Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0d048c3-b4da-3e6f-b899-df4d2f884a4f.roa
File:                     b0d048c3-b4da-3e6f-b899-df4d2f884a4f.roa (raw, json)
Hash identifier:          ot1o/eCdr0tFb0mdsw0Ho0hFnoQ4WbH0j9VZYFGfqwE=
Subject key identifier:   52:9F:BE:E7:CB:EB:F7:F5:4C:AF:8F:DF:7F:7F:42:9A:3E:0D:93:03
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE0D3D7604FFB7259FAE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0d048c3-b4da-3e6f-b899-df4d2f884a4f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.62.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e0:d3:d7:60:4f:fb:72:59:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f369b95c-b52d-4c31-9a93-62c578d6fd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:13:16:94:db:e0:af:cd:f1:3f:0b:83:6e:
                    ef:a7:e0:cf:7e:a4:c1:9e:f8:9f:7e:14:81:2d:9f:
                    3e:22:a4:1b:dd:00:f7:ca:d6:01:8c:15:4a:21:b7:
                    7b:e0:a4:09:c4:1c:a7:10:4f:fe:98:ad:09:31:0f:
                    a4:08:a3:2e:b3:90:5f:1d:2e:bb:26:b3:c5:87:88:
                    6d:52:b2:18:a4:05:f8:66:a0:ae:73:8f:46:70:63:
                    30:2b:55:88:d3:0a:71:a4:5e:c4:8c:5d:cc:b8:c2:
                    04:02:b6:98:67:04:a4:17:4f:1c:1b:c9:2a:bd:33:
                    0e:09:03:70:3a:7c:91:98:4a:3f:90:04:ae:c3:dd:
                    60:f6:92:9c:71:b0:d0:51:a7:5e:40:76:4a:13:9a:
                    cc:b2:3c:66:8a:1b:6e:3c:90:0e:55:76:5d:48:16:
                    61:28:36:19:ad:37:20:bb:c9:e6:47:f9:82:01:d5:
                    9a:59:6c:f1:1e:db:a4:44:ea:01:16:07:aa:b0:38:
                    e3:57:43:36:dc:9b:58:e1:29:3d:cc:9c:c1:f9:e7:
                    f9:4e:84:4f:e6:fe:08:1c:7d:52:74:87:17:7c:5e:
                    85:d3:66:60:fe:cf:86:b9:b8:d7:49:10:95:88:9f:
                    c0:9d:c1:1e:73:4d:f5:81:a2:49:54:84:96:0a:99:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9F:BE:E7:CB:EB:F7:F5:4C:AF:8F:DF:7F:7F:42:9A:3E:0D:93:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0d048c3-b4da-3e6f-b899-df4d2f884a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:60:97:9e:56:e7:ed:76:61:f2:28:da:91:8f:5f:6c:79:dd:
         f2:86:88:b5:d0:01:26:da:d2:1d:32:15:a4:56:bf:74:28:b5:
         66:cc:38:b7:ec:89:7a:f2:37:04:71:1c:58:0d:27:6d:fc:e6:
         26:44:3a:9e:85:19:ca:50:1a:39:72:4f:09:c2:35:88:70:c3:
         44:6b:44:a2:d8:bd:2a:12:eb:06:24:36:33:ba:60:35:1d:67:
         5d:6b:e7:51:c3:d4:62:37:8e:7c:67:8d:eb:9d:f6:b4:a9:7b:
         16:25:f8:91:e4:08:84:a8:59:26:07:c6:bf:01:1c:d3:d9:6d:
         6e:29:0c:88:eb:97:72:be:d2:78:17:cf:f9:5e:03:92:14:60:
         f8:8e:19:d2:c8:1e:53:95:e0:a7:08:34:69:03:5f:2c:32:48:
         da:06:36:c5:89:e5:90:83:6b:79:85:1f:86:da:a7:79:98:d9:
         a9:0b:c9:ea:b0:a7:64:e8:44:32:94:cc:be:df:5e:80:48:b5:
         9f:ca:d8:86:6c:ef:64:e4:ca:01:2b:8f:fd:be:88:8f:01:ca:
         a5:f0:5b:73:48:5c:66:21:2a:83:9f:ed:7d:8b:18:ae:eb:82:
         bf:08:4e:c1:c3:b8:02:27:66:b1:ee:52:de:01:79:7f:3c:74:
         ee:27:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:18 2024 by rpki-client on console-ams.rpki-client.org