Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/156aeb1e-3894-37ad-a56f-f6a217eddc1b.roa
File:                     156aeb1e-3894-37ad-a56f-f6a217eddc1b.roa (raw, json)
Hash identifier:          uNd5rpkO0N8QQyC2DJkhwIL919TomqgRPH4qrbAaJro=
Subject key identifier:   F0:E7:57:92:B3:08:80:68:0E:7D:EE:15:1A:FA:05:94:53:AD:6D:6B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9D1373829F345F0A02E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/156aeb1e-3894-37ad-a56f-f6a217eddc1b.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9d:13:73:82:9f:34:5f:0a:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=27d0003f-bbd5-4e5c-ab82-8bcfbcf5dc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:68:b3:d8:53:b6:4e:c3:47:d3:79:25:fa:
                    12:20:a3:01:50:70:9b:ee:f0:11:bc:fa:d2:0d:1f:
                    31:4a:fc:52:60:33:7d:53:ca:ac:01:50:80:ba:f8:
                    7f:dc:e9:90:7b:26:8c:0a:0a:e7:73:17:d4:85:d7:
                    7d:cf:25:5b:fc:47:75:79:c7:59:61:2e:e2:26:56:
                    64:9b:0c:ea:92:51:0d:03:97:15:7b:99:4b:b9:f0:
                    36:23:ae:61:05:45:05:52:46:48:94:c0:98:27:5b:
                    7f:3f:ea:71:25:ee:f4:f2:70:25:d7:df:50:43:4a:
                    17:d2:64:87:ab:de:c5:9f:40:65:74:16:19:25:f9:
                    95:dd:82:02:fd:ae:ce:4c:be:04:76:ee:01:2a:9b:
                    74:57:80:6b:a0:e3:c7:06:71:9f:9e:66:fb:ea:b9:
                    b4:68:e3:56:e8:f5:53:5b:29:77:83:09:b8:c0:7a:
                    e7:df:36:49:49:cc:33:0e:81:04:55:aa:de:50:39:
                    1c:2e:41:14:0f:15:3b:8d:ae:17:ce:21:8e:a3:9c:
                    a4:ac:9f:e7:37:7b:40:e1:18:fe:da:3c:5f:6f:52:
                    bf:85:b6:22:5a:8c:b9:c9:cc:da:18:4a:6b:ed:f5:
                    67:de:6d:56:7b:f8:0a:d6:70:9a:98:19:17:a3:32:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E7:57:92:B3:08:80:68:0E:7D:EE:15:1A:FA:05:94:53:AD:6D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/156aeb1e-3894-37ad-a56f-f6a217eddc1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:e4:25:90:ed:5d:b4:8f:3c:07:fd:1f:95:3a:2e:6a:16:
         0e:34:6c:50:0f:67:c3:21:0d:5f:b3:ee:0c:ab:25:bd:46:42:
         a7:c0:78:cc:1c:92:ca:ce:bb:3b:e2:c7:3d:e1:1b:ae:94:40:
         c2:96:61:92:a7:07:33:a9:fa:e6:16:58:28:d6:72:6f:40:76:
         52:20:b3:5a:ba:16:0c:fd:58:32:c7:b7:8d:1e:98:7e:b4:4f:
         86:2b:29:70:45:a2:83:40:86:12:74:7e:88:59:d8:f8:d1:1f:
         87:e5:64:b3:ba:38:c8:6c:a9:e2:dc:af:9b:4b:c4:c0:08:bb:
         6e:7e:5a:a0:24:48:ab:dd:c6:50:e8:32:90:5c:02:70:fa:73:
         5d:c9:d6:b0:da:16:3c:b7:92:16:13:5c:87:db:18:70:33:44:
         73:5b:d3:73:74:07:01:11:29:d4:b8:c9:62:a7:64:0f:e4:f3:
         64:79:07:7c:8b:52:a0:d9:2c:6b:14:92:1d:3c:88:7c:bd:d8:
         8c:90:22:80:53:3c:a5:f3:b2:98:66:eb:4f:58:ea:b2:35:91:
         1d:8c:a7:7c:c7:aa:4e:fd:40:d3:86:0e:eb:68:cb:9d:5a:36:
         2c:6c:48:de:a2:d6:4e:f6:3d:45:3f:5e:68:3c:f8:7d:d3:c6:
         89:06:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:05:06 2025 by rpki-client