Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f05fad2b-ba3e-3ea7-842c-ed257e23c692.roa
File:                     f05fad2b-ba3e-3ea7-842c-ed257e23c692.roa (raw, json)
Hash identifier:          7raY2KoGi0wLAEBMDFFrh4brHl2hF3vXGHbo5CBQ8P4=
Subject key identifier:   88:F8:EB:5B:09:49:17:59:91:3E:9A:A8:B1:00:D4:0D:07:C8:E2:EB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD1F1F6EB93A9C6B0E140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f05fad2b-ba3e-3ea7-842c-ed257e23c692.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d1:f1:f6:eb:93:a9:c6:b0:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=e00b0115-58ca-4074-9778-8260b4e108e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:4c:0a:22:f6:c8:4b:94:32:79:c4:33:e4:
                    fd:12:15:33:48:ef:86:d1:dd:b3:c7:0f:49:18:21:
                    85:41:90:d3:7b:f5:14:f5:7f:63:fa:3f:ec:d4:d5:
                    df:cf:13:8a:78:00:2d:9c:53:25:4a:bb:3f:99:be:
                    e9:88:67:d1:be:96:25:70:ad:84:a4:0a:fe:0b:46:
                    71:08:70:bc:30:19:49:07:02:a2:c8:7d:df:2b:bf:
                    3e:30:5b:d0:e9:90:8e:a2:6a:d5:fc:b9:2c:ec:7b:
                    ed:5a:88:3a:b9:5b:7c:91:b4:69:65:50:4a:70:51:
                    0a:94:c5:f3:e1:0b:20:3f:24:11:ad:aa:f6:4e:14:
                    80:19:63:95:fd:05:f1:2c:8b:8a:f2:a3:a9:6f:5d:
                    36:d2:22:38:0a:e0:32:2c:95:c2:de:6a:f6:6e:f6:
                    e2:8f:fe:0f:32:f4:83:74:25:52:28:a7:56:78:8b:
                    60:f6:f7:c6:fb:d7:d8:c2:ef:df:74:40:82:7d:16:
                    77:71:d6:32:ed:1c:29:45:45:b8:d4:da:d4:af:13:
                    bf:ac:06:df:97:cd:8c:d9:6d:6d:18:79:f8:e5:75:
                    82:b0:69:08:b2:97:5c:48:91:df:71:09:41:ab:f2:
                    0f:4c:e8:9a:ef:72:d1:44:43:8b:ec:8b:3c:9b:c8:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F8:EB:5B:09:49:17:59:91:3E:9A:A8:B1:00:D4:0D:07:C8:E2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f05fad2b-ba3e-3ea7-842c-ed257e23c692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:01:a7:66:02:d2:6e:3a:17:cb:5b:8c:14:42:66:c8:6a:e0:
         fa:7e:c7:94:cd:7f:23:ee:0a:f2:89:a5:6e:ae:98:63:41:09:
         1a:aa:6f:4a:fa:f4:5a:07:fe:5a:15:85:f4:2e:e0:b5:84:84:
         0f:fd:03:7b:ae:e1:b8:77:b9:8d:17:f7:5c:3b:db:b9:ea:76:
         86:f0:7e:99:28:3e:89:d4:74:0b:bc:f2:85:a1:27:33:d9:4c:
         87:fd:5c:f9:cd:e0:73:99:11:cd:c1:5d:eb:be:d1:ee:74:77:
         09:00:e1:62:9c:fe:d3:cf:e1:b1:8a:eb:e1:42:46:b0:d3:be:
         a1:62:35:db:5d:7e:f5:20:bb:36:c3:f2:84:06:83:7d:e4:fe:
         25:65:22:74:a5:a6:94:91:8a:82:de:db:61:17:11:f9:23:2a:
         f6:a4:a0:27:ea:ea:1f:4b:89:a1:f6:bd:95:c9:1b:c6:a6:11:
         0a:d1:6d:5d:c0:0b:53:7b:02:3b:8f:0b:55:ac:87:5f:9e:29:
         ac:0e:66:b3:1e:63:9b:66:3d:32:34:d4:2e:d8:ff:79:8e:70:
         66:a5:af:f3:d9:10:54:7b:98:a2:17:15:0a:ba:2d:7e:c6:f2:
         6e:a1:0d:ac:2c:23:d9:10:d8:1b:bc:34:41:43:8b:4a:f5:64:
         b7:cc:04:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:34 2024 by rpki-client on console-ams.rpki-client.org