Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db788913-114b-3dc4-8afd-098116805ade.roa
File:                     db788913-114b-3dc4-8afd-098116805ade.roa (raw, json)
Hash identifier:          pN9e7+G+YfbOO2V6haxNIHJd5R1IpuvQ96k5Ky0BE2c=
Subject key identifier:   EE:7E:9D:A0:80:22:C3:5F:5B:22:55:2E:90:C0:1F:26:0B:03:3F:4A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B28C0E97D9F209BB467C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db788913-114b-3dc4-8afd-098116805ade.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.63.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:28:c0:e9:7d:9f:20:9b:b4:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0ea2dace-0f24-4471-a19c-77b40c50f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:3d:ff:39:3a:a0:cf:9f:5f:71:4b:a9:30:
                    3d:65:0a:ea:9b:99:8f:4c:10:66:60:a7:89:8c:15:
                    16:fa:2e:ef:ed:0b:73:e9:ee:9b:8a:6c:15:e4:0a:
                    fb:bb:d7:40:58:06:7e:8d:aa:87:2e:77:23:dc:f5:
                    80:15:19:b6:4e:74:65:ee:cc:c6:c5:72:2f:8c:e6:
                    4a:47:d9:f8:53:ed:d3:d5:13:17:da:fc:70:1e:cf:
                    5d:65:82:8d:fd:53:a9:51:bf:13:36:f1:64:75:3a:
                    8f:0f:c1:1d:1e:2a:56:d2:cb:eb:c8:a4:c4:cc:3a:
                    6b:69:1a:73:94:0d:36:8e:25:d6:3b:87:df:59:f1:
                    05:88:8f:95:8c:64:59:c2:7c:2b:56:11:fd:e2:2d:
                    1e:45:7a:a8:d3:31:1e:aa:50:45:eb:02:4b:80:3c:
                    be:13:05:34:61:bd:e3:28:3a:79:2f:46:44:d9:10:
                    d2:a6:b2:3d:8d:35:a9:2e:79:3b:93:8f:4a:1f:93:
                    93:66:49:b3:d4:f0:c3:9d:bf:a1:aa:49:ec:49:a1:
                    74:90:0a:37:b6:36:49:98:e5:87:ea:21:a2:93:65:
                    99:24:35:fd:11:af:95:be:35:bf:be:7d:c6:67:b1:
                    aa:e8:12:7a:52:06:a6:05:2d:5a:69:8b:5e:81:3f:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7E:9D:A0:80:22:C3:5F:5B:22:55:2E:90:C0:1F:26:0B:03:3F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db788913-114b-3dc4-8afd-098116805ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:26:44:b5:59:32:14:02:a1:18:bb:42:fe:1c:83:a5:d3:
         be:ae:0a:e7:83:41:3c:e2:24:fa:66:ad:e6:2a:60:82:d8:a4:
         0d:e2:cb:52:22:ae:9b:b9:4d:a9:50:c2:17:06:f1:5a:7b:e5:
         0a:8a:96:35:25:e3:2e:29:b4:c4:1c:63:ef:4a:9f:09:cd:fe:
         83:ad:ad:04:da:62:24:d2:95:31:92:e7:d9:de:7c:00:3b:14:
         02:45:00:37:bb:8a:b2:ae:e1:91:0c:98:5d:fe:9c:fe:1e:6c:
         40:74:03:65:85:21:25:31:f8:14:7c:bb:42:0c:0f:51:6c:e4:
         09:44:e2:96:02:f5:c3:a7:0f:fe:b0:fc:45:15:7a:0b:74:f4:
         55:aa:c0:7f:42:40:22:76:66:cd:c8:7b:3b:bf:b9:19:64:3a:
         65:65:bf:68:1e:a7:ff:cc:49:a7:17:bc:72:d0:4f:e6:5d:b0:
         24:98:44:95:25:9e:7c:ce:46:78:b8:18:5b:25:ae:b4:4e:cb:
         06:54:2e:1f:97:ed:74:da:8c:72:9a:8d:20:6d:ac:b2:d5:88:
         a1:eb:56:7c:c3:5f:bd:31:fe:b0:7f:fb:d4:0f:5f:2e:98:18:
         f6:1f:5a:70:a3:63:44:e5:d5:77:20:68:e4:4f:da:47:81:a8:
         f5:50:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:33 2024 by rpki-client on console-fra.rpki-client.org