Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82b30458-95ea-3430-9337-25431cfcc479.roa
File:                     82b30458-95ea-3430-9337-25431cfcc479.roa (raw, json)
Hash identifier:          YFGwttQl/4wI/eEeDqFEoe/XPM9JKruG1HcmdlyC6Pg=
Subject key identifier:   F4:63:1F:50:35:EB:F6:7D:6F:BD:3E:EA:FE:E2:7B:A0:F7:7D:D3:8E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA56226B2929A2E519000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82b30458-95ea-3430-9337-25431cfcc479.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a5:62:26:b2:92:9a:2e:51:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ec92abe7-de41-4425-a4f6-7370b1aab4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:66:f3:1c:c5:e6:c5:4b:66:b6:be:00:61:
                    f5:c5:6e:9d:11:6f:91:cd:1c:67:fc:af:45:48:5f:
                    4a:2f:72:a4:3f:88:d6:a6:23:9f:ef:62:e2:7b:73:
                    f4:21:0b:3e:07:8c:90:09:f2:ec:ab:3a:4b:a2:38:
                    c9:d6:a9:9c:e7:b0:5d:13:50:24:88:f2:03:be:27:
                    66:1f:91:81:52:97:89:2d:23:e2:cf:ba:53:5b:7b:
                    1f:de:37:10:bd:9e:5b:40:a4:c1:28:9b:a5:e9:c5:
                    9a:d3:0e:88:04:e0:ea:81:70:e8:50:b2:09:2b:5c:
                    51:07:58:d4:19:2d:46:40:8f:ee:45:5e:df:d6:8a:
                    41:34:65:e9:c5:a1:c5:bd:45:be:02:d8:5b:e7:f0:
                    ba:2a:5d:a8:9e:be:a7:6f:97:41:2f:0f:3d:83:12:
                    71:c0:2e:9f:83:d8:c6:39:c8:62:37:b2:e5:3c:fa:
                    b3:6a:27:80:fb:e1:f9:3f:27:28:ca:ce:10:c3:c5:
                    ef:99:44:a2:4f:09:0a:e3:21:c2:a6:12:c2:c4:77:
                    c3:0c:9a:76:61:e8:d6:1f:34:59:c7:f7:f4:bb:65:
                    03:d6:48:f7:b6:a0:53:5e:24:a8:90:0c:48:18:d7:
                    11:88:f2:2d:f4:ce:39:31:3f:45:a6:ec:40:38:87:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:63:1F:50:35:EB:F6:7D:6F:BD:3E:EA:FE:E2:7B:A0:F7:7D:D3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82b30458-95ea-3430-9337-25431cfcc479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:cf:c6:c4:63:13:bb:d1:a9:b7:81:84:58:6b:ed:04:30:
         f2:7f:f9:cb:af:2b:02:cd:0f:9f:10:59:e6:e6:b0:28:1b:f4:
         2d:aa:09:75:9d:14:35:37:5c:0d:21:13:18:fd:c1:30:25:30:
         d5:7e:2a:6d:6e:b1:af:b8:07:2f:f8:19:21:be:7f:65:1f:36:
         43:af:84:4e:b9:36:97:48:52:ba:80:9d:50:2b:d7:b3:1a:85:
         b5:ac:66:1c:61:e5:e4:d9:7b:64:88:38:3c:9f:91:8a:c9:97:
         42:b3:18:fd:6f:b7:b6:b4:e8:fb:82:09:78:49:df:e8:ce:e7:
         d9:98:e6:37:4d:ec:68:5d:18:94:60:71:59:22:5e:9f:3b:62:
         d0:fb:2b:29:df:00:2a:60:bd:6c:8b:fb:93:b7:f6:8e:eb:c0:
         3b:cf:66:fd:a6:c3:63:0e:c9:c2:ef:31:d5:0f:5a:ee:79:f4:
         b4:9f:21:3a:a7:d6:29:fc:04:01:dc:67:fd:30:e8:ea:ff:63:
         4f:aa:9f:09:da:e4:30:09:12:26:06:95:46:02:0d:40:03:25:
         1b:b6:18:f5:8d:29:b5:6f:58:21:27:49:d4:ac:0a:46:d1:14:
         5f:42:60:05:7c:d9:7d:09:e1:72:0c:8a:66:8e:3d:62:0c:ea:
         28:fc:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:17:24 2025 by rpki-client