Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcffc69-c15a-3c1a-8ba4-8458e5e835a9.roa
File:                     9bcffc69-c15a-3c1a-8ba4-8458e5e835a9.roa (raw, json)
Hash identifier:          Ogam0PN6CaUppEQXA/998yPS8xM5B3GnMAYsPwSDe18=
Subject key identifier:   6E:2A:21:A7:97:57:76:D6:DF:9A:B3:72:C9:62:94:2F:49:51:0D:F3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9B942E9AB9FE122BDEF0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcffc69-c15a-3c1a-8ba4-8458e5e835a9.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9b:94:2e:9a:b9:fe:12:2b:de:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=bbdcb174-90ee-4eeb-80a5-0b3b74029ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:c7:7a:c0:e7:62:36:61:89:7b:21:c7:ed:
                    c9:cf:35:c7:3d:bb:de:9b:67:0e:f6:3c:46:3b:d5:
                    53:cb:f7:85:71:d4:6f:c9:1d:7d:a2:12:e2:02:4a:
                    69:79:19:ce:df:cb:64:fc:1d:5e:63:c1:ff:7e:d6:
                    56:6e:90:26:68:41:b5:2f:c3:3d:19:97:06:96:b9:
                    5f:f2:bc:f1:16:51:ad:14:d5:01:3d:ec:9c:58:a3:
                    97:76:8b:8a:ff:7f:f5:ca:c0:5d:9a:8a:a8:9b:1f:
                    bd:9e:0f:72:ae:88:38:1a:75:b7:9b:39:c7:77:aa:
                    c8:9e:94:15:6c:01:c1:27:a6:ac:5f:d6:58:b2:08:
                    5b:ca:81:0f:b3:8b:ad:f3:f0:32:b7:ed:40:0a:b3:
                    bb:1c:c0:56:31:30:b2:27:67:c6:d9:44:97:0f:13:
                    36:0e:f4:92:18:72:d2:7f:49:b7:16:46:4f:9a:42:
                    54:6f:81:37:67:a0:06:2e:db:fe:95:c5:fa:6a:e7:
                    0c:bb:e9:d3:15:ee:cd:6a:5a:1a:b3:24:16:8f:73:
                    4c:9e:1d:0e:a2:75:31:58:86:49:6c:74:08:80:f7:
                    a5:43:0e:d2:28:85:b4:bc:00:af:7b:8c:75:e2:2c:
                    38:4f:11:f5:a5:d2:4f:63:2a:97:d9:de:03:63:25:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2A:21:A7:97:57:76:D6:DF:9A:B3:72:C9:62:94:2F:49:51:0D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcffc69-c15a-3c1a-8ba4-8458e5e835a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:d0:18:b5:78:6d:54:db:77:25:6b:f1:d2:a7:14:4a:db:
         1b:fc:2c:61:62:0e:88:c7:9f:40:32:6d:eb:77:19:43:a3:29:
         d5:06:35:52:39:e9:d9:bc:f4:63:08:42:fe:0a:05:c6:a2:8a:
         a0:7a:05:48:60:e5:8c:5f:b1:58:db:2b:2f:26:b6:03:01:73:
         d7:ab:76:47:44:cc:dc:d8:46:c7:18:00:9c:4a:42:56:12:b9:
         dd:2b:42:91:3b:21:46:a9:bc:c6:0c:54:fe:d8:0b:90:43:d4:
         66:7f:8d:03:01:54:0e:f0:e5:33:f1:3d:7b:45:84:9f:e4:a3:
         74:fc:1e:00:86:fa:0e:78:d2:3b:7e:df:8e:32:2f:94:6a:80:
         74:bc:b7:2c:e6:50:d9:97:ec:03:57:cf:5d:f5:31:fb:5f:a8:
         65:cb:aa:0f:8a:d5:58:fd:6e:9f:23:cf:aa:13:47:73:8d:2b:
         45:bd:a0:38:d9:49:1c:5c:4c:cf:6a:57:07:8c:7c:bd:14:1e:
         87:3d:68:be:d1:f5:8d:bd:87:19:29:4a:cb:9c:93:ee:0e:e9:
         87:b0:cc:4d:4c:28:95:30:97:a0:4a:f5:9f:4d:af:61:c5:6d:
         20:9d:e0:7e:8c:07:2d:11:03:7c:48:cf:67:5d:e6:23:65:3a:
         82:40:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:49:15 2025 by rpki-client