Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bedf6e3-6c45-314b-bd36-450e0e49dcae.roa
File:                     1bedf6e3-6c45-314b-bd36-450e0e49dcae.roa (raw, json)
Hash identifier:          Ozpxb5IykcqFhMpGuFoWCYMZDOmxrND47FJg9o5yjxo=
Subject key identifier:   99:1E:37:38:19:33:CA:89:4E:D9:8E:EC:81:13:10:B4:88:D1:C0:5A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA6006BE5EBBAE1F65580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bedf6e3-6c45-314b-bd36-450e0e49dcae.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a6:00:6b:e5:eb:ba:e1:f6:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e81ed70b-9138-44f0-b975-43f0dd0ddeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:21:ec:0e:ac:48:a1:38:a8:c3:9b:f9:a1:
                    93:00:2f:0b:f4:77:33:d8:0f:dd:57:76:c6:cb:e6:
                    27:8b:ca:04:38:d1:d3:48:df:23:a8:84:70:9a:8e:
                    0b:7d:7b:3b:eb:49:42:df:5c:c7:97:a5:f5:a8:7a:
                    2c:d4:13:9b:31:e3:84:a3:72:95:ee:ad:e3:a6:8f:
                    19:e4:c1:e5:5e:be:9a:4f:e7:b3:4a:a5:94:d4:c2:
                    00:c9:55:66:ec:f8:3e:29:61:63:38:30:cc:a1:29:
                    b1:06:e9:78:81:34:90:7b:3d:e0:66:d2:24:0c:e7:
                    74:68:51:7f:73:d3:37:b6:a7:71:dd:0b:0c:36:8f:
                    8b:b8:9a:11:93:b9:8b:15:f1:5c:ec:51:35:08:a0:
                    14:13:7c:78:d3:4b:1c:6c:0a:eb:de:f1:92:a3:a0:
                    10:39:6b:ad:e3:95:24:ab:2e:40:29:fd:ed:4a:23:
                    69:e0:b5:06:74:61:ad:8f:a2:c5:c5:5c:fa:bf:1d:
                    bf:49:fb:5f:05:10:e3:99:3e:68:b7:f6:8e:54:bc:
                    61:3e:60:2d:ed:8c:28:9e:c7:0d:eb:18:ba:aa:f7:
                    d2:7b:13:54:db:bc:1e:9a:0e:b9:24:d3:77:65:60:
                    89:85:35:80:88:1b:5c:17:98:4b:ac:72:8e:a0:35:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1E:37:38:19:33:CA:89:4E:D9:8E:EC:81:13:10:B4:88:D1:C0:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bedf6e3-6c45-314b-bd36-450e0e49dcae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:6a:40:45:52:ae:47:9e:4b:1a:4d:ef:b0:f0:2f:81:be:
         84:54:2e:60:75:a3:ee:1e:b1:a4:89:f4:4d:8a:5e:e9:87:b0:
         9d:26:85:d1:4b:9c:b5:42:67:b4:30:20:78:6d:29:fe:eb:02:
         ec:3f:64:32:14:44:9e:7f:42:2c:52:86:7e:32:9b:53:60:4d:
         37:47:48:bd:68:20:fa:4f:e9:86:16:7c:1c:7a:f3:e5:7c:2e:
         63:3e:d2:da:2f:9d:9a:61:fa:97:10:4d:1f:38:72:38:20:35:
         8c:6c:98:35:12:52:14:91:82:f1:95:ee:76:c6:c0:80:88:88:
         cb:76:e6:6d:e7:cb:3c:fa:69:eb:31:70:ba:71:6f:25:ec:7d:
         b8:33:e3:26:26:88:77:e9:2a:26:9c:b1:c3:c6:97:a1:f0:06:
         93:9c:0c:1d:f1:85:b4:a3:19:f3:7f:34:61:f5:42:33:ea:70:
         7f:1b:b2:e5:3e:cf:39:5f:44:e8:f0:f7:0c:84:8e:df:64:85:
         f3:1a:38:53:89:96:fa:57:45:3a:18:de:05:52:b0:30:0c:33:
         ef:80:be:d5:b1:74:ae:6d:ac:d4:8a:3b:aa:f5:32:68:6c:0e:
         9b:9e:9f:b8:74:a7:7d:c1:1e:2f:73:47:5b:98:57:c6:55:9c:
         ed:d1:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:07:05 2025 by rpki-client