Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77dbf3c-cda0-307b-ac7b-68eebc5dd9f4.roa
File:                     f77dbf3c-cda0-307b-ac7b-68eebc5dd9f4.roa (raw, json)
Hash identifier:          9sdqRrwjQ4BCEt7Ci2tj85+WUPUFEum3UwLV8go0pcw=
Subject key identifier:   C3:7C:50:C0:AE:42:21:11:82:B6:21:1F:33:50:B4:7D:04:44:0A:95
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB4A4ACE80E0359AC71A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77dbf3c-cda0-307b-ac7b-68eebc5dd9f4.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:4a:4a:ce:80:e0:35:9a:c7:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f8ad2c67-27ec-4460-b714-eb008b0ce622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:b5:4c:cc:6d:f7:42:c9:ed:cb:46:c9:19:
                    7f:5d:92:ce:61:a3:d4:98:11:26:24:d6:5f:34:ea:
                    3e:3e:03:b7:b2:e5:05:d5:d8:fb:ed:38:f9:26:2f:
                    eb:11:f2:8b:3d:c9:21:39:b2:a5:3b:d6:4a:ff:43:
                    f5:65:bf:17:78:f1:7d:ce:45:89:58:09:85:37:1d:
                    ad:82:dc:73:e5:f7:27:ef:1c:fe:93:76:94:09:3e:
                    a7:5e:8d:46:4c:c1:92:7b:1b:c7:c4:70:0e:ae:29:
                    be:24:a0:70:04:c3:d3:03:2f:1d:4e:c2:74:0c:26:
                    12:1c:38:0b:05:90:b9:c1:c2:68:e6:24:9a:3d:6f:
                    e3:0f:61:10:5c:9a:81:89:5e:a3:2c:f8:db:1f:7c:
                    9d:51:15:73:53:0a:10:f3:53:52:19:b3:86:55:01:
                    68:f3:fc:ac:e7:23:9e:b1:e8:d4:d3:59:5d:9d:13:
                    0d:38:a9:04:85:08:b9:9c:08:ef:e2:ec:43:e1:37:
                    c2:0c:c3:bb:70:e5:e9:66:66:2c:9a:96:a9:2f:4c:
                    b3:94:cf:a9:a6:6d:7e:6e:e9:14:96:14:44:81:82:
                    1d:91:14:a4:20:37:59:8d:64:35:ec:15:ce:eb:5b:
                    ba:3e:5b:60:2f:33:77:22:03:ab:75:7a:a0:c5:53:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:50:C0:AE:42:21:11:82:B6:21:1F:33:50:B4:7D:04:44:0A:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77dbf3c-cda0-307b-ac7b-68eebc5dd9f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:9b:10:2a:ac:1b:c6:4b:fc:d2:c4:aa:f7:42:7a:1d:85:e0:
         ed:73:97:0c:6b:d2:26:ce:cf:d2:c8:13:98:a3:c7:90:17:9f:
         79:7d:41:29:a5:0c:b0:e2:2c:d4:8d:f7:67:f2:ae:e5:e4:d2:
         9d:f4:75:b8:2b:02:7e:40:0d:96:38:54:cc:f6:4b:1c:1b:61:
         95:ed:80:94:3b:0d:85:c6:4e:d0:16:d1:84:8c:53:25:67:e7:
         7e:3f:c1:91:6a:29:e1:01:7c:41:b3:c1:11:d4:6e:88:6f:30:
         35:64:1a:d5:69:1b:b3:9a:f7:e8:52:96:6f:f9:75:88:ea:8a:
         5b:df:c8:e2:c1:5b:c6:ca:1f:4d:f8:85:e2:97:ee:e2:f7:43:
         43:91:8b:89:21:fc:2f:eb:47:b3:de:30:a9:90:10:df:e5:86:
         68:af:20:aa:89:9f:83:27:d6:bb:22:a6:36:9d:35:0c:83:21:
         62:d3:ef:6f:1b:84:ec:20:8d:bf:e6:24:3f:b6:ea:42:16:dc:
         a9:fa:96:c4:36:85:88:92:4b:7a:b3:2e:dd:1b:47:03:f6:54:
         57:d3:96:b9:c2:5a:df:73:2b:2e:6e:5c:5a:5c:6e:8e:14:b3:
         a7:bd:83:d6:4a:a8:81:d3:70:e0:03:27:b7:22:5d:90:ca:f1:
         4e:f4:dc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:15 2025 by rpki-client