Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eedfec61-d1a9-3754-af53-c1327e13c487.roa
File:                     eedfec61-d1a9-3754-af53-c1327e13c487.roa (raw, json)
Hash identifier:          BZ4kkWRP6vV9Yo9MLeL4T1GRAuVZo1DJnlZOyvxWDus=
Subject key identifier:   32:6B:26:E6:45:5E:EC:15:35:D2:4D:3D:FA:B8:4A:82:F9:A2:F0:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE981F48E81BA3B25D300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eedfec61-d1a9-3754-af53-c1327e13c487.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e9:81:f4:8e:81:ba:3b:25:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=31dcbe54-4cb9-4a58-a6c5-d2fd43fca654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:e1:5a:26:ad:a9:db:0d:fc:e5:b6:2a:f5:
                    ab:b2:60:d0:66:2e:85:92:d2:77:62:f9:70:99:10:
                    e2:8a:63:ed:5f:ea:9f:a3:7b:20:17:c9:d5:03:53:
                    c8:b8:4c:c7:86:a1:b3:3c:bd:73:24:f8:12:dd:28:
                    90:59:49:55:0f:75:73:a9:95:98:93:17:ee:04:61:
                    2e:11:73:a2:1a:9f:9f:1d:e8:d5:55:32:82:51:81:
                    0a:f6:f5:0f:30:c6:91:ed:56:00:0b:0b:9a:20:2f:
                    78:dc:fb:17:ff:3a:55:5f:35:92:0d:d1:2f:28:74:
                    5d:76:03:fd:6a:2d:04:9d:19:98:4e:1b:16:fa:95:
                    9a:b6:d1:90:c0:e2:be:1f:b1:07:b1:32:b6:72:e6:
                    89:e0:f7:d8:5e:8d:78:50:54:24:5e:e2:8a:f6:f3:
                    6d:ad:03:34:1f:6d:7d:e4:41:6b:e3:bb:06:96:66:
                    25:02:4b:de:78:21:49:d3:a7:d2:57:a7:84:f5:b1:
                    3f:92:5c:5b:e8:16:46:51:6d:fe:b7:24:af:f3:af:
                    0e:a3:77:2c:84:66:c3:9e:80:3a:c9:70:44:94:42:
                    b4:90:d4:d0:13:04:e9:18:f2:ae:07:ff:23:55:20:
                    a6:af:49:06:99:72:84:9d:f4:d5:85:5a:db:26:cd:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6B:26:E6:45:5E:EC:15:35:D2:4D:3D:FA:B8:4A:82:F9:A2:F0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eedfec61-d1a9-3754-af53-c1327e13c487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:89:f8:44:0c:6c:77:58:ae:fd:a1:bd:1b:74:c5:fb:6b:
         f8:bb:42:4e:00:37:0a:48:94:4f:0c:08:c9:1f:45:da:fc:9c:
         b0:18:95:2e:d8:f6:19:32:be:db:69:46:29:23:5c:95:53:66:
         80:cf:17:13:25:be:8b:cd:b0:d6:bd:6f:76:a1:21:a8:0f:8e:
         5e:16:ae:c0:a6:f6:3c:14:c1:f8:eb:9a:3d:43:39:8f:03:08:
         5d:2b:34:e0:0c:12:6c:a3:80:9c:06:66:ac:cf:1e:c2:55:11:
         56:22:62:f3:fe:aa:16:1e:11:79:13:ab:a6:91:fe:7c:b6:3b:
         60:e0:ca:26:a4:c2:d8:c4:0b:39:b0:a5:e8:62:5c:8a:1a:74:
         d3:d6:08:d6:6a:10:8a:0c:bb:d6:9a:63:da:a7:17:c0:0d:7e:
         44:b6:f4:1c:18:50:7a:ea:ec:dc:91:3f:12:ae:ec:88:54:c4:
         b6:a3:ff:39:1c:16:47:14:bf:85:24:d4:8d:a2:12:30:54:ff:
         3c:e0:12:50:16:e6:78:95:63:79:35:77:9a:2c:80:25:71:58:
         e1:91:d8:94:26:86:e7:7a:49:96:17:8e:14:a6:f3:3d:33:e4:
         25:de:07:c4:5c:20:6b:81:31:ea:99:d7:ff:d7:39:77:12:f5:
         98:ea:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:12 2024 by rpki-client on console-fra.rpki-client.org