Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6e9f9c-ff5b-39c4-84e1-71cc03cc3b63.roa
File:                     ae6e9f9c-ff5b-39c4-84e1-71cc03cc3b63.roa (raw, json)
Hash identifier:          FaL5qBoodSMXm7uhQgbJCBTFBrbDYG1Z5KIUEC4HsAs=
Subject key identifier:   78:0A:84:5D:B1:40:1D:DE:B2:DC:37:31:D2:B7:CA:A8:5C:36:6A:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F432858470551381035EBFE1EB0F58560
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6e9f9c-ff5b-39c4-84e1-71cc03cc3b63.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     7155
IP address blocks:        184.21.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:51:38:10:35:eb:fe:1e:b0:f5:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=b1f24a25-76b7-4296-9703-2af607f0b61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:4e:f5:85:bd:2d:8c:2c:c0:e3:c2:ef:96:
                    bd:96:24:f2:7d:00:81:d1:6c:de:8e:88:2f:d0:1c:
                    80:d6:b6:a9:86:d4:63:5a:8c:bf:9a:1c:cc:f4:7c:
                    1d:8b:60:4d:91:aa:7c:d5:a6:a2:40:97:ce:f9:79:
                    23:d0:7a:8a:ed:92:87:9d:0d:be:82:a5:c8:61:89:
                    f1:57:3e:26:8c:39:f0:3b:fa:79:55:2c:bd:d2:c3:
                    ec:0a:39:e8:a8:b8:f9:bc:d9:fd:3b:49:19:14:08:
                    cd:08:ad:69:10:68:0b:f6:03:81:f6:e4:37:38:a4:
                    c8:16:5b:0f:6d:05:2f:ac:6b:f0:c2:95:87:04:49:
                    b5:1f:f0:3f:2a:ac:20:8e:dd:d5:8c:2a:ea:fc:12:
                    45:7a:df:ad:ee:f2:5c:ae:3d:8a:89:2a:b7:10:c1:
                    de:e3:67:58:0c:e0:59:15:cf:b3:f7:ed:61:ab:97:
                    e6:25:cb:dc:2f:76:ce:61:bf:0f:9e:be:f1:16:05:
                    17:96:4c:87:74:89:80:73:20:6d:b1:11:5a:ce:61:
                    3f:2f:75:2a:78:c6:f1:d2:55:ec:2a:38:93:f9:15:
                    08:40:bc:e7:b4:79:fe:6e:90:df:18:75:0b:e0:71:
                    7b:dc:e1:22:f2:0d:27:e0:db:2c:a6:e0:7f:58:f4:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0A:84:5D:B1:40:1D:DE:B2:DC:37:31:D2:B7:CA:A8:5C:36:6A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6e9f9c-ff5b-39c4-84e1-71cc03cc3b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5c:34:6c:6b:05:7b:bf:cc:41:a1:b6:0b:50:0d:23:04:f5:
         46:37:b3:63:2f:8e:a5:ac:03:8b:3e:9b:bf:48:54:c4:57:38:
         b9:d1:bb:24:fc:fb:62:90:fb:c9:f2:36:b1:83:71:b7:37:fd:
         08:d2:35:21:15:3c:5b:ae:98:bd:64:d1:08:17:d2:4a:1a:d3:
         f0:52:ed:d3:e6:2b:97:66:6f:36:ad:01:b0:ff:1a:e9:9d:99:
         16:00:fa:b1:65:9b:94:95:84:a4:d6:5d:ca:24:36:d0:03:2b:
         e5:e6:d6:37:93:de:8c:4e:a8:fc:61:55:a0:5b:21:54:39:3e:
         52:29:cd:f5:14:f3:f7:68:67:93:d8:d9:38:68:0c:6f:55:a2:
         de:7d:cd:cd:1e:ea:dc:77:73:20:a3:1e:2b:f5:ba:49:e2:46:
         82:81:1e:41:b4:2d:af:23:74:69:2d:28:15:4b:8a:eb:af:a5:
         a4:a0:dd:f3:95:c8:f1:50:4a:68:db:6f:92:1b:f6:87:a5:a2:
         2f:1d:20:11:7b:0e:38:aa:37:72:ab:f1:63:4a:3f:bf:da:1b:
         72:c5:04:b7:52:3d:68:60:5c:a4:0d:11:87:b5:1d:72:a9:4d:
         21:51:7b:2b:31:63:a4:97:74:00:e3:27:a9:5d:bb:d0:82:1b:
         ce:28:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:04:01 2024 by rpki-client on console-ams.rpki-client.org