Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee394f5f-3dab-3161-8f0c-448af4c63104.roa
File:                     ee394f5f-3dab-3161-8f0c-448af4c63104.roa (raw, json)
Hash identifier:          LsQiRgjTABH8ER/F54OeS+CqUALUQYuMDHKchmYCLdM=
Subject key identifier:   51:CC:11:53:C2:00:AC:B2:2F:4D:9C:C2:DC:B3:02:72:3B:D5:34:B2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB417E63AB493484297100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee394f5f-3dab-3161-8f0c-448af4c63104.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:41:7e:63:ab:49:34:84:29:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=42d0ae35-51a1-4b41-a6bd-c2d2053c698a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:23:40:59:49:61:31:64:3b:bb:1b:24:6c:
                    b8:f5:33:a1:1a:e9:bb:99:d7:17:ee:b0:4c:75:5e:
                    61:76:ab:ff:38:00:27:78:81:87:ee:62:7e:ce:5d:
                    c6:3d:7b:cb:48:23:36:43:b5:55:52:76:09:6e:78:
                    83:eb:cb:e9:39:53:3d:57:27:a7:da:81:22:5c:fd:
                    98:00:e5:06:7b:84:f9:d3:19:40:c7:28:92:83:67:
                    8e:e5:8b:ea:b3:64:53:5b:66:9c:03:75:26:a1:a7:
                    e6:5c:26:b7:3a:a5:29:eb:f0:38:89:84:5a:e4:96:
                    b5:33:1a:02:c9:c6:bc:23:f1:0a:1d:46:33:ea:3a:
                    98:5b:db:51:b9:0f:18:63:e3:8b:2d:e1:63:0e:c2:
                    c4:11:49:28:74:7a:58:a2:b3:c3:b8:51:b3:a4:9b:
                    40:36:51:88:21:86:46:94:bb:3d:14:46:ae:24:3d:
                    c7:3b:5f:6f:51:ef:3f:af:89:54:20:d9:bc:90:9b:
                    64:3c:54:fa:7b:41:88:5b:ea:da:7f:59:ca:79:9a:
                    8b:45:34:c5:cc:ab:87:ed:00:28:8a:93:74:41:c3:
                    73:3d:d4:75:68:12:08:49:1d:0d:b3:fd:07:2c:b9:
                    b8:a7:38:33:c2:7c:dc:42:83:9e:ea:69:9f:0c:5e:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CC:11:53:C2:00:AC:B2:2F:4D:9C:C2:DC:B3:02:72:3B:D5:34:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee394f5f-3dab-3161-8f0c-448af4c63104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:96:38:5c:9f:ea:ce:20:c8:74:0b:4e:34:d3:17:65:d6:ce:
         2a:0a:11:e1:d9:7f:2d:30:f9:0b:22:d4:f5:ab:e0:2d:88:08:
         ac:74:45:da:ba:4f:59:66:e9:9f:79:e6:b9:28:d5:a1:a0:65:
         2e:44:7a:cb:78:a2:ee:14:64:43:b4:85:2b:67:d6:d5:9d:bb:
         08:7d:eb:06:10:0a:d1:24:eb:e7:ca:c8:1f:0e:08:e6:2b:2c:
         58:50:ef:92:19:63:b1:f7:43:a3:de:c7:11:97:77:2e:33:56:
         51:05:6d:a3:21:a8:35:2b:60:95:61:65:0a:a6:c2:ef:8e:32:
         14:94:dc:59:e1:be:a7:62:a9:b4:24:f2:d8:0d:0f:17:e9:c8:
         cc:81:9b:8d:34:07:b3:e9:c1:26:82:47:2d:d7:13:c4:97:19:
         4b:1c:e5:b8:49:ee:a7:c9:16:9f:5e:e5:d3:06:04:1a:ef:4f:
         cc:7c:a2:07:da:c5:62:86:30:de:88:4c:b2:1c:5c:5f:c1:01:
         7a:bd:1b:fc:a1:a3:42:b5:0c:ca:e3:71:2f:8b:0e:20:59:73:
         88:98:0a:17:01:aa:86:02:e9:90:e6:a8:9c:3e:ac:40:5e:0d:
         43:4f:fa:42:0d:71:f1:72:e9:72:a3:75:a0:b1:22:9d:02:98:
         11:db:cc:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0F+Y6tJNIQpcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NDJkMGFlMzUtNTFhMS00YjQxLWE2YmQtYzJkMjA1M2M2OThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmQjQFlJYTFkO7sbJGy49TOhGum7mdcX7rBM
dV5hdqv/OAAneIGH7mJ+zl3GPXvLSCM2Q7VVUnYJbniD68vpOVM9Vyen2oEiXP2Y
AOUGe4T50xlAxyiSg2eO5Yvqs2RTW2acA3UmoafmXCa3OqUp6/A4iYRa5Ja1MxoC
yca8I/EKHUYz6jqYW9tRuQ8YY+OLLeFjDsLEEUkodHpYorPDuFGzpJtANlGIIYZG
lLs9FEauJD3HO19vUe8/r4lUINm8kJtkPFT6e0GIW+raf1nKeZqLRTTFzKuH7QAo
ipN0QcNzPdR1aBIISR0Ns/0HLLm4pzgzwnzcQoOe6mmfDF4OmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHMEVPCAKyyL02cwtyzAnI71TSyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWUzOTRmNWYtM2RhYi0z
MTYxLThmMGMtNDQ4YWY0YzYzMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSWOFyf6s4gyHQLTjTTF2XWzioKEeHZfy0w+Qsi1PWr4C2ICKx0Rdq6
T1lm6Z955rko1aGgZS5Eest4ou4UZEO0hStn1tWduwh96wYQCtEk6+fKyB8OCOYr
LFhQ75IZY7H3Q6PexxGXdy4zVlEFbaMhqDUrYJVhZQqmwu+OMhSU3FnhvqdiqbQk
8tgNDxfpyMyBm400B7PpwSaCRy3XE8SXGUsc5bhJ7qfJFp9e5dMGBBrvT8x8ogfa
xWKGMN6ITLIcXF/BAXq9G/yho0K1DMrjcS+LDiBZc4iYChcBqoYC6ZDmqJw+rEBe
DUNP+kINcfFy6XKjdaCxIp0CmBHbzOw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:24 2025 by rpki-client