Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cac412d2-feef-35c7-af0e-8d25b616a1d3.roa
File:                     cac412d2-feef-35c7-af0e-8d25b616a1d3.roa (raw, json)
Hash identifier:          epYz+sSiwVj+6I5rZkjUUvGeloeSUcg+OzgAPRb1Rfk=
Subject key identifier:   70:0E:93:77:C5:7D:76:96:FF:85:BD:49:1B:A5:25:16:4D:9A:F8:D0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E5E341003E740C74B4400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cac412d2-feef-35c7-af0e-8d25b616a1d3.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.62.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:5e:34:10:03:e7:40:c7:4b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=80047aee-4c9e-4b43-a73b-3b089d1f0feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:90:00:40:b1:91:08:42:76:12:90:5b:6d:
                    af:bd:2f:a5:c3:e1:51:75:10:91:07:a2:31:54:85:
                    05:c5:f4:dc:4e:2a:9f:0c:6d:77:ee:cc:15:07:71:
                    e8:c9:25:d6:dc:30:52:c6:b6:a3:47:f5:9b:42:c5:
                    6c:3f:14:78:c6:71:d8:59:25:35:0a:6e:9b:c6:f2:
                    e8:7d:85:8d:76:0c:41:c3:d5:3c:81:7a:fd:1d:38:
                    a3:b5:81:90:03:3b:7f:1a:c6:66:46:40:73:b2:e8:
                    12:31:0a:88:0b:9a:92:91:9f:7b:a3:6c:7e:d0:48:
                    0c:b6:61:fc:77:f7:bf:d8:59:d7:e8:4d:c2:68:a2:
                    4c:ce:70:49:8f:03:4f:c9:83:6b:d5:3f:20:2f:3f:
                    07:c8:2b:bc:d3:67:7e:86:0a:26:72:57:ae:c5:0c:
                    b7:71:1f:86:33:eb:53:78:37:6b:ac:85:46:11:9c:
                    82:b9:0e:d5:0b:36:e3:0c:ee:33:29:72:a7:b2:5e:
                    e6:0d:26:75:85:d6:e8:7b:66:08:74:89:c8:9e:17:
                    f2:a4:9f:40:89:33:87:8c:46:ce:88:d8:80:8f:65:
                    4c:3c:83:67:66:87:87:82:bf:bc:6b:17:ac:20:1f:
                    5f:8a:2e:d3:cd:1c:39:b1:af:8c:eb:03:56:83:26:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0E:93:77:C5:7D:76:96:FF:85:BD:49:1B:A5:25:16:4D:9A:F8:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cac412d2-feef-35c7-af0e-8d25b616a1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:dd:79:9d:70:08:11:ad:49:ae:6a:d1:15:b0:70:b5:f4:
         12:92:96:f2:94:0d:cc:a7:64:b3:15:9f:4d:12:de:dc:12:16:
         e8:4b:39:9e:11:a2:a8:bb:de:33:8f:04:a8:49:3a:8e:34:bc:
         20:d4:b0:be:95:23:d9:f7:bc:64:9b:5d:6c:9f:cf:5d:b3:b5:
         ec:89:02:0b:92:7e:11:f3:0d:c3:2d:da:be:64:aa:6d:eb:4b:
         1d:98:21:4d:90:56:b4:30:0b:bd:0d:b0:29:51:5e:c1:af:d3:
         3a:47:94:ee:e7:5a:cb:f3:cd:b7:4f:0d:2b:c0:3d:2b:31:d5:
         82:74:28:cc:a7:d6:df:e9:71:95:5d:41:fc:d5:8d:8d:29:78:
         70:f2:5a:16:98:1d:64:8e:1a:72:3d:6e:11:1f:81:d3:de:e6:
         72:fc:cb:dc:9e:cf:cc:b0:cd:20:ed:11:d6:eb:44:48:0e:22:
         f5:00:be:12:41:0a:46:b3:7f:ab:28:4d:59:1b:d6:16:91:3f:
         36:03:65:b8:5c:80:ab:e7:15:b1:6c:30:d0:76:01:ce:60:4b:
         51:92:1d:2f:c8:64:56:dc:50:29:27:5e:6e:de:88:a1:ea:7c:
         2c:a4:3a:52:0e:91:8d:e3:34:d4:6f:09:05:2c:f1:18:25:75:
         cf:ff:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:48 2024 by rpki-client on console-ams.rpki-client.org