3c6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:29:a9:b8:01:63:2e:c8:8c:fc:42:2b:aa:
                    d3:39:23:a6:de:81:7c:8d:8a:05:b0:bb:b6:af:ef:
                    0f:f3:0c:59:76:89:b1:a4:17:8b:6a:28:2c:a6:59:
                    f1:f7:09:54:b0:b5:07:b3:64:5f:df:8d:31:79:79:
                    8a:97:fe:83:26:a7:6b:20:6d:9d:dc:2e:74:96:4a:
                    77:7b:2f:d7:ce:be:c3:70:b4:0b:52:c2:93:a6:8c:
                    2e:1d:51:f0:2c:98:90:80:7f:86:d7:cc:4d:e5:c0:
                    41:28:63:5b:9f:f4:fb:d6:b9:45:01:96:6b:9b:52:
                    01:32:5b:6a:71:e2:c6:82:c1:25:c3:b4:9e:7c:96:
                    0a:92:22:1c:be:34:83:0d:fa:af:ee:53:05:f8:c4:
                    bc:42:a6:13:1f:0b:be:75:1c:a8:59:2c:5e:2f:3e:
                    72:22:5d:b4:96:aa:e8:81:4d:e6:35:fe:2e:ff:70:
                    4e:08:e9:b5:25:99:7a:b1:ae:9d:43:4d:1b:ab:97:
                    1c:cc:92:63:40:df:66:6a:7c:44:11:d5:3d:54:f2:
                    ed:ef:f7:70:2d:f7:b3:b0:b6:ac:d1:60:97:27:0f:
                    b6:5f:d2:ae:fc:94:db:08:94:ea:da:8b:c0:04:c2:
                    f6:79:4a:d5:55:ad:19:e5:8b:d8:ea:82:ec:ea:d2:
                    9d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:90:69:B2:77:63:5B:93:3C:A3:7A:3D:08:50:AF:31:49:79:D3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2467165-6937-38e5-895e-14ae6b8550bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:74:a3:87:da:a1:9a:29:50:83:72:9f:11:d0:d3:4b:61:8d:
         27:47:5d:8d:d4:cf:bc:82:2e:b2:dc:8c:17:50:43:f4:00:de:
         43:61:fd:c7:ac:66:52:47:24:08:eb:42:8e:8a:76:4d:fa:b0:
         02:0e:7e:67:9e:f6:ea:69:56:c7:8e:6d:73:ef:37:78:00:16:
         5d:ef:d1:f4:28:52:9c:2b:0f:87:74:b4:88:b2:40:be:a3:23:
         66:4a:d4:cd:a6:80:ac:28:79:c1:6c:15:97:d2:66:b8:c5:2d:
         90:54:f8:c6:e6:d9:63:a1:d4:88:64:78:81:ec:75:af:0c:22:
         5f:6d:0f:6e:3d:fe:f5:a8:ef:99:81:9c:58:94:87:26:de:35:
         b2:c1:9c:a0:55:6b:37:c5:97:d9:43:ab:ad:79:a4:45:f0:af:
         bf:4d:c7:80:c1:86:03:e3:44:45:8d:2f:27:f6:35:a0:a9:97:
         1f:60:70:51:e2:86:93:d9:f1:c5:e9:b6:7a:b6:51:2c:2e:6a:
         4b:d5:aa:55:6c:f9:b3:b2:09:c9:aa:42:80:82:2b:c3:7d:9a:
         80:3a:6b:0e:52:ee:75:d2:28:d3:ce:13:a1:e1:f9:10:09:34:
         b0:fc:ec:4e:c6:3f:7b:5c:98:18:51:2c:dd:0d:8b:a3:4e:98:
         97:9f:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org