Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc009845-ba9d-36d0-a4d4-574654d93121.roa
File:                     cc009845-ba9d-36d0-a4d4-574654d93121.roa (raw, json)
Hash identifier:          hoYnVZsw8FZbKMeXYqjO5+83RAp8Ed9ve55Ntx+akPQ=
Subject key identifier:   5D:93:B3:87:08:8E:89:23:AC:FD:35:1C:6C:F2:63:67:4A:80:EF:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DDA894381606BBAE78280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc009845-ba9d-36d0-a4d4-574654d93121.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:da:89:43:81:60:6b:ba:e7:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=b1b8ce4f-59f0-4f27-b7c6-670938137177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4e:39:24:6f:ae:fa:83:31:a1:a3:f6:83:97:
                    b9:42:4f:22:18:29:bd:b9:3a:16:e0:ea:9a:66:56:
                    45:94:70:5e:9f:be:71:d8:fc:78:a8:91:9c:aa:22:
                    ce:99:e0:28:d2:5b:ce:27:b3:a6:68:c0:07:50:62:
                    d1:4d:2e:dd:42:a0:c6:bf:bc:14:b7:01:64:08:4f:
                    dc:e9:17:3d:dc:c7:6f:0b:3a:f0:d4:87:81:53:77:
                    47:d7:ec:84:aa:20:a0:53:7e:cd:94:2f:6a:60:8e:
                    6c:63:6c:83:da:b6:41:fc:d6:37:81:cd:58:66:8d:
                    a6:40:40:40:16:53:f0:f3:c8:e5:23:d4:ce:37:be:
                    92:71:7b:05:f9:4f:a5:d6:fa:76:db:be:b8:48:a1:
                    2a:ea:aa:a6:25:a5:31:39:87:9a:36:18:1e:5d:0b:
                    0f:6a:9f:97:de:89:52:31:d1:45:9a:49:1d:08:3a:
                    0b:87:03:75:02:de:b6:b8:d0:14:71:96:e8:47:24:
                    29:5d:47:73:d9:5f:5b:a6:54:8b:bf:a4:00:4a:0f:
                    ac:dc:34:85:65:0e:c2:bb:8f:61:49:02:07:5b:cc:
                    5a:dc:20:d6:8b:9d:4c:fd:58:c6:1f:93:31:d6:3f:
                    25:b9:ad:25:40:40:38:ca:bb:11:7f:2b:1b:a0:fd:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:93:B3:87:08:8E:89:23:AC:FD:35:1C:6C:F2:63:67:4A:80:EF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc009845-ba9d-36d0-a4d4-574654d93121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:24:c1:09:e0:70:db:72:6f:dd:78:ca:fe:ac:d4:32:c2:e0:
         e1:5c:ed:5f:78:ac:22:4c:da:1f:25:7d:90:aa:08:2a:c8:6b:
         83:32:5c:d0:97:aa:c4:b4:0f:db:2f:81:a0:86:61:bb:c4:4c:
         0e:ef:da:69:1b:6f:6a:19:3b:9c:55:50:66:47:44:35:e5:00:
         36:13:43:86:8f:9f:b6:f1:da:26:cb:03:87:58:29:73:61:5e:
         62:0c:91:7e:c9:f3:b2:39:3e:58:9b:b9:74:06:c4:80:0f:cd:
         0c:61:85:8e:7b:df:32:85:4e:16:a0:59:ed:dc:09:af:23:64:
         5d:b1:1e:60:f3:9d:aa:b3:f8:dd:c4:a9:af:09:da:68:e5:d7:
         4e:4c:38:1f:f6:89:2a:8b:02:29:d1:2a:78:61:63:39:dd:4a:
         53:0e:3c:1d:ab:99:bc:77:e0:98:2e:0d:a8:cc:83:e3:1f:28:
         be:7e:fb:76:96:41:0e:02:ba:a2:88:55:6c:9f:b6:62:5e:2a:
         1c:ec:0c:3b:96:03:7a:01:01:74:43:a4:02:1c:18:43:a2:8e:
         7c:a8:24:39:ad:46:ce:df:11:a0:3a:d2:96:dd:6a:48:e8:83:
         fe:5e:37:90:c0:82:5a:8c:cb:f7:16:08:b4:28:b6:02:ac:57:
         53:7b:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:19 2024 by rpki-client on console-ams.rpki-client.org