Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa
File:                     d74be132-87cc-301d-8deb-b13bacf08e1a.roa (raw, json)
Hash identifier:          dWBMXlU4BJvz0jtPKUp4386slEUQmkKqB8XvLPgrdfg=
Subject key identifier:   26:E5:C8:95:B2:66:6A:65:72:FD:75:81:33:DD:5B:7D:8B:26:FF:5E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD859D4B0279FA30A53C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d8:59:d4:b0:27:9f:a3:0a:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ee61df87-2789-4022-96f5-d0c0944ffdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:3e:c3:5d:07:78:13:cb:66:2e:cc:73:86:
                    d0:5d:f3:45:28:2f:be:29:ca:3b:c2:43:20:02:31:
                    e2:b4:25:00:22:5a:96:27:bb:ae:ea:d8:ad:c1:c8:
                    8a:0e:1b:08:6f:d3:0c:d6:25:3d:19:4b:09:56:69:
                    b1:8a:ea:fd:7b:36:79:71:fd:8a:f8:4f:34:56:24:
                    51:ae:0a:a5:f0:85:9f:69:ca:c3:f3:72:d1:44:fd:
                    0f:1c:4e:8d:a4:d7:42:03:d8:bf:97:e6:6a:3c:20:
                    39:78:bf:39:88:b6:dd:8f:02:a1:71:7e:70:2b:96:
                    eb:8a:3c:f0:21:82:a2:d0:4f:e9:da:98:be:43:fb:
                    c8:08:3e:9b:e1:60:f0:ed:1b:ff:3c:a7:4b:1c:3c:
                    30:d8:7a:44:da:81:3d:0c:5a:67:e4:99:74:e0:9a:
                    ad:a4:ce:e6:a1:c5:3e:57:c9:8f:aa:ba:7a:b6:30:
                    c9:17:52:cf:25:a2:98:c2:a9:59:ef:7a:31:38:95:
                    02:47:c6:7b:22:f7:47:27:f1:07:31:26:8b:58:83:
                    12:33:eb:72:07:cb:5c:f3:39:f0:33:e7:07:11:de:
                    d7:6c:46:f7:9d:5c:a6:87:e8:35:5c:08:53:b8:48:
                    11:f0:bb:c0:e9:86:38:d6:e3:aa:0e:11:48:87:18:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:C8:95:B2:66:6A:65:72:FD:75:81:33:DD:5B:7D:8B:26:FF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:fc:e7:33:1e:45:36:28:0c:6a:32:1c:58:18:35:0a:e5:
         57:9a:25:25:a2:3b:9d:7c:b3:a7:39:c6:be:07:04:fc:4c:4a:
         b8:3c:5e:66:49:e9:2f:cd:67:5b:26:09:69:cb:fe:09:21:b7:
         9e:22:e2:11:f3:3e:89:04:1c:ff:16:d4:8a:b2:d4:10:bb:86:
         fb:50:a7:a3:c8:bd:e8:1e:52:73:17:e6:47:81:48:b0:6f:40:
         5c:7e:69:ae:1f:f6:88:bb:69:fc:3d:72:c2:76:a7:6c:d5:64:
         e6:80:d5:25:2e:21:3a:7d:fe:f9:5a:2a:fb:84:47:ba:b5:00:
         e2:3e:73:97:38:ab:c7:37:13:d2:49:92:74:d7:98:62:48:3e:
         73:11:73:c9:3a:93:7a:f4:6a:8f:64:ed:59:52:28:b5:6a:e8:
         0b:18:69:f0:5e:45:67:c8:10:38:3e:aa:b6:4a:d8:c5:2a:ea:
         1c:ac:62:cc:4c:24:9f:22:a4:fa:69:52:68:fe:a5:ed:73:a9:
         ba:84:b9:a6:be:10:85:08:c8:d3:5f:74:1b:8b:bc:45:b9:f5:
         6c:34:08:97:0e:0e:87:f2:97:33:d1:a2:8c:ac:35:49:21:f1:
         c7:e7:05:bc:ed:dc:71:c7:c1:69:8b:0f:10:30:fd:dd:87:23:
         8c:71:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org