Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcfb374d-198c-38c6-82df-442b0db62f9e.roa
File:                     fcfb374d-198c-38c6-82df-442b0db62f9e.roa (raw, json)
Hash identifier:          9BMlv6ka0d/DCAQZLRwwm8kZ3Ck2nuj3y4qV3lztuFQ=
Subject key identifier:   FA:9B:15:92:40:83:9D:81:15:69:38:10:9F:48:5C:4D:DB:E9:86:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DD1D3A38F51CE07EC9A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcfb374d-198c-38c6-82df-442b0db62f9e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.20.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:d1:d3:a3:8f:51:ce:07:ec:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=331e0e08-c320-46a8-9e54-0930803ff4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:da:ec:18:c8:d9:82:b4:4e:a0:5d:bc:d8:
                    8b:8e:3e:4b:80:fe:67:f4:05:f1:cf:e1:f4:a4:7e:
                    ab:75:8e:8e:69:cc:f0:58:08:1a:18:37:0f:2b:7e:
                    83:0d:3c:62:66:b7:5b:3e:f1:40:a5:1b:03:2b:5a:
                    6f:7a:39:a2:99:8a:4e:27:ac:57:df:8b:a8:ca:18:
                    19:34:2b:76:57:1c:47:86:cc:16:91:12:1c:c7:56:
                    08:18:d7:a8:dc:cb:98:59:06:29:f9:3d:3a:47:40:
                    6a:3b:4a:f7:a5:53:b9:07:8e:f9:45:b9:0f:7c:aa:
                    cb:df:52:71:45:f1:bd:35:9c:0f:63:44:8f:bc:40:
                    a7:52:1a:ae:dc:c0:2e:b8:06:9b:f6:e5:26:a0:bb:
                    da:d9:fb:13:87:60:20:2a:ce:28:fc:a5:03:e4:3d:
                    bb:bb:d5:44:f9:ef:96:e3:03:d5:d2:35:19:e4:04:
                    55:bb:86:1d:82:41:4e:de:75:bd:c7:98:4d:c7:c8:
                    72:b0:a9:b3:c1:31:af:54:ae:60:3a:2d:8f:2b:65:
                    98:bd:3a:2e:d0:1f:ad:b7:eb:b3:33:5d:81:d7:b7:
                    ae:2f:40:98:52:f1:a5:e3:24:58:b8:3e:2f:d4:08:
                    63:ea:8f:15:2a:f8:77:cf:7c:e9:bb:ad:81:e6:c5:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:15:92:40:83:9D:81:15:69:38:10:9F:48:5C:4D:DB:E9:86:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcfb374d-198c-38c6-82df-442b0db62f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:61:07:d3:e4:3b:42:f4:97:69:d3:92:b1:60:5a:20:f8:58:
         61:1c:11:96:8a:21:f3:c1:0f:3d:50:7e:f7:7b:cd:62:01:fa:
         2c:84:45:25:47:07:eb:6b:f0:48:e7:1b:8b:91:56:e7:ba:42:
         06:fc:aa:2d:90:cf:9d:9a:46:ae:87:fd:5f:21:3b:f9:2d:2e:
         d6:7c:7d:8b:35:89:a2:10:03:5d:d3:0f:b5:2d:6f:e5:31:13:
         98:0e:d8:81:d7:7c:54:65:30:31:ca:10:53:cb:e1:57:68:8b:
         33:5b:4c:b0:5d:9d:fa:88:a6:16:8b:e4:ff:0c:b4:81:bc:8b:
         4a:a4:35:d2:6b:2a:85:23:91:93:98:c6:00:60:fc:48:2b:23:
         a9:c4:16:87:60:8c:09:f9:ff:65:0e:18:78:e6:57:65:07:dc:
         be:5a:27:61:fe:64:e2:16:81:11:fc:f2:36:48:9e:ab:f9:87:
         18:72:45:89:28:52:9e:65:63:5e:b5:de:83:36:cd:53:38:76:
         85:bf:f5:1e:c4:24:2c:47:c9:9e:8b:ba:a8:c8:af:a3:59:aa:
         34:45:99:17:41:2d:3f:77:e2:d0:87:5f:1c:e7:2f:3f:f5:d5:
         8d:48:73:f7:eb:ab:7b:4d:42:f6:2b:3f:ac:29:15:39:00:28:
         9f:5a:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:40 2024 by rpki-client on console-ams.rpki-client.org