Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e25c0231-6653-334e-baa3-c7e916f8f7fd.roa
File:                     e25c0231-6653-334e-baa3-c7e916f8f7fd.roa (raw, json)
Hash identifier:          rW3KIwbd1rb1mxrrMbEUfRdslzWk2BE7F/aLpq6tpwk=
Subject key identifier:   89:AC:73:CD:2F:F7:04:6D:F7:8B:E2:FF:3A:15:6F:9A:7F:43:FD:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E5886B02635F8E4742B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e25c0231-6653-334e-baa3-c7e916f8f7fd.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:58:86:b0:26:35:f8:e4:74:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=05055213-3865-48c4-83bf-2180a482b94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:b7:33:40:0e:0e:07:30:52:a2:c4:25:31:
                    de:c8:99:04:12:36:f1:41:3e:1b:3c:68:d6:8d:ba:
                    65:23:25:02:99:df:9f:7a:e0:64:08:af:08:00:6a:
                    ce:67:9b:f4:4e:cc:cf:24:4e:97:21:c7:57:5a:da:
                    36:4c:31:83:6c:ac:8f:e1:3f:96:c4:ae:a1:e5:30:
                    6e:3d:29:21:de:15:44:8b:2b:bd:80:3e:88:78:51:
                    1c:50:7c:43:fc:02:79:50:28:03:eb:7e:47:00:3e:
                    3e:69:a9:b4:f3:37:4c:a7:3e:8e:28:d6:bd:31:bc:
                    81:91:bc:f8:2c:85:31:82:93:48:9d:b3:7d:36:76:
                    f3:37:41:1f:22:e4:14:67:9d:09:b9:69:fb:f9:58:
                    6a:b3:69:00:af:41:7f:bf:af:b6:7f:1d:76:fb:aa:
                    4f:db:c8:4d:1e:9b:d2:87:aa:cb:ca:b1:46:ee:0f:
                    25:29:66:14:4a:fb:61:1d:3d:c6:3b:2c:35:1e:0e:
                    67:80:3b:6a:43:43:03:06:db:96:e8:44:07:79:f6:
                    c2:03:9e:db:6e:90:46:89:3e:5d:0e:0a:82:da:16:
                    92:f8:1f:4d:8e:51:1d:9b:23:38:7b:60:04:af:ca:
                    ea:ee:19:08:85:9a:83:e1:b4:45:db:b3:e5:43:12:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AC:73:CD:2F:F7:04:6D:F7:8B:E2:FF:3A:15:6F:9A:7F:43:FD:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e25c0231-6653-334e-baa3-c7e916f8f7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:b5:ff:d2:2c:c4:71:70:23:49:fb:99:7b:f9:e4:da:3c:fe:
         40:bd:64:61:5d:e1:4b:e2:97:72:99:bf:9e:49:c3:98:a7:b1:
         da:9c:37:91:66:46:10:67:26:45:86:f5:e4:4b:ef:59:a1:d2:
         e3:70:be:b8:8b:b9:1d:6c:29:2e:9c:f3:51:c3:b7:69:e3:05:
         26:84:9b:4a:8d:f7:d6:9d:8c:70:00:e5:46:77:df:83:f2:5f:
         7b:c2:dc:7f:8e:39:d9:59:d8:28:fc:7a:5e:8d:5c:e8:32:65:
         71:c8:70:12:cc:f1:fb:ff:1c:bd:7b:91:8f:d1:44:e4:a7:4a:
         6a:99:94:12:3e:6a:7e:44:84:e3:ea:ff:a9:e7:ed:36:f4:f1:
         40:eb:53:39:42:b1:43:ff:48:44:de:90:e6:8d:39:19:7b:8f:
         bd:73:07:60:83:2c:dd:1c:30:42:40:88:fc:3d:39:83:6b:4e:
         a4:60:f5:29:b9:a4:a7:29:14:a0:b5:53:3d:87:fd:45:db:84:
         af:37:13:ec:d7:bf:92:6c:92:75:18:50:e3:bd:5e:3c:aa:22:
         df:d7:df:38:37:38:d0:e5:4c:6d:14:c6:25:aa:bd:8a:8f:33:
         0c:42:56:ec:e0:0f:fc:7f:0c:80:e2:ad:a8:5d:97:25:04:c4:
         87:79:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org