Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d44ba993-5722-36ed-a1aa-970e4e207a7c.roa
File:                     d44ba993-5722-36ed-a1aa-970e4e207a7c.roa (raw, json)
Hash identifier:          qZ71eSYGqz39mhg2Yz7JwT90Vvm6ol8YQeCMI2p9xeE=
Subject key identifier:   6A:7A:8E:35:6B:28:05:C4:A4:DD:4E:74:67:E3:B8:A3:C6:E3:A4:CB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD5377FC536DF88B34450
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d44ba993-5722-36ed-a1aa-970e4e207a7c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d5:37:7f:c5:36:df:88:b3:44:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=65049a27-d631-421a-a62c-4a30b7be56c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:8e:10:88:1d:19:20:84:3f:3a:ef:2c:ae:
                    ab:f5:60:71:f3:4d:92:1e:ed:6f:df:d3:7f:9a:a1:
                    14:03:db:0a:1c:60:7d:fb:ee:86:a7:0e:93:b8:c9:
                    f8:b0:4f:29:ce:86:12:16:9f:46:16:f1:de:b7:b1:
                    f9:3f:d2:67:69:5e:e9:db:1e:08:88:e7:18:da:be:
                    09:63:6a:6a:2a:e6:3f:db:2e:01:b4:83:98:f4:b0:
                    97:f3:67:dd:6c:10:13:37:f8:6e:07:07:f4:a0:a6:
                    a8:35:52:a0:88:3c:4e:27:11:25:4c:11:80:7b:7a:
                    6b:2d:ae:aa:b4:b6:27:a2:69:7f:dd:c2:84:b7:95:
                    96:77:25:f3:c2:8f:fb:e8:12:4d:26:e4:7c:ee:4e:
                    c0:76:29:0f:d9:61:5e:10:65:54:54:1e:c9:16:86:
                    28:cb:85:57:2a:3b:66:e7:9f:96:77:e6:2e:37:a2:
                    06:a3:92:c9:d5:57:df:72:5c:31:f5:3f:16:9f:6c:
                    49:fb:d2:84:c1:7b:c6:83:9f:a1:9e:bc:f0:85:2a:
                    f5:d7:e9:91:57:19:ff:cd:3c:bc:46:57:b4:6c:94:
                    96:ae:b9:12:3c:80:f7:dd:cd:9b:89:8f:9a:ef:e6:
                    ff:e4:79:5f:bb:e8:dc:48:c8:32:a8:20:b0:b4:e0:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7A:8E:35:6B:28:05:C4:A4:DD:4E:74:67:E3:B8:A3:C6:E3:A4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d44ba993-5722-36ed-a1aa-970e4e207a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:00:41:51:79:ea:64:49:09:f8:c8:66:f4:9e:94:2c:f4:35:
         25:3d:a5:84:a5:c8:16:48:64:70:22:bf:2b:51:76:f6:64:ef:
         42:57:85:4b:36:e0:d6:6a:ef:ec:3a:d2:ba:64:1f:68:1e:5e:
         39:cb:5d:f4:c7:d2:a7:7b:ef:bc:c5:2e:7b:94:7d:f6:ab:ee:
         aa:47:a6:b2:46:7e:18:89:c5:9a:5c:82:e9:b9:4c:1c:fa:f5:
         a8:a7:cd:0b:81:58:da:45:e5:10:b1:f8:e0:d5:03:ce:5b:58:
         50:98:c4:26:98:6a:08:76:c5:04:bb:0c:d6:ef:13:55:44:ae:
         85:39:5e:91:95:ea:17:11:75:d6:de:5b:e6:b7:3a:8a:27:18:
         a3:fd:49:ff:0f:d6:7c:d7:e9:97:30:96:a5:6b:90:b7:78:25:
         54:fd:5a:57:1b:46:ee:de:0e:ec:f0:ca:5a:b0:82:9c:9f:e2:
         cd:3d:00:5f:b3:ec:78:62:c5:fc:bd:34:8a:f0:7b:b2:c0:39:
         d4:99:70:7f:b9:65:26:0f:ff:1e:3d:e5:f3:04:27:a9:6c:31:
         18:60:0a:57:ff:02:47:68:e5:75:14:6a:f3:22:ba:8e:67:4d:
         2c:f2:ed:39:8f:98:5b:23:36:5b:81:62:26:77:c7:8c:6c:03:
         5c:84:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:10 2024 by rpki-client on console-fra.rpki-client.org