Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa
File:                     b05a4aea-c17e-3408-95a4-0235bebd1267.roa (raw, json)
Hash identifier:          e5VQ61ZeXHzgDTaSrfAj/YrKbc98sevIEp+BzY6ZVdc=
Subject key identifier:   A2:DC:5D:40:E7:5A:F8:02:8C:8F:A5:1C:6E:59:A9:28:7B:A3:84:3B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9AA2F91C8ACF658BA700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9a:a2:f9:1c:8a:cf:65:8b:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=405ab708-0191-4344-a32a-a47e8d9a366c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4a:6b:35:8d:8b:7b:b4:6d:2f:0b:67:4e:26:
                    6d:3b:6f:50:0b:29:0d:ed:04:b2:68:96:15:a3:05:
                    76:9a:3c:35:22:a4:fa:b9:a5:d9:b1:bf:56:c4:9c:
                    7f:ba:69:84:b4:6c:5e:48:dc:6b:4d:8f:58:55:6b:
                    ca:d5:29:4e:74:ee:61:c9:80:a6:3a:2f:41:a1:b8:
                    21:67:1b:0d:d3:8b:28:39:66:f3:13:c3:f9:65:49:
                    29:d0:42:e1:51:be:ee:f4:d9:6f:b4:96:82:06:fc:
                    82:b7:e8:ed:5b:05:b5:de:1c:16:12:08:83:bc:63:
                    ac:0a:96:84:10:e0:d7:c0:a6:a8:c6:8d:b2:71:02:
                    7f:0e:f2:ed:99:9c:87:bf:af:ab:63:4c:8d:96:d4:
                    87:ee:8b:a5:81:31:1d:b9:70:64:41:1c:12:f9:0b:
                    e5:cd:67:58:91:b7:d4:9a:27:fc:84:cf:23:75:e7:
                    91:d1:b8:fd:f4:e3:88:e1:7f:4b:52:21:d1:09:20:
                    ef:9a:24:ba:f9:31:3e:e4:53:36:2e:e3:69:25:82:
                    80:2c:8e:b5:d4:e0:95:9f:07:20:cd:8e:0d:ac:cd:
                    28:42:81:9c:8a:60:20:eb:26:12:a0:bc:56:67:ae:
                    24:82:14:82:47:ae:42:5c:8e:2e:69:c2:6c:b7:0c:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DC:5D:40:E7:5A:F8:02:8C:8F:A5:1C:6E:59:A9:28:7B:A3:84:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:7f:34:5c:be:3d:06:d1:e1:4d:a6:62:10:1c:c8:ce:5c:
         e0:d8:23:db:5a:ba:8e:fe:50:f8:81:61:17:2a:b8:94:09:9c:
         11:c1:ae:be:b2:0f:7a:25:d3:ae:7d:eb:9c:3e:7a:a3:70:dc:
         d4:05:6a:3e:1d:26:00:4e:15:22:ac:f5:72:9e:54:5c:7a:f0:
         4b:33:20:1e:62:e7:ab:02:5c:85:ce:55:c7:e7:4d:64:63:f3:
         06:fe:f1:c1:4b:76:4a:97:5e:a1:fa:97:45:76:4a:b4:9a:be:
         47:ad:45:2d:e0:e7:f8:33:97:a6:d3:23:5d:3c:78:04:04:97:
         ef:a2:cd:7c:66:8f:d2:0d:6b:96:49:7a:2b:f9:8d:4d:a3:aa:
         6d:84:34:f1:2e:ad:c0:8a:7f:d6:c8:39:9e:9e:3e:7c:17:30:
         15:1b:a4:7c:14:01:57:c6:d0:87:7b:41:5e:a4:66:48:27:e4:
         ae:9a:a6:9b:87:ad:f1:88:b5:da:12:51:2d:af:75:8e:22:bf:
         a7:3e:02:fa:92:82:9d:f9:bd:84:fb:e5:88:51:bb:64:4c:5b:
         bd:67:69:a6:06:59:c2:6e:38:d7:0d:8d:9e:f6:b4:07:50:52:
         8c:e6:b8:a3:64:5f:9e:a0:6e:3d:a6:6a:93:f2:47:03:d1:86:
         22:48:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:55 2025 by rpki-client