Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6e9ebfc2-e911-3e49-85d2-23f787a5ae79.roa
File:                     6e9ebfc2-e911-3e49-85d2-23f787a5ae79.roa (raw, json)
Hash identifier:          GA4xFll254dP5sP/Sx1NKzrgXilGM1yOMtfjl6G38AQ=
Subject key identifier:   6C:0E:41:86:3D:07:CE:54:33:E9:CB:E1:1C:1C:8E:16:DB:D4:7C:61
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB443E93E248BECBD50B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6e9ebfc2-e911-3e49-85d2-23f787a5ae79.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:44:3e:93:e2:48:be:cb:d5:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f690e199-7739-44ae-a298-4c3381a336b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:b0:bc:9f:bd:6a:06:4c:83:b5:55:80:a6:
                    be:6e:7d:5f:70:26:ba:95:00:62:7a:a6:b7:31:7b:
                    92:7d:4d:ab:2a:69:08:23:66:4a:92:03:f3:3e:e7:
                    cb:e0:7d:a6:db:02:95:bf:20:58:42:e8:74:83:a2:
                    b7:37:5c:c0:25:2d:f3:36:d1:96:a6:1a:17:f1:06:
                    b2:34:e3:ec:6e:36:87:7c:23:d4:58:8c:c6:a0:68:
                    ec:f4:79:82:18:9d:c0:9a:83:82:19:a9:f2:d6:d6:
                    02:e5:71:4d:ad:a4:78:8c:6e:3f:7a:fa:67:fd:c7:
                    96:8c:e5:44:70:60:33:71:2b:ea:1d:35:b4:44:ae:
                    fe:53:4e:ec:e4:81:c7:fa:ae:1a:fe:29:d0:6c:8a:
                    8f:c2:d6:22:a8:a0:1a:65:09:ed:c8:8d:53:f0:de:
                    a7:f9:98:03:72:a9:35:38:f9:74:fe:f0:12:58:19:
                    86:56:c5:3c:b5:e9:a8:cc:00:1a:01:05:3d:96:9c:
                    66:53:cf:1e:91:2a:4e:15:03:54:84:a9:03:65:5f:
                    2a:48:44:fd:fa:1b:7a:4f:db:44:86:20:05:a7:37:
                    84:46:94:02:4f:c4:26:e3:41:15:f7:fb:25:13:b4:
                    48:3a:26:b6:11:34:fb:c0:a5:21:d3:d9:bc:9d:e2:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:41:86:3D:07:CE:54:33:E9:CB:E1:1C:1C:8E:16:DB:D4:7C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6e9ebfc2-e911-3e49-85d2-23f787a5ae79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:24:51:1e:67:e5:60:d7:f2:9c:1a:09:45:c7:8f:9c:20:8a:
         91:91:a1:e2:15:cd:33:6c:e3:c6:cc:05:ff:b1:56:aa:36:eb:
         05:11:da:45:5c:94:c1:67:86:38:17:67:4b:91:fe:bf:5f:3d:
         d7:3f:c9:28:6c:e0:bf:71:72:44:0a:06:e3:af:db:8a:d2:d6:
         8a:91:66:9b:1d:5a:ae:8a:ff:19:83:12:37:b9:2e:05:cd:d5:
         89:86:46:2b:e8:4b:f0:90:fd:52:37:69:c6:74:6a:5c:92:7c:
         36:24:45:11:2b:17:d2:d1:40:15:86:a7:72:94:eb:da:5b:b5:
         83:9b:ac:3e:38:3a:93:14:b0:64:58:55:b8:9d:58:6b:cc:f5:
         f5:b3:38:fa:5d:fb:e8:f4:dc:ea:a8:57:af:28:5b:73:24:9e:
         90:d1:7f:12:a4:5c:4e:19:be:57:40:de:e6:20:1b:0b:f6:15:
         17:c0:d9:4d:cf:a1:7f:c9:cb:53:c8:b0:49:97:0d:ea:c1:3a:
         74:78:e5:36:52:a7:36:7e:80:79:72:a3:9c:55:37:c6:f8:b6:
         ea:3f:e5:8d:54:8c:f3:ed:33:03:bf:35:bf:fe:b1:64:04:50:
         14:28:72:d6:d8:cb:9e:ca:c8:1d:d1:3c:2e:2f:07:89:ea:18:
         27:37:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:02 2025 by rpki-client