Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf6da21f-6642-328f-a6fe-f1c28ec8ddfb.roa
File:                     bf6da21f-6642-328f-a6fe-f1c28ec8ddfb.roa (raw, json)
Hash identifier:          jLCFW6+GhD+L5pP6atf7ZT2Lea/cRAOCw/jUlg1EDfs=
Subject key identifier:   A9:88:DE:72:3F:D3:E2:B1:74:98:A5:69:C1:80:A1:07:F1:98:BF:13
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB40E0148AEB8987E44B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf6da21f-6642-328f-a6fe-f1c28ec8ddfb.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:40:e0:14:8a:eb:89:87:e4:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=3f11ce29-dedb-4e1a-a65a-6eacb51b0ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e2:ca:dc:70:93:3d:cf:f8:7c:a3:52:d4:b2:
                    20:cf:ef:64:b5:f5:76:b2:98:6a:ee:3d:67:29:f5:
                    f7:88:59:c7:1e:70:3b:e0:ff:43:f6:0c:7c:72:a5:
                    59:cc:d3:b2:38:f7:bc:65:86:41:d8:bd:81:b1:26:
                    b1:b9:39:45:6f:ce:99:c3:2c:7c:ab:2e:f2:f4:98:
                    ff:b3:04:74:97:fa:c0:be:1d:dd:28:5b:0d:4a:9c:
                    dd:80:f9:b9:14:44:39:1a:b0:f6:5a:87:a0:ab:84:
                    d9:b0:c1:7e:ea:62:d6:c1:bc:4f:d8:c2:f9:1c:0a:
                    be:b0:52:94:5f:ad:7e:ba:9a:83:16:b2:ec:9c:09:
                    52:3e:0b:5a:b7:6e:f6:38:0c:23:ae:f3:fc:c9:cc:
                    0b:8d:75:9b:ea:e1:85:b1:33:3d:31:7b:4e:2a:f9:
                    a7:1c:ac:e5:55:6c:02:52:e0:2e:79:bd:09:40:06:
                    a1:72:d3:93:71:bf:e7:2c:7b:27:db:0e:41:40:d2:
                    31:69:a3:28:15:ea:2f:d5:56:f8:bd:d2:1d:e5:31:
                    1d:09:f0:98:83:3c:46:42:c5:b2:89:6d:45:0d:1d:
                    a0:50:18:28:bc:23:74:d6:35:62:86:44:bc:d1:4d:
                    33:91:51:05:d6:01:21:c3:a2:3e:68:57:ab:43:2a:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:DE:72:3F:D3:E2:B1:74:98:A5:69:C1:80:A1:07:F1:98:BF:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf6da21f-6642-328f-a6fe-f1c28ec8ddfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:8d:2f:2d:5b:df:fb:69:57:7c:53:2e:e9:bc:88:72:d9:19:
         30:2d:b9:8e:4e:67:ad:27:d2:d9:c7:93:6a:95:33:2d:48:39:
         27:7f:b1:35:91:1e:a2:23:ee:9d:83:7e:89:21:63:2b:83:89:
         17:8e:a7:c4:c0:d0:6b:d9:86:fd:71:30:ec:91:a6:f1:9c:49:
         97:dd:1b:e5:24:65:89:32:1f:0c:d8:53:d7:a6:3f:c9:de:a8:
         eb:62:2e:31:c4:88:49:c4:92:9b:57:1e:2b:90:fb:b7:c4:a7:
         96:67:3d:ad:b8:77:87:09:49:80:8b:57:73:f4:ca:4e:d9:67:
         a9:98:b5:67:f6:d0:35:51:3c:a0:92:ad:82:31:5f:3a:35:ec:
         61:95:8c:1f:36:73:01:f4:ed:ec:ec:f3:85:ef:d8:a0:2f:b9:
         e6:f4:ee:3c:da:ab:85:67:da:d2:d6:dd:ef:b1:26:02:ef:fb:
         27:20:60:a6:ba:5c:e0:95:71:53:32:e3:33:fc:1b:a5:cb:21:
         aa:a6:4f:3f:b0:da:7e:a5:1b:60:be:b7:d2:b8:a4:61:fc:6f:
         e8:7d:6d:1b:0e:3b:0d:53:9b:86:15:1b:c1:db:d1:2e:a7:60:
         df:91:26:b2:58:6f:96:ab:04:5d:c5:47:17:0c:2c:74:1c:7b:
         f3:6c:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:46 2025 by rpki-client