Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d838ddaa-82d4-36e2-b454-7631d2e61f1d.roa
File:                     d838ddaa-82d4-36e2-b454-7631d2e61f1d.roa (raw, json)
Hash identifier:          qYfjiC/Nj8tIwV5DAABv/t1konrcKSCd0xRfIQwNi0U=
Subject key identifier:   CC:FD:DB:3E:7C:1A:09:ED:DB:7B:01:A4:10:2A:44:63:65:4C:8D:AB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD924911509C7047CECC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d838ddaa-82d4-36e2-b454-7631d2e61f1d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d9:24:91:15:09:c7:04:7c:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0c0f3cf1-b595-42b4-affe-afff7875ff13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:2e:3f:bd:0f:6d:73:bb:2a:7a:46:8e:12:
                    44:6f:15:44:63:64:26:4b:e9:64:57:11:ac:64:3a:
                    45:3b:74:69:c4:1b:6f:1c:82:71:96:65:0c:8d:ee:
                    a1:32:93:6a:71:0e:fe:1a:c3:f5:58:38:03:6b:a2:
                    a3:6d:34:59:74:cf:31:3a:30:ef:ab:65:1f:ed:2b:
                    43:19:8d:bf:92:b9:01:2e:47:93:32:64:36:36:0c:
                    6b:3a:77:1c:19:13:35:00:75:85:bd:5a:61:2f:fb:
                    0c:a1:cb:a1:0b:40:69:12:c5:9e:d3:15:19:aa:5f:
                    42:bf:9f:fe:49:9b:26:31:21:49:3c:8e:c1:c6:23:
                    73:03:6d:ec:7d:b7:17:d4:ba:79:a3:e5:6d:ad:37:
                    3d:79:ae:43:41:c5:78:61:82:f1:bf:fd:c3:1f:e5:
                    4c:cd:3c:67:b5:4f:c3:4c:93:4b:21:df:07:6a:ae:
                    e5:eb:0e:68:36:e6:94:06:8d:a3:c2:8f:a6:0a:4c:
                    3a:b9:4f:e1:95:2f:c8:8e:99:c2:ef:2f:56:07:5d:
                    4d:1e:5d:f9:2d:72:43:b6:b5:d4:98:29:d9:71:d4:
                    6e:98:6b:40:82:22:31:45:59:5f:15:70:01:a1:ed:
                    75:a1:60:fc:c9:26:2c:4a:05:0c:42:30:58:b1:d4:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FD:DB:3E:7C:1A:09:ED:DB:7B:01:A4:10:2A:44:63:65:4C:8D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d838ddaa-82d4-36e2-b454-7631d2e61f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:7f:7c:43:70:35:77:0d:44:7c:44:f4:4d:28:91:b2:7d:
         bb:51:6e:44:23:ca:31:d8:ed:bc:e0:c8:69:e0:4d:5f:2f:3e:
         b0:6d:ae:41:99:d6:5e:5e:d6:50:52:1b:61:1a:da:dd:ca:81:
         cf:1a:a6:9e:d0:69:a2:c9:f0:a1:1b:79:69:c7:ce:bd:94:c4:
         e2:f4:48:96:50:73:1d:0b:cd:1e:07:c7:d5:da:89:ce:6d:56:
         e4:0e:ec:5b:ee:43:71:f2:9a:63:64:32:57:60:5e:74:d1:31:
         11:b4:b6:03:20:f5:93:19:d6:5f:14:7f:ad:16:59:21:b8:bf:
         9a:39:af:dd:3c:ad:04:94:5d:3b:0b:c1:ac:84:ec:4d:53:65:
         ed:1d:51:02:58:85:dd:16:ae:82:16:26:05:9a:35:b3:c4:36:
         0e:3d:3a:a2:f3:3b:47:9d:06:e0:9a:55:65:31:4e:69:43:9d:
         b4:7c:b7:83:97:be:6a:e6:7e:d5:6b:3d:5b:b8:4c:69:58:ad:
         ca:74:2b:9c:c4:56:f4:14:b6:29:48:c7:8c:3b:9c:14:1f:8e:
         96:37:67:bf:56:f5:11:9c:73:e5:ad:ea:31:4c:15:3a:d4:46:
         98:7e:47:da:23:cc:55:bd:b4:32:16:45:f3:b0:f2:d1:62:b4:
         f8:42:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org