Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa
File:                     cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa (raw, json)
Hash identifier:          KNVtyq315rlJMCVvOrF9yeixHVhCiyJiDcAQ91DCAXM=
Subject key identifier:   F4:CC:7B:53:AA:73:C3:B6:5B:05:4B:56:F7:C6:2D:33:5E:F9:D0:A7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B12D743E07F0439954A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:12:d7:43:e0:7f:04:39:95:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=de3f28c5-d263-4a1e-b374-b07846ae9dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:22:ea:90:2c:b4:29:4f:37:60:f8:d2:41:
                    53:2e:03:c2:25:37:22:ed:35:f9:07:56:d9:ff:02:
                    70:b7:64:fe:17:f8:7d:9f:db:e8:15:00:56:f1:66:
                    c9:39:b7:3f:52:ec:5b:55:9e:66:78:31:a2:33:07:
                    e5:f8:16:96:7f:ec:e9:97:b5:f3:59:11:ce:af:fb:
                    f9:36:c2:81:59:f3:ea:63:5f:d9:88:01:1a:6c:51:
                    a0:1d:da:22:15:48:59:b8:24:35:a7:53:27:11:66:
                    36:fb:36:d9:db:ed:de:ec:7f:e9:16:ab:d8:72:9e:
                    d6:d9:0c:b4:23:79:a8:ce:17:2a:92:c2:fe:28:44:
                    5b:37:da:f8:ed:64:ac:8d:3e:3d:83:0c:5f:ac:6c:
                    eb:f2:8b:4d:5a:aa:a3:c9:13:9e:de:16:b4:63:f2:
                    7d:75:8c:44:43:d2:4c:77:3a:65:7d:5f:e9:3e:dd:
                    ab:d4:b4:7b:3c:ac:f4:00:77:69:9d:e4:66:a4:7e:
                    d9:63:d5:78:9c:b1:25:51:0c:09:39:70:f9:be:35:
                    ae:c4:50:99:e8:42:f8:ba:ba:3b:18:ef:5c:13:5f:
                    2a:7f:17:2c:f8:ef:49:18:97:86:67:e3:94:1d:0b:
                    ab:d6:91:0e:6c:78:e7:81:e4:fb:01:75:fb:b2:d5:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CC:7B:53:AA:73:C3:B6:5B:05:4B:56:F7:C6:2D:33:5E:F9:D0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:71:d7:ba:42:0a:e6:0f:5d:86:5e:d7:2a:7e:a5:0a:15:
         ee:46:96:8d:46:ab:00:f3:10:5f:93:4c:d5:37:57:fa:ba:36:
         85:55:8d:c5:88:19:61:3d:8e:e8:46:a4:3f:61:cc:81:a2:ea:
         55:bb:d2:9c:71:d7:8a:24:fe:3b:d7:c0:d2:76:a9:d1:d5:19:
         e7:39:6d:02:be:f8:f1:08:a3:17:1b:e4:5d:12:cb:6d:59:46:
         6a:ac:24:4b:24:43:86:90:3b:21:bb:22:e5:4f:5d:7d:6e:74:
         0d:0a:a9:ef:e1:d5:b6:19:d1:fc:1d:3f:f0:e4:ef:87:19:40:
         9e:e6:52:24:3d:88:86:1b:1a:4f:58:59:df:e8:4b:ad:ae:3f:
         5d:b1:74:02:43:8d:5f:ca:61:97:52:2a:e0:63:4b:23:40:95:
         e6:55:a7:7b:55:2a:12:98:fa:33:9e:ef:93:f6:2c:61:5c:b4:
         10:62:82:10:25:c4:96:67:8f:30:a8:59:46:82:e6:33:9d:39:
         bc:4d:fa:a2:80:1b:71:b8:a4:bf:05:d8:1e:b1:29:0d:8c:a0:
         89:ed:4d:e9:da:54:3e:94:8c:47:7e:8f:b0:28:c0:ee:c4:88:
         0b:63:3c:67:25:83:94:ac:a9:13:d4:79:1b:9a:23:cd:19:6f:
         77:bb:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:27 2024 by rpki-client on console-fra.rpki-client.org