Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f5338e1-d84d-3c65-b3ac-96153b7b6979.roa
File:                     2f5338e1-d84d-3c65-b3ac-96153b7b6979.roa (raw, json)
Hash identifier:          agrruHM4rESbaPuYI7SPKHZJJmuyh2KeQuKZVZvfPug=
Subject key identifier:   7F:FA:B6:BE:9F:33:DA:F4:B0:11:E4:BE:10:FE:AA:B6:33:58:4A:34
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F895626C7329FE3AC6AD9F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f5338e1-d84d-3c65-b3ac-96153b7b6979.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     12097
IP address blocks:        184.105.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:62:6c:73:29:fe:3a:c6:ad:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=e48be5af-c342-4f47-a413-e918260f44ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:d4:e4:ae:4b:36:da:37:05:21:98:9e:91:
                    c8:80:94:ee:5a:fb:af:bb:d8:96:72:92:3f:35:86:
                    63:17:1a:f3:c5:df:8a:fc:93:85:3c:97:ea:c2:a5:
                    53:d6:1b:37:57:4b:bd:3b:51:d2:20:98:c9:88:c9:
                    e3:ac:87:e7:38:a0:34:56:f0:c9:c1:2f:7d:af:91:
                    1a:ec:5a:9e:60:26:17:ab:2a:75:72:31:9a:25:99:
                    ed:c7:0c:7e:e3:e4:28:95:7d:a7:c7:7f:b7:3d:bd:
                    86:4a:78:6c:14:f7:c2:78:c3:a4:51:fa:c7:c0:e3:
                    d4:25:44:eb:51:d2:e7:28:a5:97:c4:ee:79:42:c0:
                    dd:11:0c:e9:ea:56:6a:bd:4d:cc:f8:26:14:b4:4d:
                    f7:4f:97:14:97:e3:db:8a:0b:e4:1f:20:10:6a:ba:
                    0a:a4:a3:38:d7:32:be:5c:83:d2:e1:5e:9e:8b:2f:
                    cb:54:36:01:89:6a:c0:1c:54:ef:2b:40:a9:e6:98:
                    fe:34:66:30:5e:ac:b1:35:9f:37:82:46:e7:d6:82:
                    7e:6d:ac:7d:74:b9:24:18:31:5f:93:c6:44:4e:26:
                    01:f3:41:b8:6c:5d:aa:c7:e6:fd:25:e0:f3:2b:01:
                    ae:ee:8f:66:a5:37:4c:56:ac:1c:0b:e6:34:fb:24:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FA:B6:BE:9F:33:DA:F4:B0:11:E4:BE:10:FE:AA:B6:33:58:4A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f5338e1-d84d-3c65-b3ac-96153b7b6979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:51:ea:a7:d5:66:05:83:6c:ab:08:97:80:0a:6f:79:58:65:
         d5:a0:d0:f7:de:c7:8c:29:a0:3d:8c:4f:b2:b6:86:9b:08:4d:
         31:32:00:56:04:06:22:d0:da:b7:a2:b4:0a:9c:3f:d2:74:64:
         55:f1:61:db:60:34:46:f1:b1:f4:12:44:a9:e1:a2:ae:1c:10:
         5c:3e:e0:b9:fe:ba:ac:3a:af:f2:18:6e:97:be:1a:7d:dc:f0:
         07:01:7d:a7:89:42:d2:d3:c2:d8:99:2d:7f:61:aa:eb:28:54:
         87:33:e3:9e:11:d5:0c:20:a1:8f:30:e6:86:c3:2e:a2:75:9d:
         d2:2c:ed:91:1b:c0:bb:27:ad:1a:bc:05:88:8f:ed:d6:73:04:
         50:68:4f:c1:1b:d0:63:fe:c6:41:37:6b:6c:f5:f8:a0:37:b2:
         6c:b0:31:1b:ac:72:1b:de:83:15:79:9d:d9:f7:03:e5:81:72:
         eb:fd:0a:4b:cc:63:94:d2:3b:cd:8c:28:2f:c2:65:08:bc:2f:
         d0:de:fd:0e:e2:ae:8a:07:50:33:8f:91:a3:a2:30:97:7f:b5:
         72:a3:d5:24:d4:13:c3:62:e8:07:dc:b9:6f:d3:74:45:08:5e:
         c2:a2:47:e0:f2:aa:b6:ec:b1:a2:90:00:a3:2a:80:e7:db:66:
         7a:47:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:30:30 2024 by rpki-client on console-ams.rpki-client.org