Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72d3bfdb-aab5-3af9-9c39-4ee8bae3bcb8.roa
File:                     72d3bfdb-aab5-3af9-9c39-4ee8bae3bcb8.roa (raw, json)
Hash identifier:          RBSh5BYnZRGo4yD309qMnTAoKmLPkE1fE/s0AqXcGs0=
Subject key identifier:   85:B8:2F:F5:55:54:DA:57:E4:1E:7F:F1:84:7D:D8:BC:A4:A4:39:B6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9ECCBE2A21D5BAF7E980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72d3bfdb-aab5-3af9-9c39-4ee8bae3bcb8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9e:cc:be:2a:21:d5:ba:f7:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=4df24ed4-61d9-457c-b2a8-51e8f6278988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:1d:2e:d1:85:ce:5f:29:7e:ca:09:48:fc:
                    c9:14:24:b3:d7:aa:f8:0e:1f:28:ef:9c:1e:99:7d:
                    dc:24:cf:34:61:0a:83:da:e1:1b:1b:ac:41:c6:eb:
                    49:20:b2:16:c2:7d:95:4e:c8:aa:f9:3e:5b:42:ba:
                    07:f2:b2:14:c6:cc:19:02:54:a2:8a:0a:ad:65:d2:
                    e1:48:43:06:83:6f:f1:17:cd:fa:38:e6:38:be:7b:
                    c9:ca:65:cd:9a:1c:5d:92:11:b7:27:02:6e:92:05:
                    95:b5:f9:f2:5f:8a:f6:eb:d7:96:d1:d9:9c:88:94:
                    54:7b:32:cb:20:b6:1c:4c:68:e4:5b:73:42:6d:2d:
                    21:48:00:1f:6f:84:53:c2:c4:4e:9f:65:07:1f:f1:
                    80:ab:82:dd:ab:4c:80:07:ea:89:76:a0:1b:3b:aa:
                    8b:75:f3:32:6f:e2:a2:1f:d2:32:82:a7:6d:ec:db:
                    fe:39:36:68:45:32:31:6e:77:cc:bb:2b:30:04:87:
                    c1:68:9e:7e:fd:df:4b:fb:d1:99:9c:d5:4f:4b:b2:
                    9b:a9:43:95:fd:25:89:dd:5e:aa:ba:cd:93:86:fa:
                    18:6b:e2:d0:90:37:27:2a:b5:9e:a0:df:70:11:cf:
                    d0:55:84:02:6c:6e:62:47:3b:0f:74:bf:dc:f0:fb:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B8:2F:F5:55:54:DA:57:E4:1E:7F:F1:84:7D:D8:BC:A4:A4:39:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72d3bfdb-aab5-3af9-9c39-4ee8bae3bcb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:85:b5:62:1a:c3:49:06:c6:dc:7d:e0:17:17:d0:de:78:b9:
         e3:b4:9b:ee:b6:bf:83:cd:11:50:ae:b4:67:4a:0a:e6:59:4f:
         9e:76:a2:7c:31:17:76:3c:fb:1a:5a:62:2c:0f:5b:f0:52:33:
         6f:8a:be:8a:5d:15:ba:05:b4:bc:0f:7f:41:6d:99:75:ff:61:
         8a:1f:75:6c:df:3c:07:b4:a2:76:73:07:73:da:d8:cf:41:93:
         e3:f7:14:03:fa:9c:09:fe:91:a3:47:15:a5:36:51:43:70:8e:
         c5:df:ea:16:ef:1d:63:f5:82:20:13:e9:b3:e4:bf:31:70:58:
         f6:60:e9:5f:f1:e3:50:10:8d:c2:e4:66:be:fe:4c:7b:fe:37:
         f9:40:fd:16:fa:ff:09:fb:84:cd:74:ee:aa:38:a6:02:3c:60:
         4f:70:1b:2b:21:d3:77:19:bb:1f:75:13:f3:54:94:7d:d6:0d:
         49:cf:54:d9:f7:cd:84:47:45:77:ea:9d:66:2d:ad:26:3d:a0:
         5b:89:19:a8:ca:6b:74:7a:05:21:54:73:2a:d3:73:1e:f5:e0:
         1e:ff:40:d9:be:30:f3:ec:62:54:1c:e4:64:e7:d8:2c:fc:1f:
         f8:0e:d2:34:2b:a9:32:25:ef:96:93:75:d4:df:a4:be:09:49:
         61:0b:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:18 2025 by rpki-client