Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff71c72b-cd1f-304f-9ceb-2fba0d50fce0.roa
File:                     ff71c72b-cd1f-304f-9ceb-2fba0d50fce0.roa (raw, json)
Hash identifier:          3OS7V/lh2KvqZu/ntsQ4GjeNU7gekgBuLHNChQ6Lzak=
Subject key identifier:   6A:DF:14:FB:75:70:30:3E:A1:51:54:D7:89:56:51:71:FF:50:FC:87
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B2B4A54FE2591B8493300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff71c72b-cd1f-304f-9ceb-2fba0d50fce0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.63.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:2b:4a:54:fe:25:91:b8:49:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c1b8e8aa-809a-4a58-bf31-024492647136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:a7:d6:1b:75:71:e3:11:18:3d:49:28:2e:
                    9e:ef:5c:e1:39:80:12:ee:19:24:cb:45:32:97:a5:
                    e2:c7:35:5d:3b:90:81:29:20:1d:e8:26:fe:9b:cb:
                    2b:b5:c2:13:61:a5:20:7f:5d:2f:cb:6c:bb:bb:21:
                    a4:f0:c0:fc:c3:62:4f:e8:31:b9:79:a0:ab:4c:78:
                    4c:3f:3b:5a:55:83:ea:b1:5b:fd:ac:75:52:d6:93:
                    b2:3f:ed:0f:ea:ae:7b:c7:02:9a:19:b4:3a:14:a6:
                    40:5d:e9:b0:53:83:52:b1:08:d8:73:ef:eb:04:bf:
                    05:2d:b3:94:2d:39:0d:ad:4b:c3:3b:c6:24:47:90:
                    e7:88:ee:03:97:62:cf:41:64:62:cf:32:bb:c8:04:
                    5a:31:4f:a2:b3:16:3d:0b:b6:ce:57:ff:e3:62:54:
                    34:4a:76:c2:ec:58:cf:8e:89:c4:91:87:82:10:41:
                    35:0e:20:44:e4:b4:28:ac:68:77:01:13:3c:04:7a:
                    0f:6c:77:bf:02:ea:cc:21:d3:48:a8:a5:88:ba:bf:
                    d8:88:75:fa:6a:19:48:1e:b1:38:d6:59:a1:a4:c3:
                    a5:2b:fa:95:25:de:77:3c:20:db:4b:24:81:07:b7:
                    21:37:08:21:3a:3d:d7:64:8e:84:b9:2c:21:f4:7f:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:14:FB:75:70:30:3E:A1:51:54:D7:89:56:51:71:FF:50:FC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff71c72b-cd1f-304f-9ceb-2fba0d50fce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:92:3b:96:e4:9d:4f:20:48:2c:f5:2a:cd:61:55:2f:50:ba:
         fa:e4:f5:b2:ff:d5:af:d1:2b:39:9c:ef:bd:8d:b9:e9:48:83:
         84:5a:ef:ab:a0:e5:44:cf:cf:89:72:ec:23:80:8a:11:97:fc:
         5f:c8:4e:7d:23:71:8e:13:83:98:02:c9:bd:f3:45:ec:3a:50:
         86:b9:de:01:76:51:85:8f:d9:33:59:33:da:8a:75:6d:3e:d0:
         b1:48:0c:1c:62:e7:a6:ac:73:c9:37:75:84:78:58:f3:56:2e:
         46:c3:9c:c0:bc:f8:8f:b7:3c:f3:93:29:b0:48:04:c9:26:99:
         0d:8a:83:c5:dd:a4:d2:11:47:e0:b8:cb:41:b4:7d:4c:3b:b9:
         be:ff:58:e0:e2:0f:b1:73:ce:57:d2:ca:4d:70:c2:52:f0:98:
         bc:c4:0c:0d:df:2a:e8:15:3f:0c:ba:1f:bc:21:c5:70:ed:0e:
         51:e9:98:25:c1:53:25:5a:f7:fd:bf:eb:d0:eb:08:e3:8b:12:
         57:28:de:d2:d5:99:42:fb:0e:62:44:69:11:6d:27:bf:15:41:
         4d:85:f7:3b:72:18:f8:2b:3b:42:55:0e:e3:69:91:29:5a:de:
         d3:38:68:36:d6:a0:86:d9:af:71:6f:ad:eb:45:d6:61:6b:f9:
         d2:fc:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:51:18 2024 by rpki-client on console-ams.rpki-client.org