Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa
File:                     eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa (raw, json)
Hash identifier:          axZzCSeuDCgF3vwvyLW0X14rlJxmF4SbfAp/ZbcMnOU=
Subject key identifier:   EF:80:A0:EF:3A:DB:6C:13:1A:4A:71:D3:93:92:5D:61:EC:87:A3:02
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD495708B80CD85CA0780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d4:95:70:8b:80:cd:85:ca:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=d1e52b0b-e8d6-4775-9857-912aef5c3622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:05:42:3c:dd:97:c6:a1:48:31:00:f1:1a:
                    30:ff:cd:0e:fa:c6:3a:bc:2a:12:54:ee:22:8c:17:
                    74:5f:01:3f:6f:69:00:83:31:70:72:e3:d3:17:21:
                    ef:13:8e:42:17:ca:86:3a:16:a1:8d:7e:59:53:63:
                    14:58:42:9c:45:7c:7c:75:48:bd:2e:78:c3:37:70:
                    d2:10:7b:b8:ae:52:de:4c:a6:1f:af:81:30:5f:da:
                    5d:21:5d:5f:90:69:ea:db:ce:6d:92:ba:7d:16:9f:
                    5b:e1:44:a0:ce:8d:20:06:29:f2:7f:45:06:3e:42:
                    2e:36:5a:c7:1f:16:a7:4e:c0:69:06:16:48:2a:a9:
                    84:d6:5b:a4:f5:77:2f:47:32:91:a7:5a:d2:82:2f:
                    d2:f4:aa:74:04:a4:56:62:af:1b:fc:08:72:83:43:
                    65:82:da:5d:8b:0a:33:01:82:7a:6e:22:a7:fa:f1:
                    d7:44:45:b9:5f:15:89:e0:bb:99:92:cb:4d:b2:31:
                    e6:cb:96:e0:ea:73:e4:53:c8:92:86:1b:db:54:24:
                    9e:20:45:23:6b:a7:4a:2f:bd:42:47:97:c0:a7:e5:
                    e8:58:30:32:91:16:36:c3:cf:70:22:16:2d:96:f3:
                    cc:10:81:7a:83:1d:a5:b9:9d:47:0c:6e:67:5d:15:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:A0:EF:3A:DB:6C:13:1A:4A:71:D3:93:92:5D:61:EC:87:A3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:f9:5e:8d:c8:86:58:57:56:13:f9:2b:c5:45:3e:6a:fa:58:
         bb:12:bd:5f:d1:7d:53:21:05:b6:45:8e:62:c4:95:5e:a5:a3:
         f8:83:03:b3:4a:96:76:52:ad:a1:5f:9c:72:09:75:d9:c0:9c:
         fa:c1:24:04:a2:c3:b5:4f:be:74:8d:0e:22:e6:c5:86:95:2b:
         11:34:62:cf:90:93:55:60:b9:8e:23:5f:f9:49:3b:39:88:1b:
         f4:f9:2f:71:b6:c8:9e:c9:3e:48:3a:35:8c:1e:6c:11:62:03:
         83:6c:e9:90:03:3a:cc:57:89:b3:76:64:78:8d:40:d6:87:ee:
         07:23:78:62:11:54:8e:86:17:95:e6:90:75:1f:50:27:dc:11:
         ad:56:25:fb:1a:22:be:ba:72:a0:b6:f4:bc:12:47:b5:30:9a:
         3c:5c:d3:ac:94:b2:86:bf:da:ee:15:54:a9:15:1c:c8:fb:21:
         23:f3:cd:14:3e:2c:d0:f5:ae:54:90:eb:c9:04:e8:2b:5a:37:
         6b:52:65:f0:e5:f7:a5:93:f8:b7:af:a9:f8:9d:5c:60:77:fc:
         a0:b3:d5:d6:87:c1:68:7d:b3:57:e3:54:28:6c:c6:74:67:f6:
         d8:3e:8c:e3:95:91:39:09:a5:bf:ec:64:93:62:c9:a2:83:ec:
         29:f0:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org