Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55749e66-dc54-3f08-bfdc-498323306203.roa
File:                     55749e66-dc54-3f08-bfdc-498323306203.roa (raw, json)
Hash identifier:          jJ4IRHrATAsk2zrll2/vRAcDo660YI+Qinhq3SMNmrI=
Subject key identifier:   63:61:A0:5B:EC:AB:7E:B8:A1:11:EA:13:4F:1F:B1:FC:E6:A2:56:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9F9CEBF254F8BDF51B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55749e66-dc54-3f08-bfdc-498323306203.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9f:9c:eb:f2:54:f8:bd:f5:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0be1f91b-558c-41e9-8879-4cafbacc9a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:de:29:12:3d:c2:bb:48:f3:dd:76:dc:55:
                    b7:78:e0:a9:d5:99:a0:26:6a:40:7e:24:cf:a8:4d:
                    f7:e5:92:33:99:c0:49:81:e7:7d:9d:09:ed:07:98:
                    2f:85:23:14:f5:ba:ab:62:aa:1c:54:78:51:6e:5d:
                    20:a2:06:51:e8:8b:95:15:a9:fb:a2:04:20:69:05:
                    7d:76:d3:7d:97:f4:96:61:49:76:d1:84:5a:58:03:
                    cd:43:f1:c7:8e:b1:c8:35:b5:1d:4e:dc:d1:ea:f9:
                    ea:eb:67:fd:15:7e:4e:47:5a:d7:c1:dc:36:62:9a:
                    59:3b:cd:da:8c:bd:82:fe:ab:bb:37:cb:63:7f:1d:
                    a0:97:dc:33:fe:66:1b:37:f1:ad:b0:13:9a:6e:3e:
                    96:94:63:02:5d:ac:bd:ee:10:da:9d:de:55:8b:1d:
                    92:e3:5d:80:33:2d:ad:be:25:85:17:0e:33:35:4b:
                    ba:9a:26:a3:91:2b:16:f7:64:a4:53:54:05:5d:f7:
                    b3:29:b9:7e:ad:ca:a4:dc:98:02:2e:83:b9:59:82:
                    f8:76:bf:32:a3:21:94:67:a7:2b:91:9f:7a:75:65:
                    98:db:fd:f1:6b:38:2f:22:b9:4e:e6:ba:0e:55:1b:
                    88:d7:1b:98:84:3e:ba:63:65:a7:62:90:51:0d:0f:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:61:A0:5B:EC:AB:7E:B8:A1:11:EA:13:4F:1F:B1:FC:E6:A2:56:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55749e66-dc54-3f08-bfdc-498323306203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6c:83:2e:b9:aa:e8:96:d0:ad:82:99:11:36:8c:17:9d:be:
         5a:ee:04:f4:c3:ea:d4:fc:05:7d:40:5a:3f:df:37:68:0a:de:
         fc:5f:7d:94:48:6d:93:ba:1b:9e:ff:6c:2c:56:a5:a5:c8:69:
         b6:b5:f8:0f:1d:74:6a:8c:78:23:95:95:86:46:c9:9d:a9:46:
         52:d6:a9:3e:60:15:ab:8d:58:b2:34:2f:ca:1c:4d:56:66:0c:
         e1:d9:e9:87:39:9d:85:17:94:64:07:9d:56:c6:23:8c:81:a0:
         65:24:e0:46:c4:61:35:6b:c1:6d:9c:08:35:29:35:d0:3f:92:
         dd:20:ff:ac:11:70:b7:e8:6b:99:a2:a4:ac:65:09:ed:ba:80:
         45:43:e1:68:45:1c:a8:06:60:ce:53:ef:ac:32:d7:f5:36:0a:
         44:e6:a0:d2:3f:ce:9c:3a:92:3b:db:bb:5b:f2:2b:7d:05:a8:
         17:7b:87:a8:9c:91:fd:4a:b6:83:8c:7d:ff:48:c3:f6:97:2a:
         14:2e:14:67:f1:f1:f4:f7:fd:fe:5c:4e:f5:5e:c9:98:f4:61:
         27:f2:bd:c0:27:65:4f:ee:a0:27:b9:e7:74:c6:ee:90:91:32:
         92:9c:98:19:cc:0c:49:11:68:5f:08:3a:b1:b1:f5:4b:e3:1a:
         6f:91:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:17:53 2025 by rpki-client