Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21b47255-c8af-35ee-9c09-6ac2d7641733.roa
File:                     21b47255-c8af-35ee-9c09-6ac2d7641733.roa (raw, json)
Hash identifier:          6Kn/L1AcfedauG5LRlmzFG2/7aRoDmReMOuINct2MTg=
Subject key identifier:   D4:5F:B2:5B:93:79:6D:13:E9:85:A8:F8:11:D1:5F:2C:BE:00:FE:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAAAC1F5C5C4C799E7B290
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21b47255-c8af-35ee-9c09-6ac2d7641733.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:aa:c1:f5:c5:c4:c7:99:e7:b2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=98a1f86e-caf1-4e73-aeb0-10beecfa408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:19:60:ab:4c:bc:24:a0:ec:2a:48:f0:29:
                    55:97:ae:8c:aa:77:ed:48:24:f6:85:47:96:9e:94:
                    96:be:17:55:24:4e:70:da:78:d5:99:7c:a1:43:2e:
                    48:f0:d1:3c:e1:dc:d8:7a:f8:21:42:1c:31:90:5d:
                    b4:fe:ef:26:34:b0:f8:a4:43:8f:63:e5:14:ac:ad:
                    94:b0:4b:d7:c4:60:7f:ab:56:c6:68:39:b4:bd:c8:
                    e8:af:85:0e:3f:3a:da:95:bc:60:f4:c4:0b:92:2f:
                    ab:c7:39:1e:3a:1e:77:fe:70:29:2e:98:d8:16:67:
                    ba:b1:ce:b3:ff:97:91:4f:20:47:21:e4:14:3e:e4:
                    8c:93:7e:7d:31:d6:13:cf:c8:ba:29:ee:b1:5c:24:
                    b3:2a:99:d3:00:68:a8:71:ca:17:e8:3e:0f:c1:2b:
                    74:ba:1e:0f:fb:e8:22:7f:04:b5:49:21:36:28:d8:
                    9b:87:12:5d:40:da:3a:66:fd:6c:ef:78:a7:10:37:
                    0c:1e:8b:2d:5f:76:33:7c:78:64:5b:6e:3e:7f:6c:
                    88:bc:f5:af:63:af:1b:bd:a1:f9:68:1b:8b:a1:ed:
                    b5:89:a1:a3:8f:1d:0c:f5:0b:e3:e1:fb:f9:c8:2f:
                    23:df:5a:47:8a:50:9d:8b:15:76:47:00:f9:cf:dc:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5F:B2:5B:93:79:6D:13:E9:85:A8:F8:11:D1:5F:2C:BE:00:FE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21b47255-c8af-35ee-9c09-6ac2d7641733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:53:0d:ee:f3:8f:da:47:2d:c6:93:16:96:31:f7:01:6c:
         d2:cb:2c:4d:c7:57:a6:eb:f0:3d:00:f4:11:d6:ae:43:13:43:
         59:6f:a7:b3:fc:4a:4f:e8:d4:b8:47:b4:8f:2a:b5:23:01:0e:
         1c:75:e3:67:3c:dc:d3:92:f7:01:5d:fc:e6:37:67:fa:43:9f:
         a7:8d:b5:dc:94:48:8b:33:29:9e:50:6c:39:69:e2:94:7d:7c:
         9e:0e:16:01:1c:b5:0d:82:44:ae:de:48:1f:43:0a:1a:38:54:
         54:76:03:48:17:af:70:9e:2f:29:df:6e:96:c5:29:ca:97:ab:
         22:ab:37:ff:fc:b2:37:bf:ab:d9:51:8c:0f:6b:54:18:e7:0a:
         96:c6:63:26:27:24:41:a2:d1:ad:23:69:22:e9:b0:31:da:15:
         a9:34:5b:3e:d7:95:22:e0:d3:6d:fc:1b:d7:a1:1a:c9:64:b5:
         aa:00:0d:77:8a:6b:60:0d:c9:1f:a1:ee:e8:61:f8:1c:8d:a2:
         01:85:dc:f0:68:c5:74:11:b6:e2:83:ea:32:c6:15:94:dd:c8:
         38:9b:36:4f:ba:35:af:47:20:83:56:6e:06:ba:21:86:75:31:
         88:98:64:04:a6:33:c3:14:64:76:6a:27:fb:4d:8b:10:f5:3f:
         c9:8f:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:28 2025 by rpki-client