Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e6cca3b-5908-32fd-9994-f995f4f6ffb1.roa
File:                     2e6cca3b-5908-32fd-9994-f995f4f6ffb1.roa (raw, json)
Hash identifier:          DOmiPm2U9bQ/6JOrzJwQhzxFDHApuG5I5xZVXe0318o=
Subject key identifier:   22:4B:33:12:02:F1:D5:D4:6A:B4:B0:F1:97:60:38:10:AC:C4:B3:9B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB4927AA7E4EFE1D1A21D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e6cca3b-5908-32fd-9994-f995f4f6ffb1.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:49:27:aa:7e:4e:fe:1d:1a:21:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=05035d62-7de9-4b74-89cf-b906b461e8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:6c:d6:fb:5e:5e:92:fb:a8:a3:de:32:c2:
                    2c:82:28:6f:75:e8:ae:c2:12:fb:82:74:ad:24:bf:
                    e9:98:e1:ba:5f:f3:ae:8d:46:35:cf:22:33:86:12:
                    97:c8:e6:e6:f6:df:43:5a:04:50:ab:dd:de:71:4f:
                    ae:b6:ec:ae:11:c2:e5:a6:1e:de:d6:39:ba:f4:9a:
                    7d:fa:32:75:97:81:59:63:d5:a3:c6:77:5e:00:69:
                    6d:04:ff:59:ee:d6:28:28:75:dc:93:60:69:af:04:
                    9b:6d:58:6e:4f:25:13:38:5d:27:7d:d2:70:8b:2a:
                    76:62:ef:0f:8f:f4:a5:b3:51:9a:b8:1e:a1:ae:53:
                    10:73:33:65:f8:c9:7c:d0:70:e5:a8:73:07:55:06:
                    8a:f7:35:ba:81:57:80:5d:75:fe:da:ed:35:3c:e4:
                    a4:3e:e6:07:78:97:f5:b9:ae:7a:2f:74:19:94:94:
                    d2:85:49:73:78:f5:8b:14:da:6c:c7:7c:ea:09:af:
                    62:31:22:0a:f4:b8:e4:d8:60:d6:76:cf:ca:b8:d8:
                    26:82:ec:2c:fe:3b:74:5b:38:b5:e9:1f:ab:3b:d1:
                    10:a4:89:b6:97:de:7d:1b:07:04:4a:43:e8:65:29:
                    ef:7f:2c:d0:09:e6:12:cc:b7:f4:2e:eb:47:5f:cb:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4B:33:12:02:F1:D5:D4:6A:B4:B0:F1:97:60:38:10:AC:C4:B3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e6cca3b-5908-32fd-9994-f995f4f6ffb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:c2:41:2d:8c:af:7a:0e:80:8b:db:5e:b6:32:ca:9b:b2:
         1d:f2:36:4a:4c:62:51:6b:05:1f:7b:33:c8:ac:04:ea:f8:45:
         99:0d:11:94:79:3d:3d:90:7a:71:6d:de:ea:2c:6a:00:56:b4:
         01:51:ba:54:ec:46:dc:15:9b:2a:b3:79:12:4b:fd:fb:f8:7e:
         ae:96:76:27:50:5a:e2:a4:e5:d0:01:5e:c5:0d:c7:ff:58:e6:
         29:17:7a:68:b9:fd:d2:28:c8:3d:1f:bd:35:bc:50:00:e1:6d:
         dc:57:10:e6:5b:6a:e0:df:05:69:af:eb:80:c2:a4:c8:4a:e1:
         3d:a7:c4:7e:0e:b7:17:a8:e0:ad:9f:5e:fa:8c:04:36:06:11:
         7d:fc:9e:87:09:d7:53:44:f9:b9:bb:1f:20:84:60:e5:a6:54:
         35:da:84:b0:93:35:6f:c4:9c:27:79:96:c5:ac:af:0e:c5:93:
         2d:64:54:5e:fb:46:94:3d:33:da:b2:b9:8e:41:20:18:28:e9:
         6f:81:b2:dd:3b:a1:e6:78:eb:a4:9a:a9:d9:d6:67:1f:78:73:
         a1:35:75:1c:e0:ca:d5:a5:cc:73:d6:a7:d1:7b:f0:62:f6:84:
         26:67:33:4c:a3:94:49:a3:b2:a6:c3:c5:68:43:b2:c9:95:1a:
         4c:10:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:17:57 2025 by rpki-client