Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee394f5f-3dab-3161-8f0c-448af4c63104.roa
File:                     ee394f5f-3dab-3161-8f0c-448af4c63104.roa (raw, json)
Hash identifier:          nmVLYDxDtSIeP210hQXMHJbfe06DFrvJsp4rIaC6yPE=
Subject key identifier:   B4:BC:05:A4:28:74:CB:89:95:FE:15:F4:FF:3C:D9:52:62:22:9F:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B1574B72328BFBEFEEBAC
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee394f5f-3dab-3161-8f0c-448af4c63104.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:15:74:b7:23:28:bf:be:fe:eb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a196b88b-da0e-46c5-8d3c-2eb228761278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:09:86:e0:20:c7:52:8f:c2:fb:f2:60:ad:
                    d5:05:f8:28:29:c3:ab:54:ee:b4:a0:10:c2:d8:0d:
                    b1:28:f7:bb:ad:f1:7d:db:65:7c:3c:f5:b2:50:12:
                    ad:77:39:a2:86:fb:5e:bb:f3:50:61:7d:9a:dc:85:
                    ca:cf:dd:c5:48:d6:eb:a5:2b:50:b2:46:9a:c5:02:
                    70:c9:6f:a6:cd:11:df:03:9c:13:79:af:99:0c:04:
                    b0:94:2d:ca:35:ce:5f:02:e0:fc:3b:de:ad:70:2b:
                    88:22:17:96:05:82:17:8d:72:df:95:81:eb:cd:81:
                    ae:83:3f:ac:12:7e:a1:5b:3d:ff:5e:36:ca:ad:dd:
                    fe:08:30:d6:79:14:fa:2c:c5:29:26:58:ca:8e:0e:
                    32:19:c9:40:4b:4c:c5:81:79:db:16:31:cf:69:9b:
                    96:39:95:c6:35:aa:53:3d:e4:2e:84:25:1f:d1:9d:
                    66:cf:d2:aa:b6:b8:63:dc:3d:d7:3e:64:17:ad:41:
                    8d:08:70:68:a6:21:06:9d:4d:82:65:97:ee:78:67:
                    83:45:81:ee:5f:8d:1c:cf:82:ef:55:e6:c0:d9:56:
                    cf:b8:eb:ac:04:04:1f:c5:39:d7:5f:f4:c4:ee:f8:
                    50:3e:e7:63:83:26:7b:f8:11:49:41:41:3b:28:d6:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BC:05:A4:28:74:CB:89:95:FE:15:F4:FF:3C:D9:52:62:22:9F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee394f5f-3dab-3161-8f0c-448af4c63104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:45:1e:c3:a2:5d:a2:12:cc:84:47:a8:19:12:41:16:44:ff:
         83:10:5e:8c:0b:28:9b:95:17:94:a2:c0:b0:a9:5f:ab:02:b9:
         90:bc:43:56:c6:ba:fd:d6:00:c4:69:8a:8b:2a:73:05:cc:8b:
         77:a6:7f:98:93:d9:f0:4b:a6:b7:f6:21:8a:71:0a:5f:90:29:
         70:7d:fa:6a:19:35:fe:83:57:48:37:cf:b8:66:77:70:2e:45:
         07:7f:10:7b:b3:16:f3:80:19:44:0e:a2:bd:e8:72:fc:0a:c8:
         9c:4f:e8:4a:24:74:50:ec:91:c5:2b:94:a1:8e:a7:e0:e5:79:
         82:9b:17:c2:00:13:38:1b:48:82:32:f7:8b:f6:d6:e5:86:f7:
         17:14:44:13:da:86:57:b0:66:c9:74:ad:ea:51:fa:f3:54:00:
         7e:63:60:b3:ef:1f:40:dc:e9:9b:fb:2f:80:d1:ae:29:c2:51:
         97:73:ff:45:32:21:3b:cb:01:a7:4d:ce:06:c1:c6:23:13:88:
         91:1b:ad:ca:a0:30:cf:fb:aa:86:9c:34:e3:fb:5f:4e:63:c5:
         df:83:62:40:49:fa:de:bd:d0:24:24:b1:47:fe:58:70:d2:06:
         5f:79:a8:7c:80:74:c4:00:23:43:71:b6:69:e4:f2:81:a4:83:
         ef:f4:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:41 2024 by rpki-client on console-fra.rpki-client.org