Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa
File:                     4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa (raw, json)
Hash identifier:          TXOihOFnOkOB0IB9GFfec6jrTVCErNOcRYEdCIapXjU=
Subject key identifier:   C7:2A:52:2A:64:D0:C3:9A:EE:CD:9E:86:23:97:80:8D:8B:02:36:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9B273C881984ADFB6280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9b:27:3c:88:19:84:ad:fb:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=fb09fc83-ba07-4ee6-b8b1-0cc7aaef7e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:a8:0f:e7:de:fe:a8:ab:b7:c9:05:44:71:
                    69:02:33:0e:5a:f2:9e:89:46:c9:ae:e7:f2:6c:e1:
                    c2:11:c1:9e:93:d2:08:4d:fa:3c:df:da:46:d8:3d:
                    7c:fb:2e:7f:56:bd:2f:92:44:bf:b7:a5:fb:53:5f:
                    a9:a9:75:0e:b8:a5:ff:14:7a:9b:35:16:d1:e8:83:
                    e0:f3:d7:a4:0d:3e:ce:4c:10:18:54:eb:fd:6e:87:
                    62:a6:ef:b8:93:c2:ff:d8:4a:f6:7c:87:81:32:61:
                    f1:d8:0d:bc:ea:1a:81:83:5a:83:de:a6:2d:c6:f3:
                    c5:7b:06:c1:ab:b0:6d:0c:b5:44:c6:e8:2f:f5:da:
                    3d:40:53:c9:c8:e0:b5:92:3e:49:9d:4a:82:86:63:
                    cb:ce:f0:e8:09:b7:e3:7d:b1:a1:19:25:f9:66:64:
                    21:3a:7c:45:fd:9b:a7:1d:1d:1c:51:5e:01:f6:35:
                    33:5e:dd:5f:d5:8a:28:b9:06:ce:bb:91:31:5c:9c:
                    6d:1e:d9:87:a3:a1:4b:90:13:9a:6b:09:c4:0d:a4:
                    a3:c4:25:5f:19:a9:08:98:64:be:35:83:b4:81:83:
                    18:48:5b:d7:fd:c3:44:5b:b3:12:4e:f2:05:06:34:
                    c5:9d:d6:a8:c3:42:5d:74:61:9a:48:48:74:ac:9a:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2A:52:2A:64:D0:C3:9A:EE:CD:9E:86:23:97:80:8D:8B:02:36:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:3a:cf:dd:16:dd:5e:06:ae:bc:9f:eb:21:ee:67:87:cb:25:
         55:29:ea:5a:d8:5c:3e:45:2d:5e:e9:d8:e3:fc:1d:fb:c6:24:
         3c:76:c0:0e:3e:f8:db:da:29:54:f0:97:c2:2e:51:ad:9c:3c:
         21:00:80:b0:c2:21:fb:d8:75:16:d6:47:6e:cd:6d:ea:77:78:
         a2:3d:76:95:ee:6f:b9:11:b8:d9:c9:fa:64:6a:28:01:0d:6c:
         0f:ad:7f:f8:e4:0d:e5:d3:6b:0c:fa:3c:5c:3a:12:47:ee:c1:
         f1:7c:b0:ff:44:e1:c5:31:39:42:a1:ec:77:bf:fa:3b:cb:81:
         a2:81:f0:61:35:45:aa:70:6c:fe:ac:6a:28:ee:91:5b:7c:1d:
         d6:2c:6a:25:1a:85:34:dc:92:00:0d:1a:b2:75:f0:2e:dc:bd:
         a2:f7:77:8e:a7:ee:88:a6:c0:33:e7:76:cf:e2:df:43:c8:2c:
         10:8c:9d:56:ac:91:76:d0:7e:e8:8a:a7:19:02:66:c8:21:2a:
         54:36:3b:3c:36:6e:30:3b:b7:80:41:9d:88:3f:ed:e6:7f:1a:
         3a:dc:47:87:34:62:e8:56:dc:92:b1:56:3a:cb:3e:ad:df:cd:
         5c:44:b5:5b:8d:a7:ba:b9:f0:a9:ca:fc:8e:bc:1c:80:22:c5:
         a6:4e:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:26 2025 by rpki-client