Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e61810e5-cb08-339c-b997-a9b64e560f78.roa
File:                     e61810e5-cb08-339c-b997-a9b64e560f78.roa (raw, json)
Hash identifier:          SpXpuosQ4X27M9Aq0Z95UPVMAS9Zh6Bu9q4QjCs99R0=
Subject key identifier:   2E:66:95:BB:0F:47:F2:65:5E:EE:56:8F:20:26:08:64:25:02:40:91
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DCD14339DE9CCD4D62450
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e61810e5-cb08-339c-b997-a9b64e560f78.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:cd:14:33:9d:e9:cc:d4:d6:24:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9d37e304-dfd9-4abd-9a03-8b994fa3e13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:32:46:8b:fb:01:6c:d2:dc:bc:bc:a3:a2:
                    33:82:6f:97:0a:4a:ec:ee:78:23:fc:37:20:96:6a:
                    55:94:5c:90:2f:d2:c6:d0:60:61:fc:e3:be:12:df:
                    1b:e1:36:0c:13:5f:5f:a2:4a:01:26:88:3c:77:17:
                    64:3b:d3:99:45:74:20:cb:0d:33:c6:36:92:5b:5a:
                    54:84:3c:fa:a2:15:65:b1:95:5d:3c:94:df:d2:4b:
                    77:74:9e:e9:6f:6c:3a:f1:e0:e9:6e:7c:aa:06:2f:
                    78:3f:1a:b9:8e:dd:b1:be:bc:70:85:63:f4:2c:68:
                    bc:2f:cd:64:ce:8b:8e:64:84:96:9e:9b:4b:17:d9:
                    ef:83:82:63:55:f9:06:95:22:ed:c1:5c:51:60:3e:
                    11:66:33:fc:a7:27:54:0d:0b:07:53:8b:e5:d1:54:
                    3a:7a:98:b8:ec:eb:39:62:b3:31:96:55:72:d9:ac:
                    0b:0b:14:92:13:ff:21:1c:bd:11:f0:71:f9:4e:c3:
                    74:75:09:cd:1d:0c:5e:dc:8f:bd:fc:cd:80:b6:1a:
                    95:58:e7:6d:0c:57:26:49:01:4f:17:6d:b2:05:a9:
                    2a:3e:56:71:f3:6f:d2:9f:d1:ed:1e:8b:98:e0:86:
                    07:35:af:6e:33:0f:d8:c0:8f:14:7e:31:db:c8:e6:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:66:95:BB:0F:47:F2:65:5E:EE:56:8F:20:26:08:64:25:02:40:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e61810e5-cb08-339c-b997-a9b64e560f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:01:79:24:d3:70:7c:84:ec:18:75:f6:41:91:07:b9:d4:
         35:41:db:1d:f8:25:dc:dd:42:39:2e:16:ce:d6:d9:a1:db:88:
         0b:cb:d5:cb:53:26:47:ea:68:7c:d1:e5:a8:92:67:21:e1:5f:
         15:5f:20:25:29:7b:97:87:e6:f8:54:23:ae:b3:89:9d:0b:72:
         20:6a:f7:e9:70:e1:66:5a:e5:23:75:aa:81:20:82:57:a7:97:
         1f:ec:97:89:01:cc:cc:c9:5e:07:02:1c:a7:a0:f7:c7:cb:9a:
         3a:b1:3d:71:df:a2:bf:6b:ba:df:56:03:f3:19:6c:1a:2d:77:
         72:b5:b7:0f:52:36:17:3b:c0:94:55:2e:b0:53:55:a1:f2:47:
         dd:eb:5d:6a:cd:7e:76:ca:3d:be:a0:49:b6:5b:80:bc:b4:e9:
         42:73:2e:68:e1:e0:37:56:36:7f:b4:9d:d4:d9:9c:26:cc:39:
         39:6a:7c:18:6b:12:98:9c:45:f9:4e:16:c9:e7:56:7d:68:47:
         ee:02:65:bd:3c:0a:fa:2c:ec:f3:bc:be:5a:cc:df:ed:1f:f6:
         f1:2c:3f:37:36:0c:99:3f:35:6f:ac:6b:cb:38:af:04:8f:f2:
         f4:22:85:52:23:7f:a1:4b:0b:f2:3d:b2:b2:bc:24:64:13:36:
         39:1c:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:11 2024 by rpki-client on console-fra.rpki-client.org