Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
File:                     e063393a-feea-31d8-a0f0-955038576b9d.roa (raw, json)
Hash identifier:          A07a+lySE9IlWDHTdD3HNRC+xgVTHxm59f1w5TzqdxM=
Subject key identifier:   83:69:C8:67:9E:8C:EB:8B:9C:F4:3E:95:C1:F7:C8:1B:1A:61:D0:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA720481EB30802B516C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a7:20:48:1e:b3:08:02:b5:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8a133605-897f-4d4e-a544-6afb33698525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:8b:a9:8b:de:49:f3:55:97:93:8e:0d:33:
                    1c:52:d6:92:c1:c5:18:89:4d:b6:bc:b5:4c:23:44:
                    2b:f4:a0:7f:2c:2b:c8:8b:25:27:95:28:6a:54:0c:
                    62:aa:53:72:a0:b4:a1:54:6c:66:02:1b:52:51:fb:
                    b0:36:87:41:f1:d6:43:d8:8f:2e:77:ba:f9:e3:a0:
                    c0:c7:d3:b5:c7:7c:11:3a:69:f6:a9:84:a4:af:0f:
                    56:81:10:ee:a7:44:d9:29:8c:09:f3:cc:f9:0a:b4:
                    1e:96:fe:73:ac:a8:8c:8d:b9:aa:f2:6c:dd:72:cd:
                    f3:0d:ec:68:e4:9e:36:92:29:b6:f5:aa:e1:69:da:
                    d2:e7:9f:05:eb:15:be:33:02:90:8e:b0:42:b1:35:
                    9e:fb:5c:4c:ad:7a:3e:03:b2:ce:ed:90:d6:c5:45:
                    d6:84:ea:67:98:30:3d:12:c9:e6:5f:96:43:34:43:
                    57:3f:d6:0d:4c:8d:d1:d9:bf:df:6e:97:98:b4:5c:
                    82:79:df:ec:e3:07:af:73:25:3c:ac:d6:09:61:34:
                    2b:c5:aa:a0:9c:35:be:90:b2:c8:3c:37:7f:23:e6:
                    9c:ed:00:e4:5a:55:ff:2c:0c:39:fc:13:4e:ef:8e:
                    5e:32:1d:92:66:6e:2a:bf:93:a7:6c:12:d5:38:8d:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:C8:67:9E:8C:EB:8B:9C:F4:3E:95:C1:F7:C8:1B:1A:61:D0:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:90:51:1c:3e:81:34:0c:56:56:f3:ff:b2:17:3d:53:21:
         d3:28:ca:c1:5b:d2:db:67:0f:45:91:4d:97:12:aa:cd:7f:4e:
         23:8e:6e:ea:aa:9c:98:d1:fe:23:ed:2b:7b:6d:b5:df:9b:cd:
         63:c1:95:60:df:16:7a:a1:2b:fc:a2:70:99:0b:37:bb:78:48:
         34:52:d0:b7:f0:55:ff:3e:7a:df:d3:a2:71:19:73:da:47:ca:
         dd:a3:68:db:7c:02:1e:4a:94:04:6b:3d:02:b3:76:13:53:74:
         9b:60:85:00:ca:bd:cc:e8:a8:47:5c:14:ac:ab:a7:63:5f:27:
         79:08:08:c9:0a:2d:6a:46:b9:fd:f1:1d:79:a1:85:5f:af:17:
         11:d7:f9:97:8f:b0:53:66:4b:e9:cc:c5:2a:1d:ac:f3:5a:84:
         2a:03:69:a8:3a:38:fe:32:60:17:71:f8:d6:41:81:ae:a8:60:
         40:de:10:6a:b1:97:c7:0f:12:7f:61:65:ba:e2:24:12:e0:fb:
         cb:bc:ea:a1:13:36:d7:61:25:2d:5c:24:b9:ff:c3:2c:c1:41:
         4c:87:c6:f0:5c:c3:8c:30:d9:00:62:95:d3:74:98:ed:00:84:
         d2:5e:1a:5d:8e:39:6d:e8:3e:b2:4f:af:fb:25:97:c5:87:1b:
         fc:92:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:06 2025 by rpki-client