Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa
File:                     b05a4aea-c17e-3408-95a4-0235bebd1267.roa (raw, json)
Hash identifier:          FfS+ycQys6XOKq5fMgOQeHgsHV/s1mq19MpZaPeQQJ4=
Subject key identifier:   3B:D4:F9:8B:61:BA:50:1A:2A:FE:AF:17:0C:9A:F3:27:B6:1A:94:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7D88409D7CE17068EE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7d:88:40:9d:7c:e1:70:68:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=dbf2663a-6348-47da-a32c-03311d6c11c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:dd:06:49:6a:4c:ab:c1:a8:86:ce:e6:51:
                    f2:10:00:90:f2:ab:69:d7:08:fa:da:19:bc:5a:6b:
                    03:90:9b:f5:8f:b0:eb:ee:b1:4c:ac:b6:6c:f6:10:
                    32:7e:45:65:ec:e4:25:1e:a4:e5:dd:5a:f3:70:5a:
                    74:e7:9b:69:77:11:65:46:84:95:ce:33:e0:c9:8f:
                    90:d2:32:62:69:02:b1:e4:66:1f:9a:e7:d8:59:89:
                    8f:8e:e7:d3:23:39:10:a8:5e:e0:f0:1e:37:93:ab:
                    41:03:23:89:16:9a:7d:26:3a:04:ce:79:6e:4f:81:
                    a0:7e:a1:cb:8b:ce:cb:e4:da:17:5f:d0:77:61:d2:
                    b4:cf:0b:1a:92:b8:6b:41:40:3b:95:32:a2:3f:0a:
                    54:20:e4:f9:cc:ec:fe:3f:7a:38:b9:88:ea:3e:eb:
                    85:0c:68:09:15:e7:cf:58:81:e2:18:36:42:d9:7a:
                    e6:10:38:1f:25:57:cc:74:1c:27:f9:d2:d9:24:28:
                    84:d0:6c:89:27:69:a9:a8:24:1d:13:48:41:cb:92:
                    f3:89:ed:28:d0:1b:8e:ea:1c:74:dc:1e:f2:6e:cb:
                    b0:9b:7b:44:d0:67:f9:cd:e4:f1:a8:71:9d:f2:66:
                    7f:73:b7:0d:e1:11:86:94:18:85:59:24:8c:d9:8d:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D4:F9:8B:61:BA:50:1A:2A:FE:AF:17:0C:9A:F3:27:B6:1A:94:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:5a:3e:04:40:1f:d8:48:24:5c:62:fa:b0:f0:ab:19:4c:
         ed:9d:b5:2e:b1:fa:09:ad:59:15:db:85:c7:5b:c8:e6:8e:27:
         c1:bb:ec:a6:7c:57:b9:17:d3:b9:a8:f4:2c:c6:86:28:36:23:
         55:3f:2b:97:e3:bf:a2:f7:7f:75:5e:a7:5a:90:8f:33:58:5d:
         6a:db:7f:3d:8a:87:6f:7b:c6:89:10:cd:9f:34:7f:dc:a5:b7:
         38:07:91:de:4c:36:cb:d7:b1:96:8b:8a:16:81:fb:e7:5c:7b:
         af:af:37:82:ca:50:db:ca:2a:4a:af:5c:be:1b:dd:47:25:30:
         3f:14:51:6f:7a:7b:95:5a:44:ad:3b:ad:1a:46:35:78:63:43:
         67:95:e0:cb:a9:64:d9:af:2c:e7:f1:e9:14:47:c1:e9:05:8f:
         12:90:52:98:79:98:ff:a9:91:fb:43:ef:bc:ab:f8:ac:34:3b:
         70:79:7e:ce:d5:a8:8e:bf:84:aa:d9:26:b5:47:3a:20:27:e0:
         ac:d0:3b:fa:51:e5:26:8d:ac:cb:de:b3:d0:34:57:7e:fe:bb:
         84:d1:10:fb:9b:df:86:8e:81:95:75:16:cf:d6:94:a2:8c:2f:
         ad:1e:63:b3:29:b0:ad:cb:04:f9:ee:0b:c2:b9:4b:74:1f:a7:
         1e:1e:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:55:42 2024 by rpki-client on console-fra.rpki-client.org