Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4045ce9-8331-35ce-9348-b4f63607eaf3.roa
File:                     b4045ce9-8331-35ce-9348-b4f63607eaf3.roa (raw, json)
Hash identifier:          46IKL3CdlYrbkE4e3Ed+1WcSx3d76TDeGn+m6+o3pN0=
Subject key identifier:   BB:4F:A4:C3:6E:47:23:5A:B1:7A:36:27:F0:0A:6A:A2:52:D1:C4:D2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E5B616651A3E90ED9E520
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4045ce9-8331-35ce-9348-b4f63607eaf3.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.62.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:5b:61:66:51:a3:e9:0e:d9:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3f9f5696-8501-4e3e-a6d8-38d48006faad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:35:05:aa:67:33:2c:9c:a6:93:da:26:d7:
                    ec:6e:35:8c:3e:28:8f:79:25:15:64:86:bc:09:ae:
                    ff:b5:53:8a:54:fd:8d:9f:f7:e7:12:88:62:df:85:
                    7a:36:be:32:f4:39:ab:77:15:27:d5:b7:e6:33:4e:
                    0b:69:29:78:42:77:c8:5a:ff:00:c7:c7:68:8d:c3:
                    e8:b5:a7:d6:fb:fe:91:2e:77:d0:d0:65:c4:f8:21:
                    99:30:55:9e:c6:10:56:e9:99:f0:1e:fd:54:f3:be:
                    60:4c:27:6d:80:cc:01:d3:8b:e9:94:44:6b:c2:88:
                    c0:32:77:3b:74:b6:41:b0:be:4e:4d:d8:b4:15:60:
                    8e:d2:c8:08:ff:7e:ea:14:9e:08:91:3b:06:7b:40:
                    c6:59:09:73:5a:ff:70:0e:21:c7:5a:99:47:a1:36:
                    11:8e:b6:68:2d:86:13:36:4f:48:3d:8a:b6:92:d6:
                    28:49:d5:8e:6d:e3:7c:9c:2a:11:8d:51:27:ea:31:
                    4c:a1:31:fe:60:c7:8b:e0:e2:5f:06:8d:05:d0:16:
                    26:17:94:a2:c4:65:0b:4f:de:2f:c5:bd:db:ec:11:
                    6f:f5:72:5a:ef:25:e7:7f:15:40:8f:61:95:1b:cb:
                    ab:21:c4:e6:fb:6c:0c:d4:00:59:8c:a3:cb:03:65:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4F:A4:C3:6E:47:23:5A:B1:7A:36:27:F0:0A:6A:A2:52:D1:C4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4045ce9-8331-35ce-9348-b4f63607eaf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:a1:f9:f0:74:bf:b8:3f:15:dc:ba:70:5d:68:bc:ab:75:
         d6:c6:86:de:47:e4:72:fd:af:c4:62:7f:84:93:36:45:07:e7:
         38:76:79:43:db:ba:2d:df:2e:8f:86:ea:81:ee:21:5a:ec:9b:
         96:13:4b:5b:14:31:27:aa:46:06:77:f3:e6:ec:49:5c:15:f5:
         ba:4a:b9:08:c4:27:4a:cf:ae:bc:c8:6e:df:c8:4c:74:9e:19:
         8f:45:e9:44:3c:67:06:b2:5d:1a:a5:0b:43:e0:32:93:5f:d0:
         e6:e3:91:9c:da:bc:23:6a:07:6f:32:83:f3:42:68:1f:0d:e7:
         07:a2:29:53:11:62:81:ef:5f:0a:72:d3:8c:21:ef:9d:35:89:
         83:02:cf:dd:e5:b6:6c:1e:48:0f:e9:1f:4c:c8:99:83:ba:50:
         c8:b3:cd:25:bf:72:4b:68:c7:8b:1b:9d:fa:a8:20:72:b1:db:
         7f:78:18:ef:f6:6b:75:83:f8:f8:b1:00:47:21:69:c1:58:83:
         60:7a:6a:19:93:72:89:b8:32:cc:8e:57:b5:06:14:41:65:f6:
         a8:29:1a:30:a8:8f:16:6e:14:43:f7:84:76:1e:49:0b:cc:7a:
         20:f9:00:cc:f8:84:d1:dd:3f:9e:87:60:db:2b:86:75:91:32:
         23:7d:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:46 2024 by rpki-client on console-ams.rpki-client.org