Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e95b4232-4d0a-3d5c-91ff-6cd7cf033a2a.roa
File:                     e95b4232-4d0a-3d5c-91ff-6cd7cf033a2a.roa (raw, json)
Hash identifier:          kSzKYALzUgr3HBNJooIG+UBG0Djx2694p/kN+btemWk=
Subject key identifier:   61:18:5F:E8:41:F8:BB:66:CD:B6:03:C7:29:F0:A1:EF:DE:7C:DB:77
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD6A79517B1447D51CB10
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e95b4232-4d0a-3d5c-91ff-6cd7cf033a2a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d6:a7:95:17:b1:44:7d:51:cb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=5ae8069c-8a4b-4b9c-9629-f2a0c247c00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:ea:4c:ba:f3:21:32:cd:3f:09:be:30:63:
                    97:79:33:0b:42:d6:3a:f9:7f:92:9a:fd:90:a8:4e:
                    5b:5e:0b:e5:cc:8d:cd:4e:ea:e0:0b:c8:63:a7:44:
                    b7:6b:8e:65:30:73:e0:9e:f0:f5:a4:1b:c3:72:25:
                    82:f2:b4:32:b1:2c:57:83:c0:4f:40:71:c5:80:42:
                    9f:2e:13:49:8e:89:62:b1:b8:c0:4c:ef:5b:7a:29:
                    79:3d:de:cb:29:ea:b0:d7:67:2f:05:65:ef:d2:61:
                    9c:d0:74:ed:d0:07:a8:04:10:29:dd:ec:a7:d8:f2:
                    1a:c7:bc:14:13:f8:30:32:e2:da:d2:c3:19:97:9f:
                    ba:3e:01:c2:70:6f:57:79:3e:48:3d:f5:6f:f4:19:
                    9c:65:6c:50:3a:30:d2:73:75:8b:79:22:60:c7:be:
                    3e:40:4d:fa:57:f0:e9:b7:be:4e:47:0d:b0:51:51:
                    98:a4:d1:de:2a:55:cf:9b:96:83:39:8a:da:56:11:
                    b7:1c:7b:b0:b4:75:71:13:25:c3:49:82:60:83:52:
                    27:ad:e0:76:aa:b7:08:21:1e:3c:1d:07:2d:2c:12:
                    22:ad:a6:92:7d:29:4e:77:5d:98:80:8f:81:dc:7c:
                    61:bd:fd:64:50:70:fc:63:02:33:82:48:d7:d2:a8:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:5F:E8:41:F8:BB:66:CD:B6:03:C7:29:F0:A1:EF:DE:7C:DB:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e95b4232-4d0a-3d5c-91ff-6cd7cf033a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:e0:4c:98:61:9b:be:29:fc:76:c4:b4:d9:e3:50:fd:40:
         9d:c2:81:3e:78:75:ce:97:be:be:6d:0c:40:a8:53:b7:16:d5:
         e3:a3:b1:79:85:02:26:8b:f7:17:13:fe:7a:4e:e5:5e:ac:90:
         ac:69:29:f6:2b:8f:4e:8d:ba:14:89:1d:24:32:14:03:19:af:
         4e:65:6d:68:70:9d:aa:9e:6b:11:ff:79:92:8b:da:41:d3:fd:
         fb:05:61:2f:50:f6:02:c7:89:72:bc:92:cf:2f:3b:d1:90:a2:
         0e:af:85:6c:94:72:29:59:db:95:0f:de:cd:27:2d:39:d8:fe:
         96:ca:4d:75:df:9d:81:1b:af:9e:f3:15:66:89:ee:48:3a:83:
         a5:70:90:d6:58:80:30:69:e9:06:9f:76:33:b5:73:49:d0:ec:
         34:eb:8b:16:42:2e:2a:54:52:7b:03:2a:fc:ae:18:78:e7:84:
         ee:a4:dd:af:d5:ce:86:6a:20:42:cc:db:c2:0a:70:28:c7:c1:
         5a:28:a8:53:57:f9:c6:75:bc:c4:6d:e3:0e:90:36:ae:e4:21:
         1d:08:a4:02:f1:20:6a:28:53:3f:ff:f4:0a:70:4e:29:24:34:
         f6:89:bc:f9:a1:7a:4e:7b:c9:34:f6:9e:11:fa:86:f8:aa:48:
         a9:4e:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:48 2024 by rpki-client on console-ams.rpki-client.org