Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef58384b-cc27-3cbc-8b2f-6e16688f519b.roa
File:                     ef58384b-cc27-3cbc-8b2f-6e16688f519b.roa (raw, json)
Hash identifier:          Nrc5iOl1SVbYcwp/CCdTUDDrgKKthCZC0Zle4YSKYAI=
Subject key identifier:   D6:BA:C4:35:98:18:E2:05:2A:E4:F1:AC:13:C1:F3:0D:4E:6F:AC:25
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A95804D20544F42D52F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef58384b-cc27-3cbc-8b2f-6e16688f519b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.63.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:95:80:4d:20:54:4f:42:d5:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4fc91515-6fcb-4b30-bde6-a539004b8df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:48:98:cb:3b:4b:46:f3:38:03:5f:8b:92:
                    45:b2:c2:80:3c:b0:a8:63:a3:08:11:91:9b:51:57:
                    36:0b:ba:88:fd:73:64:b0:a5:53:7a:9c:9f:7b:3b:
                    10:de:96:6a:97:7a:84:e8:e7:0f:cd:40:23:0b:09:
                    ce:d0:59:7a:f3:d1:b4:36:7e:8f:74:17:93:fe:83:
                    ec:a4:51:22:e1:15:89:e4:06:50:6e:16:49:37:34:
                    40:8b:bf:e1:f9:60:3b:d3:69:f8:28:d1:ed:2d:42:
                    43:52:de:89:aa:ff:88:ab:96:ea:24:ab:2b:b3:a7:
                    f6:fa:41:12:2b:b8:c2:63:f9:42:27:56:00:07:15:
                    cd:a4:ee:94:56:0d:15:20:08:ac:78:63:ec:c3:fc:
                    b7:1b:0c:d1:84:d6:72:46:b5:c0:8d:48:33:cc:2e:
                    6d:ff:3a:bb:9a:33:0a:c7:4c:d9:f6:6f:7f:44:93:
                    a5:c1:36:2d:06:f7:16:b2:0a:8e:56:fe:54:29:74:
                    16:fa:57:81:07:5f:f1:83:54:6e:25:28:60:23:e0:
                    b6:6f:5d:67:df:23:3b:4c:a1:d1:cd:6b:1b:84:4c:
                    29:41:be:af:76:8b:8f:2f:59:f5:2f:33:7d:27:cf:
                    39:98:51:08:6d:64:28:fe:46:01:00:8d:4f:3f:ce:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:C4:35:98:18:E2:05:2A:E4:F1:AC:13:C1:F3:0D:4E:6F:AC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef58384b-cc27-3cbc-8b2f-6e16688f519b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:97:70:29:83:5b:c5:bd:de:fb:98:61:79:8c:d9:f9:5b:
         9b:88:2f:01:2d:cb:c5:70:8d:a5:14:c2:c6:9e:57:a5:75:6a:
         6c:85:71:04:1b:11:4b:35:5d:22:64:29:93:a0:8b:43:5d:da:
         a9:bd:5d:e9:fe:13:98:fd:d8:57:f6:90:80:e0:19:b8:fd:53:
         d5:c7:3a:b4:b6:64:39:8f:35:50:1d:8d:12:36:27:5b:c9:70:
         6f:b9:65:a5:41:38:37:a7:65:00:44:b3:ab:1b:69:e2:9d:7a:
         63:f4:36:ed:2c:23:ff:80:1a:82:f6:a2:43:c5:f1:0d:98:3e:
         da:ab:06:44:60:2e:aa:77:e6:d4:20:16:9d:7c:7e:9d:34:90:
         c8:f2:2e:87:c5:a4:42:10:e2:af:84:73:eb:59:0a:d5:29:ed:
         0a:35:0f:4a:09:28:cf:43:90:bd:5a:9e:fe:2c:88:b8:26:ab:
         ca:4e:7c:40:69:68:11:8d:a3:ec:8c:39:7e:6c:b8:a6:bd:c8:
         30:b9:ee:eb:52:a1:af:cf:a1:52:62:d6:6a:f2:d6:52:7d:a0:
         cb:3c:58:b6:be:cf:77:64:6c:00:54:3c:3c:02:60:62:3a:2f:
         b5:15:89:51:79:ad:24:2c:b4:6b:5b:40:8b:ce:2e:c4:d6:e0:
         ff:05:7d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:41 2024 by rpki-client on console-fra.rpki-client.org