Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8098f754-1bf7-3471-a1a4-037c2f2e0d23.roa
File:                     8098f754-1bf7-3471-a1a4-037c2f2e0d23.roa (raw, json)
Hash identifier:          fE03M4/lUYzmlOyLDPUNkr0Z+iygTZ3kWy+szQwQPHI=
Subject key identifier:   F7:38:C6:3E:33:65:6A:10:31:9A:0A:1E:B1:C7:28:D6:E7:51:87:09
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB43B336C530BAC25F9460
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8098f754-1bf7-3471-a1a4-037c2f2e0d23.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:43:b3:36:c5:30:ba:c2:5f:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1e02c7e8-757d-4502-b66f-164137ed4df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:69:54:d6:ff:68:a8:21:b7:02:ac:e8:83:
                    b5:d4:59:5d:45:d4:f3:4f:fc:d7:d6:2b:b6:a2:50:
                    dd:db:29:0a:20:e2:b3:8f:94:ee:18:58:95:2a:48:
                    8b:53:e3:81:bb:61:04:0f:47:f4:93:fa:fc:99:66:
                    fa:ed:c4:84:5f:04:a7:d9:0e:dd:f1:9f:1b:63:f6:
                    c5:e5:cd:61:49:ec:4f:9a:4b:76:5a:b3:3c:7c:b2:
                    81:1d:30:da:fe:96:63:bb:14:4f:c5:64:02:8d:a8:
                    e7:50:59:69:36:86:4f:54:9a:a1:59:79:f0:0f:af:
                    22:b0:b5:44:85:ab:bb:08:f2:ca:0d:78:82:d6:c6:
                    cd:79:f0:49:c2:14:33:22:5a:10:e0:f9:14:94:09:
                    68:69:04:14:ca:a3:51:73:f9:aa:17:46:68:0c:f5:
                    ab:4d:63:d1:67:3f:65:65:62:2d:f6:5e:cc:7d:a1:
                    af:b4:8a:73:b5:81:80:53:e7:d5:4b:28:42:c5:18:
                    f8:9c:51:96:06:8a:c1:70:71:c6:ec:df:a6:7d:19:
                    74:ef:77:e1:40:57:95:df:2d:da:ab:42:4b:23:a4:
                    17:74:68:0e:16:2b:87:8b:37:93:7e:96:3a:bd:51:
                    26:2b:83:d6:81:cd:1f:2f:b5:8e:65:01:e0:af:b5:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:38:C6:3E:33:65:6A:10:31:9A:0A:1E:B1:C7:28:D6:E7:51:87:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8098f754-1bf7-3471-a1a4-037c2f2e0d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:5b:ad:5e:c1:3d:02:ff:b8:c3:34:40:77:19:9f:87:86:
         40:6d:82:02:2c:7c:ed:2b:5f:19:67:4b:09:02:5f:dc:7a:32:
         2c:c8:b2:c5:c2:ea:fd:f7:26:c9:b9:45:cb:a3:84:6a:b7:cc:
         f6:ee:ac:7c:47:66:f8:25:ec:54:a2:db:43:4d:39:a4:ad:ce:
         23:8d:3b:92:86:11:6e:80:11:b5:95:a1:30:5e:8e:22:ae:b9:
         48:b2:d6:a6:ad:4e:13:c2:32:14:a8:17:5d:84:47:12:2c:65:
         f0:6c:f9:33:1f:25:f3:84:88:83:1a:ed:4e:22:38:f2:73:26:
         9a:89:ee:ce:0c:43:6f:3f:37:bb:ac:c9:09:f8:c1:1d:fd:42:
         c9:a7:2e:71:f6:ad:e5:0b:12:b2:49:de:15:38:b1:c6:22:9a:
         d6:31:e4:48:cd:e4:f9:dd:00:18:04:9a:7f:90:cf:0d:71:25:
         9d:f2:54:6d:f9:eb:d3:c1:6e:3b:5c:83:8f:a4:1c:d0:03:b9:
         ca:dd:50:77:81:11:39:96:ec:94:54:d7:1f:0a:d1:6a:95:47:
         0d:a8:fc:0c:43:3c:d6:c2:82:de:4c:ee:4d:b1:22:a8:3a:66:
         4e:e4:8c:27:15:83:23:b9:66:48:8e:d3:3a:62:23:ab:9a:68:
         68:93:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:17 2025 by rpki-client