Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01937f4d-d6cf-3e27-a35f-c13c9d62e960.roa
File:                     01937f4d-d6cf-3e27-a35f-c13c9d62e960.roa (raw, json)
Hash identifier:          JsWKS2FMNShToUP5aunIMAO7pe8m6mlVGJysJpds8ww=
Subject key identifier:   F6:A7:23:D1:F6:6A:31:4F:1C:9D:57:47:C5:25:40:95:AE:0B:A5:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA7122D66BE9E24C70780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01937f4d-d6cf-3e27-a35f-c13c9d62e960.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a7:12:2d:66:be:9e:24:c7:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9500c3a1-a7e1-485b-9918-19f90d6f3460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:f0:53:97:f7:50:16:0f:bf:5b:4e:ae:f3:
                    44:5e:fa:65:63:bc:f1:07:f0:36:02:25:92:7f:82:
                    36:3a:b6:d5:af:88:5f:a6:be:b7:42:47:bd:b7:91:
                    2f:28:15:8f:09:3a:d7:2e:4c:2e:b7:73:68:c6:99:
                    6e:03:7f:6c:da:fe:33:ff:e6:33:3e:0c:f7:67:a5:
                    fd:89:4c:a1:6f:92:78:c0:53:eb:dc:d9:7e:10:67:
                    bb:3b:c9:e4:05:57:30:b4:f1:2f:d6:70:a7:ed:67:
                    67:ad:ff:40:4b:89:a0:13:fd:e7:38:f1:f9:1d:f3:
                    5a:4b:8f:b9:3b:24:f3:aa:63:9c:0c:ab:78:18:2c:
                    47:8f:bd:c4:e0:08:fd:ea:14:05:de:2d:95:fe:c8:
                    50:71:b7:ce:83:fc:cd:a0:63:2b:d1:58:d2:30:67:
                    42:3b:c9:cb:99:90:4f:ae:15:ef:10:74:15:66:37:
                    06:40:d1:40:56:e3:b7:56:e0:09:ef:5b:14:6c:6f:
                    fd:d4:06:73:3b:eb:00:ec:97:14:7f:11:b6:a9:47:
                    d6:96:24:18:88:22:5a:e7:fa:cb:ea:a7:3a:82:a1:
                    b9:3e:eb:91:be:4b:3f:d1:e5:89:85:bd:fc:c6:4e:
                    02:fe:bd:10:7e:48:41:95:a3:ee:08:7a:f8:3f:7a:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A7:23:D1:F6:6A:31:4F:1C:9D:57:47:C5:25:40:95:AE:0B:A5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01937f4d-d6cf-3e27-a35f-c13c9d62e960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:82:45:35:c3:d7:50:40:59:0e:2d:37:ea:1e:c2:ef:11:
         d2:08:31:6d:08:5e:9a:09:e7:e0:6c:6a:39:e1:97:0b:e9:25:
         f2:66:37:a7:0f:cb:94:ce:87:6d:df:ee:1b:ba:50:9f:d8:08:
         08:03:a7:db:75:e6:7d:26:bc:90:6b:ad:d5:07:6a:bf:3f:82:
         31:96:90:02:35:ef:a5:7f:3a:04:2c:75:c5:3c:03:f7:75:c4:
         6e:2f:6a:3b:53:e1:ca:60:0b:c7:8d:68:79:43:aa:f6:71:6b:
         54:b4:cc:b5:8c:69:7b:2b:f3:a5:62:a2:6b:45:a5:16:bc:e8:
         e8:c8:13:71:50:43:9a:f7:4f:9f:ab:50:61:67:c7:1c:0f:67:
         4d:8f:e2:38:aa:da:e2:22:c0:68:27:62:80:9f:4e:7e:45:bf:
         05:fe:78:d3:ca:3d:8d:92:89:85:a6:7b:d0:77:cc:f6:e8:24:
         84:06:d2:df:40:28:89:ba:a7:43:c1:57:21:4b:a3:39:b9:5b:
         c6:f6:92:93:24:ac:14:a2:82:3d:ae:f4:6d:7e:14:51:f2:2f:
         ae:bb:8c:b4:25:4a:f4:c3:47:20:40:57:4d:af:8d:1a:37:f2:
         2c:4d:ad:60:0a:84:cf:a2:7d:1b:c7:b8:88:8b:9f:ae:ad:86:
         2e:3c:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:04:08 2025 by rpki-client