Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c363c90-f889-30a6-828c-7644782a4348.roa
File:                     0c363c90-f889-30a6-828c-7644782a4348.roa (raw, json)
Hash identifier:          q53oudes7abBU/NXM3QdgRqdlYCjwl7M2s64Gr9xix0=
Subject key identifier:   57:82:AB:6F:D5:A6:C3:E1:D9:F2:0C:F8:D0:A3:E3:06:0B:59:FF:B2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA0D0448CF6756760EA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c363c90-f889-30a6-828c-7644782a4348.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a0:d0:44:8c:f6:75:67:60:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=55b0dc76-80d5-47e7-b4ff-7d5e389d006a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:68:a3:9a:ec:d8:85:1b:07:de:a1:d2:08:a4:
                    06:12:1a:47:91:4f:2a:6b:74:02:fd:e1:46:de:06:
                    33:db:77:01:f2:5c:ea:c3:c7:ce:42:9e:df:08:b9:
                    64:e6:97:3f:c8:59:12:33:01:ca:81:5a:40:31:92:
                    7e:a8:3c:d9:df:d2:97:84:bd:82:eb:16:7f:33:8c:
                    e4:fb:b0:6c:11:99:dd:42:1e:63:d5:c5:bb:32:89:
                    c3:ae:21:5f:f6:94:4f:f4:7c:99:4e:a7:c3:70:be:
                    dd:a7:ea:19:04:94:84:fa:f0:50:70:7d:c3:23:19:
                    11:f5:e5:7b:37:e8:6b:34:a9:58:20:24:eb:06:51:
                    53:3e:7e:28:6e:94:a8:ac:78:31:dc:12:b5:a0:04:
                    4b:24:13:1e:0c:36:ee:e2:91:f9:f8:35:89:17:a1:
                    bf:8b:fe:97:64:7a:c1:36:d7:28:9b:c9:bf:1d:b1:
                    79:b0:40:62:d2:23:31:6a:58:c1:b9:7a:39:f4:6a:
                    3c:e2:76:d1:b4:4d:55:02:23:c7:e7:c4:fd:71:88:
                    c2:45:33:4f:71:16:a0:c4:30:a4:d1:e6:82:9b:db:
                    bf:04:ca:3c:4d:02:b2:79:27:20:25:84:7c:08:d1:
                    95:53:a7:86:ba:6b:4b:a2:e5:cc:59:d2:a1:cd:a0:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:AB:6F:D5:A6:C3:E1:D9:F2:0C:F8:D0:A3:E3:06:0B:59:FF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c363c90-f889-30a6-828c-7644782a4348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:80:cf:d3:32:55:7a:08:c0:98:05:44:ba:d2:55:ae:ae:
         ec:85:fe:8f:b2:00:a1:7e:43:f0:1f:f5:21:e4:16:60:d7:7e:
         47:1a:2c:c6:bc:30:76:07:5c:1c:65:dc:9f:4a:f0:2c:73:07:
         e0:4f:aa:2f:2d:b9:21:47:a0:21:a6:6a:a9:76:ce:e2:2d:85:
         4f:a6:63:17:7b:2e:88:a0:dc:9e:ad:15:22:cb:9a:b8:62:3f:
         35:79:07:ac:29:79:35:4c:ea:3b:56:8a:f7:87:10:08:20:9a:
         5b:09:4e:c9:0d:98:7c:bc:66:3a:cc:b3:ba:4a:28:c7:af:06:
         eb:57:b8:30:b0:2e:40:02:3b:8b:b5:97:94:e1:75:0f:1e:0a:
         36:fc:10:de:4d:ee:38:78:88:7a:2e:66:58:15:83:38:79:a3:
         e2:6f:cf:9f:dc:77:a2:82:d6:75:f0:ab:cf:09:f4:30:46:c6:
         84:78:8b:52:5a:1e:1c:a7:15:b5:97:1c:56:fc:95:1b:da:c8:
         55:13:b8:84:ca:b9:d5:7e:1b:b8:16:28:c7:e5:8d:3d:db:c0:
         ff:41:f1:2a:b7:f4:9b:e2:c0:0c:26:a3:f2:8d:d5:48:e2:a5:
         ed:7d:06:31:3f:77:c3:ed:98:6c:8e:3f:d2:7d:04:8d:a0:2b:
         d2:a4:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:10:06 2025 by rpki-client