Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe9e4cf3-3589-3359-8966-4e494c6fae3b.roa
File:                     fe9e4cf3-3589-3359-8966-4e494c6fae3b.roa (raw, json)
Hash identifier:          S6ZePAHyBQ4AaaiHTpB7DzMBnUmVXeTmXuw9U2S2lHk=
Subject key identifier:   D6:2A:C5:C6:F5:FC:74:46:0E:72:2D:80:C0:76:1B:9B:DD:A7:B8:07
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB463CAA2CF6017AB050C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe9e4cf3-3589-3359-8966-4e494c6fae3b.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:46:3c:aa:2c:f6:01:7a:b0:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=fd7919b4-9181-4b5a-ae37-c9debb685989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:06:3c:c8:cb:6c:83:43:44:d5:6a:4d:fe:
                    ae:20:3b:3f:d0:45:69:23:a7:e9:67:1e:8f:09:11:
                    29:a4:04:7c:ec:58:77:74:08:76:af:6e:19:91:d0:
                    31:46:4e:1c:31:d7:7e:11:9e:95:05:42:b3:8b:1b:
                    f6:f2:3a:3a:54:a6:a6:b3:5d:f4:9c:df:c3:33:59:
                    2b:a5:11:7d:ca:9e:d8:ac:fd:35:a0:1f:d9:73:ba:
                    c3:47:c3:f3:af:85:ef:2d:c9:f9:e9:9a:ed:b0:0f:
                    e9:15:33:12:db:a7:19:be:06:79:e4:33:12:fe:32:
                    de:4d:dc:58:3a:cf:ee:ab:92:9c:7e:b8:1f:52:cf:
                    42:a0:47:0f:9d:85:27:e0:20:ff:30:75:77:0d:20:
                    1e:c8:ce:43:e4:23:98:b3:d0:63:15:77:a3:04:45:
                    4b:d3:d6:a9:01:c3:9f:53:a4:f7:4a:53:70:53:91:
                    ae:c7:c5:6e:ef:1a:be:af:f1:ee:cc:98:ce:ff:7c:
                    0c:e9:ed:37:b0:dd:e3:af:39:b1:bc:15:6d:48:d0:
                    c9:fd:12:5a:6e:1d:ff:1d:42:1f:76:0d:cd:f7:cc:
                    81:69:14:92:3e:0e:f0:ff:2d:3a:4a:45:8e:03:0c:
                    33:56:18:b9:97:c1:ba:b2:71:f7:eb:0e:a4:a8:09:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2A:C5:C6:F5:FC:74:46:0E:72:2D:80:C0:76:1B:9B:DD:A7:B8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe9e4cf3-3589-3359-8966-4e494c6fae3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:32:a9:4b:f5:bd:42:0c:62:d9:95:95:74:32:cb:47:7d:ea:
         eb:ab:44:56:4e:8e:ba:b4:1b:db:c5:78:52:34:e8:fd:ee:ce:
         90:6f:ae:fe:77:0a:01:2a:da:f0:fd:a6:dc:f8:df:50:72:8f:
         12:fb:7a:9a:71:51:f6:ff:0d:42:58:c5:c3:9e:12:91:80:2c:
         79:10:a0:51:aa:31:e1:51:5d:b8:73:65:1f:66:bd:39:e6:de:
         3d:8d:39:5e:e8:47:8b:38:e7:2f:37:91:23:b4:8c:50:17:8f:
         fa:e8:ab:ee:dc:2b:31:5c:4e:c3:81:94:0d:b2:72:ee:05:02:
         4b:f3:87:5f:36:25:d1:24:47:ba:6a:af:6e:34:8c:85:d2:fa:
         b9:93:02:16:ea:9c:0f:ad:c2:2e:85:7b:9f:e7:53:68:aa:7a:
         d9:32:f2:69:ad:bc:64:6a:b0:7c:41:e0:f3:fa:82:aa:4f:57:
         f3:0c:b7:25:ef:3c:a5:09:e6:62:a7:75:98:c4:51:a9:b0:27:
         d2:ea:92:8a:6f:ed:d6:91:3f:00:13:31:d1:0e:36:fd:06:d0:
         9f:f8:61:a7:b0:49:7c:fb:86:8d:d2:8f:b4:87:66:9c:ff:51:
         3d:ee:ee:a9:b5:65:18:1a:70:a9:d4:fc:8f:db:29:10:ad:c7:
         d7:ac:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:21:49 2025 by rpki-client