Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa
File:                     f3623923-43d1-3859-aa9c-58474b07061e.roa (raw, json)
Hash identifier:          byHmtRuEAemRA9+TVwBbX1Jm9DrrlTO6dGwygPohnyQ=
Subject key identifier:   DC:7B:6D:23:8F:BF:F7:11:6C:CD:76:B5:83:AA:09:6B:5C:13:03:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A84C0D2725384EC713880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:84:c0:d2:72:53:84:ec:71:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=02a60709-ca54-4aa8-9b24-36423308c2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:c7:f4:b9:d1:27:6d:ef:b4:8a:1c:35:84:
                    f9:96:1b:62:21:98:60:4f:2c:f2:01:f0:3c:29:67:
                    00:b6:ff:73:13:59:ba:5b:44:61:0f:ac:51:24:4c:
                    16:a3:ba:14:83:e7:32:14:f7:dc:96:46:e4:5b:60:
                    3c:23:21:37:a0:d0:8d:b9:39:cf:df:78:52:be:34:
                    8a:50:ea:c9:54:49:0e:52:d1:db:9b:77:23:76:7f:
                    ed:4f:c0:ad:ec:4f:b3:8d:09:68:10:4d:06:4f:c4:
                    5a:f9:d3:7e:39:8a:ab:03:2c:d6:65:dc:f8:a9:24:
                    6b:fa:a2:a3:b7:7f:0b:2a:ed:12:9f:f3:e8:3b:23:
                    8d:5d:39:2f:6b:e9:40:c9:04:78:a8:25:41:b7:18:
                    2c:be:4a:1c:3a:16:22:c3:51:07:38:a8:55:11:44:
                    fb:63:83:23:dd:97:48:6c:1b:28:4c:9f:f1:8a:3e:
                    0d:ce:85:6b:d5:ee:ac:00:28:07:e6:56:19:6f:2d:
                    88:68:1a:4b:5f:67:5d:9e:44:dc:f4:08:46:70:c7:
                    12:2c:7e:2a:20:9c:6e:a7:f0:65:34:cd:cb:af:6a:
                    a2:77:47:86:e5:2f:81:45:2e:9e:3a:c2:be:7f:e3:
                    22:54:00:81:78:94:ca:1b:61:60:17:54:60:28:36:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7B:6D:23:8F:BF:F7:11:6C:CD:76:B5:83:AA:09:6B:5C:13:03:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b2:d4:65:ef:08:5e:0a:a3:26:f3:58:03:74:4d:f3:c9:47:
         a0:bb:f4:0c:d5:5e:95:65:13:fa:16:30:0d:86:09:cb:4f:a0:
         be:1b:3b:be:0b:83:72:6f:74:cc:dc:36:02:10:1d:98:53:93:
         e9:ea:e5:b7:6f:9d:3a:07:f3:a3:ae:c5:ab:30:30:d8:68:b2:
         65:4c:6d:e8:f8:f9:16:4b:12:93:ab:3d:56:4b:80:4e:5e:a8:
         25:42:97:15:11:b6:58:7f:53:94:31:a2:82:a8:15:4a:bb:0b:
         34:06:19:bc:04:2f:cc:71:56:f3:0a:bc:37:2f:82:08:00:05:
         53:1c:67:08:2b:11:f6:68:ae:32:ad:b9:7e:2b:33:3a:ca:ab:
         34:26:cf:9a:40:ab:68:e8:43:9f:73:25:0b:73:52:23:e6:67:
         ce:71:8e:0a:b1:bc:f5:c8:94:e8:f4:b1:26:c8:c1:c2:8e:cd:
         8f:01:2b:66:4b:d5:74:7e:64:bf:18:03:ea:14:03:b8:12:df:
         73:31:f8:17:d3:b2:4a:52:2d:ec:6a:13:c4:1b:5a:1f:d6:d9:
         f9:c5:62:93:75:f4:35:87:ac:08:d6:65:84:30:24:b7:ce:99:
         e4:06:ef:40:ac:7f:9e:22:08:b2:84:6a:50:96:d5:d8:3d:b0:
         18:15:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:13 2024 by rpki-client on console-fra.rpki-client.org