Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26556656-8f9a-3ac7-aff0-5a48edecdc77.roa
File:                     26556656-8f9a-3ac7-aff0-5a48edecdc77.roa (raw, json)
Hash identifier:          l6/tYksYOL1gbLLr00as/xoy4KIpnCly6ApbTE2KOLE=
Subject key identifier:   DF:97:15:A9:B6:CB:8A:EE:6B:8E:64:EA:A2:DD:22:D0:A4:C8:C0:EB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB43C03CC500F46AD24740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26556656-8f9a-3ac7-aff0-5a48edecdc77.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:43:c0:3c:c5:00:f4:6a:d2:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=903ec751-e056-43ac-86ac-c41b00810cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:61:6c:fe:d2:31:0e:47:2f:34:67:60:78:
                    03:5c:8a:75:cb:de:50:77:b6:83:15:3a:49:20:cb:
                    ba:70:d9:16:73:cd:df:38:1c:20:9b:e9:b9:98:14:
                    c8:85:df:a2:bb:d2:4a:cf:1a:19:a3:8d:73:9a:48:
                    71:2f:14:f8:0d:2e:2f:0c:ea:a0:b3:cd:52:7e:38:
                    f0:23:4e:e6:bf:5e:2f:6c:00:fb:96:fd:14:83:0f:
                    2f:0e:dc:80:e7:92:22:12:22:8f:a6:8c:ae:60:f4:
                    5a:de:42:24:ca:0c:5c:10:b0:dd:f5:54:fa:9e:13:
                    ea:1a:4a:51:cd:f8:d7:a3:d0:3a:20:0a:4f:35:79:
                    c5:54:bc:bd:2c:ed:8a:e6:5a:c2:32:e1:63:ba:60:
                    50:7e:f6:ce:2d:0d:2e:4a:78:f5:e4:b8:f5:27:00:
                    1e:ad:81:19:39:f9:b5:ce:33:a7:ce:c3:ba:2d:f7:
                    c7:93:b2:b3:0a:69:fe:00:19:93:69:5c:c7:f2:86:
                    45:a9:b9:46:d3:c8:2e:a2:47:9c:c4:d7:0f:14:ca:
                    d0:7a:c1:9a:25:44:a8:87:8e:11:10:1e:37:e5:df:
                    4f:d6:63:ca:ff:17:3f:2d:9c:d6:ca:e1:4a:1e:80:
                    0e:2f:8b:1d:4c:3f:ce:b4:f5:77:39:1a:0a:97:30:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:15:A9:B6:CB:8A:EE:6B:8E:64:EA:A2:DD:22:D0:A4:C8:C0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26556656-8f9a-3ac7-aff0-5a48edecdc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:23:83:68:5c:01:c0:7b:33:e1:77:fc:20:dc:8b:fa:16:
         6e:05:69:ce:fe:d4:6d:70:fd:50:b3:bb:98:11:b5:e3:af:44:
         c8:d5:86:9f:b3:23:0e:70:66:0b:b5:d1:b8:e2:90:72:62:b0:
         16:2b:ac:3c:2e:b9:a4:bc:96:bd:76:16:0e:2a:7f:42:8a:19:
         d3:41:22:61:8c:3e:bd:ad:fa:4d:52:71:19:31:81:47:4d:78:
         30:3d:6e:b4:5b:fa:72:78:98:fa:92:83:70:b3:38:43:d1:81:
         d3:ed:dc:67:71:2d:16:40:3b:5d:7f:24:20:57:6f:95:01:36:
         c1:47:01:0d:c5:22:2d:89:6e:c8:dc:fb:a6:d2:6a:76:57:1a:
         d4:94:72:f3:b1:00:48:59:17:9a:42:aa:46:9d:14:05:47:ed:
         a2:1b:6d:18:e0:63:a6:5b:64:78:86:32:86:2e:30:ce:e7:b1:
         ae:b9:6e:80:02:97:6b:75:96:f5:8b:c7:76:5c:8b:db:3d:0a:
         be:5d:71:2b:51:ee:a2:31:18:31:47:37:5b:2f:f0:e1:18:6b:
         de:0e:c6:7c:f8:49:be:29:36:c7:fe:cb:91:f2:f4:75:80:ba:
         d4:f6:77:08:88:91:ac:4e:28:a3:22:87:ab:95:6e:d9:26:47:
         dd:bb:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:10:16 2025 by rpki-client