Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5194e9e9-f070-3dd3-bc61-d9f7c8ffb448.roa
File:                     5194e9e9-f070-3dd3-bc61-d9f7c8ffb448.roa (raw, json)
Hash identifier:          FYC806PxUId1v8L1HmdfqR1byofsNDo80yHyF7SdnDw=
Subject key identifier:   6B:8E:FD:B5:91:1D:E0:D3:6D:ED:B0:5E:21:8E:38:31:ED:33:60:7F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB46702E5ACD5A701F8300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5194e9e9-f070-3dd3-bc61-d9f7c8ffb448.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:46:70:2e:5a:cd:5a:70:1f:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d56edf7a-373a-4cb9-8290-2c90a79e2505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:1e:ed:68:b3:99:e2:4c:40:4a:1c:87:76:
                    bb:b1:81:20:3a:5f:d2:ae:2f:e8:00:cb:d5:5f:b5:
                    b6:b7:59:23:8c:c2:28:f2:e3:5f:45:ce:93:8c:d8:
                    07:b9:82:c2:6f:db:98:2c:58:7c:1c:de:12:ed:55:
                    f5:53:e8:e7:48:9e:46:98:85:81:10:bc:93:34:32:
                    ef:14:96:42:8f:38:f9:e1:e6:fb:48:a6:85:ed:65:
                    97:59:35:6b:d0:0b:ae:9f:16:52:0e:f2:d2:12:10:
                    56:00:dc:e6:b6:8f:99:dd:5e:4b:e2:8a:d7:a0:59:
                    3e:5f:ce:3c:55:52:72:63:b7:92:f7:f1:2b:3c:b4:
                    08:26:1d:ce:52:5c:34:ef:34:74:3d:24:87:d0:dc:
                    c0:96:94:68:1c:53:b0:84:8d:0c:7f:6b:1c:a5:39:
                    4b:74:b3:4a:8e:4d:87:12:fb:26:d3:08:ed:29:43:
                    00:68:a1:8c:dd:c2:9c:24:30:43:76:9f:94:cc:96:
                    b1:90:da:32:07:3a:ff:c6:35:c7:23:7f:e0:e7:e2:
                    61:5d:ec:91:9a:e9:a0:ba:25:f4:5a:91:eb:67:38:
                    59:22:7f:aa:2b:9e:cd:b5:54:74:cf:66:71:03:88:
                    da:00:47:8d:1b:c4:9d:d2:ce:84:c0:35:d1:94:e9:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8E:FD:B5:91:1D:E0:D3:6D:ED:B0:5E:21:8E:38:31:ED:33:60:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5194e9e9-f070-3dd3-bc61-d9f7c8ffb448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:26:a5:fd:3d:69:8c:23:52:67:2a:0e:09:0b:f6:ec:57:da:
         ad:fb:14:e5:1e:f7:ed:b2:59:63:61:50:14:f9:d5:ac:22:31:
         ee:4a:cd:05:f7:61:77:cd:d3:0e:11:0e:46:3f:d9:19:29:25:
         d5:f8:4c:10:7d:53:a9:ec:93:71:82:5f:a9:eb:35:9a:8b:12:
         fc:13:07:85:32:23:1a:ee:6c:53:17:97:a5:66:cf:5b:97:ab:
         ee:6a:5c:3e:1e:35:a8:7b:da:22:0b:7e:cb:6b:9d:c3:02:91:
         9f:48:6e:c0:b9:87:a0:35:30:72:7c:85:8a:81:f1:5a:ca:23:
         10:d5:a3:57:79:48:27:77:e4:b4:78:ec:31:fc:96:00:36:e4:
         1f:e5:80:1c:f4:f0:4d:11:0f:2a:44:0b:de:19:c7:2e:68:cc:
         a8:9d:a8:10:c7:c9:81:50:64:8a:ca:72:e2:0d:58:12:03:64:
         bb:29:d0:b4:a2:3c:a3:8e:ce:70:2d:8f:71:00:0f:c8:9c:7c:
         dd:8a:18:c4:df:65:39:4c:a5:b3:1d:82:6c:3b:db:3d:73:d3:
         d3:d7:59:fc:0b:d9:16:16:17:4f:b5:a7:29:a5:38:f7:c6:c8:
         3a:90:b7:4e:84:ae:85:93:11:15:c8:f1:f0:e7:7c:ae:f6:2b:
         1f:df:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:43:45 2025 by rpki-client