Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa
File:                     874651fe-9d9b-31da-8b16-7953e2aaf597.roa (raw, json)
Hash identifier:          j3iKUDaHlYFSQArVt1V9dgZydbkYe7Um+2WvVQdJrgc=
Subject key identifier:   4A:53:43:2D:20:26:EE:BA:53:6F:E3:77:64:D8:D0:50:12:15:7D:0A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB3F2E629A3FC21985AE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:3f:2e:62:9a:3f:c2:19:85:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2f26574a-ce46-4156-a08d-293f0106c372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:9a:e3:f1:8d:18:69:74:51:74:d5:c1:b7:
                    ce:ae:69:4b:7a:c6:b0:b7:f0:bd:20:8e:1d:38:76:
                    3c:14:6e:8e:6d:8e:f9:0a:fe:b8:1c:7f:46:6c:8d:
                    78:7e:66:fd:aa:4d:c6:a0:14:23:be:04:ee:4d:ce:
                    77:3b:91:23:18:68:02:fe:11:28:9e:97:b7:3b:c6:
                    82:96:60:1a:e2:b8:38:3b:7a:96:e6:a2:10:32:50:
                    94:99:44:26:e3:88:fc:2f:09:d1:6c:c4:06:66:70:
                    57:aa:e3:84:2f:95:c6:57:fd:b2:9c:43:d3:7d:cd:
                    f0:b5:32:b1:13:67:8a:ed:3a:dd:aa:3d:4b:56:ce:
                    62:81:c3:dc:86:70:33:21:73:8f:80:6c:4c:2a:b6:
                    e1:0d:93:af:2b:81:a3:ba:6e:bc:62:0d:b1:5e:34:
                    be:6a:21:c2:11:79:6e:79:fb:1f:5b:5f:9c:7e:97:
                    cf:62:93:1f:d7:a0:e8:af:34:00:47:5e:00:fa:02:
                    1b:a6:c3:94:c1:d3:96:38:0e:7d:06:d9:9c:23:56:
                    88:c5:7e:d7:34:d4:ad:81:60:fd:bd:7c:5c:de:8b:
                    bd:d6:27:62:9d:8d:b9:37:38:a5:d5:c9:47:ee:46:
                    74:95:0a:03:c0:01:b6:33:7c:88:a3:21:b9:be:56:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:53:43:2D:20:26:EE:BA:53:6F:E3:77:64:D8:D0:50:12:15:7D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:59:c2:c4:c1:e6:08:9d:ec:13:1e:e3:a4:33:eb:43:ac:43:
         e6:47:bd:b8:ce:38:8e:2c:98:c2:be:85:45:72:12:4c:85:98:
         55:38:d3:e9:b7:3a:8b:a1:bc:e7:3d:11:d3:05:c1:d4:df:04:
         d9:3d:d5:27:a4:3c:a2:4d:bb:1d:c0:28:f8:7f:1b:d4:55:7c:
         cd:7a:0f:ed:c6:ff:cf:2d:5f:cf:e9:cb:12:e0:99:de:c1:c1:
         b1:12:30:09:22:7c:9c:1a:2d:8c:1d:cb:6a:60:05:b9:c6:b3:
         ad:f2:53:0c:79:f5:dc:3e:84:06:83:af:e2:ae:8c:c5:a7:68:
         42:d0:cd:88:a7:81:b3:57:15:fa:b0:62:6d:57:40:4a:a9:3d:
         c6:4e:e4:55:72:8d:4a:af:f9:f0:e7:f7:76:f9:27:9f:4a:cf:
         9f:5a:3f:0a:0e:6b:cc:96:70:89:15:56:cf:fd:37:42:20:27:
         c0:76:44:ac:5f:46:74:d0:ef:56:86:66:2d:92:3a:07:76:b7:
         fb:f6:c7:78:17:53:a5:7d:ad:18:c2:63:a7:05:97:65:15:a7:
         58:fd:40:e9:18:f6:29:8c:1a:d4:56:7e:af:f1:b0:92:fd:a0:
         e4:21:7d:71:4a:52:57:3b:42:fd:88:f0:7e:82:12:e0:c5:74:
         c5:d4:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:25 2025 by rpki-client