Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/457e2b17-bf6b-3152-b58a-599d5971ec34.roa
File:                     457e2b17-bf6b-3152-b58a-599d5971ec34.roa (raw, json)
Hash identifier:          7c0cyVFXMWzhWmT/OQfHolSY04b6HD3w6Bl8LivkUtY=
Subject key identifier:   F6:4A:AF:66:9B:80:90:7E:2B:EE:9A:68:7A:9C:0E:9A:0B:B9:F5:C4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA219E2CE3A6028E91900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/457e2b17-bf6b-3152-b58a-599d5971ec34.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a2:19:e2:ce:3a:60:28:e9:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0ceef1b8-ffcf-4b2c-87ca-35835159a9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:35:94:d8:32:0e:ec:cc:32:05:77:1d:a7:
                    56:1d:12:0b:f2:e7:a5:4e:d2:b4:e5:83:a3:be:c1:
                    6b:79:78:7d:c1:fa:b9:5f:7f:cb:7f:6b:a5:18:bb:
                    54:fc:56:98:d7:76:04:32:b0:1f:80:43:a7:6e:30:
                    38:27:21:5d:e3:62:f7:27:27:68:dd:6d:66:18:63:
                    12:96:9e:d1:71:da:8a:d8:34:bb:7a:08:90:b1:8a:
                    0a:ad:f7:16:45:31:61:5d:c2:0e:bf:67:13:1c:1f:
                    0d:c0:e8:75:27:c3:59:10:e2:47:6d:26:ab:18:8d:
                    01:54:68:3d:72:5e:b1:c6:fd:18:8a:03:94:0d:b5:
                    16:f7:fb:08:6d:83:d9:56:5a:c7:5d:ea:3a:98:8f:
                    b9:dd:dd:b9:e3:1c:46:39:73:93:c5:d7:b1:9c:86:
                    5e:04:57:59:30:1a:bf:47:7b:f6:77:dc:4a:e0:9e:
                    31:dd:d5:bd:2c:34:06:f7:ff:cf:72:88:69:a2:ea:
                    4b:96:40:ec:ef:36:f3:c2:6b:07:09:ff:cd:53:53:
                    60:0d:0a:78:a8:cc:9f:9c:cd:9f:76:b6:77:94:26:
                    df:3e:c2:33:39:0f:37:9e:3c:7e:49:78:eb:f5:4a:
                    c9:b3:a4:65:72:58:3b:9c:63:49:a4:32:3a:96:0b:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4A:AF:66:9B:80:90:7E:2B:EE:9A:68:7A:9C:0E:9A:0B:B9:F5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/457e2b17-bf6b-3152-b58a-599d5971ec34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:49:f5:8e:ef:e4:67:9d:da:a7:7e:07:f3:36:66:8e:4d:58:
         b5:b6:a9:bb:77:7a:dc:b8:4e:ed:39:54:d1:fe:67:ba:ad:ab:
         74:86:38:a5:46:23:53:23:48:67:f9:6e:ae:47:71:7e:83:e1:
         38:bd:d2:cc:e7:f2:76:6a:23:29:01:d4:be:92:f8:ae:3c:12:
         18:9f:3b:19:c2:b9:37:09:b8:07:47:d8:96:60:11:ec:d4:59:
         29:73:ed:15:ce:e2:24:f2:a4:3a:06:d4:20:a9:86:71:5d:f1:
         a1:11:bf:a9:77:1f:96:01:70:34:d1:a0:4e:3b:a3:53:dc:d6:
         b2:86:6d:e2:84:7a:0d:fb:c2:1f:3d:ba:f0:d4:11:ea:ac:4d:
         b2:59:8e:3c:4a:18:01:46:96:18:d8:2a:7a:1b:cf:d9:66:43:
         ee:f3:cf:62:40:7d:ad:31:c9:4a:4a:30:33:69:18:ff:32:64:
         09:f6:d8:ec:35:3a:75:79:37:4d:c1:fc:61:90:b4:15:72:08:
         88:10:05:5e:fa:60:e6:73:ba:60:d0:7a:76:5a:ac:7e:76:c2:
         05:aa:dc:6d:9e:35:d5:af:00:78:c8:6b:cb:f4:96:b1:f8:2b:
         69:53:8b:3a:42:52:66:4f:ed:80:d1:02:7a:12:ce:8f:41:34:
         0d:ee:81:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:30:29 2025 by rpki-client