Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74a04071-e947-326b-9116-0aefe766610c.roa
File:                     74a04071-e947-326b-9116-0aefe766610c.roa (raw, json)
Hash identifier:          OPOC4YETFyWaniE2BuZ+ox5Y95FX0IAP8EcK9l94OZQ=
Subject key identifier:   C5:12:10:42:7D:81:E7:C7:3F:C2:DE:80:56:A1:16:46:62:EE:22:AD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9E9821002A4263B62B38
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74a04071-e947-326b-9116-0aefe766610c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9e:98:21:00:2a:42:63:b6:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c40dbb0a-317f-4f1b-823e-b6cbcc16bbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:ce:88:64:e6:8d:4a:6a:b7:61:ca:39:b5:
                    31:3e:39:61:a2:a5:3a:d1:82:d6:7d:42:41:d1:1b:
                    9a:d6:42:2c:23:2e:7a:1b:a2:f2:00:7e:9e:23:00:
                    7f:bf:74:6b:6a:b6:2c:95:bf:9b:63:e1:cb:b5:b5:
                    65:6f:59:c0:09:35:6f:99:fc:5e:92:51:0f:fa:7f:
                    60:4f:db:b9:a2:99:52:e3:3e:6b:09:5d:c7:51:38:
                    84:e5:a0:7a:6c:f1:89:22:c9:61:42:51:6a:56:b1:
                    a9:e1:90:81:03:62:85:50:5f:e3:02:9d:64:77:e5:
                    9e:c4:79:98:65:c9:6d:4f:f0:1c:ea:5e:81:52:b6:
                    b7:b4:ba:4e:5b:44:a0:35:da:2d:a9:e8:7e:e6:d5:
                    4a:51:a2:0b:24:b3:3c:df:75:60:e3:6e:4e:30:8f:
                    bc:dc:4c:0a:a2:c6:51:5d:0e:bb:80:6c:66:ed:77:
                    22:85:29:6d:d6:96:d9:93:45:f7:70:21:9e:e3:3f:
                    14:71:54:53:5e:dd:4d:64:f1:e5:dd:7f:be:07:1c:
                    61:54:85:9a:b4:cf:f8:68:85:36:fb:51:6d:13:91:
                    cf:0b:72:06:70:63:01:00:fd:3e:f0:3f:4c:e3:c3:
                    54:e5:93:7e:56:76:b1:07:2c:ee:dd:01:a3:99:72:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:12:10:42:7D:81:E7:C7:3F:C2:DE:80:56:A1:16:46:62:EE:22:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74a04071-e947-326b-9116-0aefe766610c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:25:1c:92:20:39:49:a9:c8:8a:a3:c0:a2:43:d8:9c:2b:0d:
         32:f2:d7:1d:48:54:6d:59:fe:86:c0:cb:a5:80:50:77:09:bc:
         dd:20:d7:b8:23:44:22:be:34:bf:c6:f3:cf:ae:34:fc:80:af:
         0a:76:7a:dd:91:e2:cc:9b:31:28:b0:42:38:0e:87:cc:0a:0f:
         ac:9b:3a:13:3d:9d:65:89:9d:98:ea:e9:aa:d7:06:86:41:5e:
         4d:c9:6f:f3:e8:52:24:ad:31:4b:d1:79:2e:9e:c7:b0:dd:c0:
         1a:a3:35:c0:04:ed:dd:11:40:04:10:35:f0:bc:78:88:af:5b:
         27:b6:da:db:a1:24:e5:ad:8f:ff:03:01:ec:c3:4b:cb:1b:46:
         b6:21:2e:7e:30:f4:20:02:ee:4e:04:83:64:9f:04:b9:b2:ec:
         87:a9:c3:41:ea:1f:ee:ca:16:28:d6:9f:80:10:bd:1d:08:ee:
         fd:54:3a:20:1b:fd:16:2d:5f:94:c1:08:5a:b3:e6:97:45:f5:
         72:b0:ec:d7:51:f7:fe:50:28:5d:1e:43:1a:7b:a0:e8:19:09:
         8d:9c:9e:cb:b7:8a:69:90:50:7d:1a:93:ec:3d:d3:89:5d:78:
         23:33:16:5c:bd:03:b8:0a:31:d2:a2:b1:85:cc:52:76:34:88:
         59:d2:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:34:41 2025 by rpki-client