Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa
File:                     5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa (raw, json)
Hash identifier:          COXaIaQDqjikcVs1DyeBwA3qhKzp9Q4QhFm5Dg5oy5g=
Subject key identifier:   B0:D7:D2:FC:CA:B5:01:C0:C9:B7:53:0E:38:2F:E5:86:05:FA:76:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9D4CF43C02718028FE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9d:4c:f4:3c:02:71:80:28:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=fe2a205b-ea34-4f6b-830d-327814e9e9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6d:5e:41:15:03:51:2d:47:d2:ab:95:3a:88:
                    26:a0:de:03:75:1c:ff:ee:dc:18:5a:d4:bb:a4:3e:
                    1d:e9:d8:2d:e7:92:e7:24:a0:b6:8a:11:40:d7:57:
                    ce:da:3d:b6:00:c4:dc:00:16:00:95:78:d3:7f:bf:
                    65:08:5c:fc:df:2a:79:f3:67:4b:51:5a:4c:46:7f:
                    05:cb:3f:19:44:22:ed:2f:e4:75:5d:04:21:d6:e0:
                    bb:66:1e:5f:c4:fc:02:73:4f:ac:67:4e:4e:b6:97:
                    65:3b:c3:ca:87:98:a6:31:54:80:a3:e9:81:3f:ff:
                    be:75:4a:c5:af:84:69:17:f2:bf:bc:9a:73:b1:c6:
                    5d:3c:46:50:a1:fe:db:d1:2d:57:cd:92:0e:9d:19:
                    e1:02:b9:d4:77:d3:81:7d:39:e1:c5:36:02:89:65:
                    06:06:fa:90:9e:35:d4:a0:92:71:02:43:60:e3:8a:
                    5f:bc:e4:8b:34:92:94:38:b8:fc:e5:61:f0:fb:d4:
                    28:31:ce:55:fb:3b:04:58:10:7c:6c:5c:52:e2:ad:
                    c7:33:40:e2:70:49:f7:2d:29:93:d2:e4:c7:7d:09:
                    60:16:33:48:0e:7e:d8:b8:41:f7:18:2d:65:c1:43:
                    30:dd:72:35:9e:7a:a1:ae:e5:2b:86:19:8b:7f:23:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D7:D2:FC:CA:B5:01:C0:C9:B7:53:0E:38:2F:E5:86:05:FA:76:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:db:b0:b6:b8:de:13:39:cf:19:54:cc:29:73:91:1b:37:06:
         77:a3:76:0f:4d:cd:07:72:6f:3c:80:96:58:ed:16:b6:92:5b:
         63:74:47:49:01:47:1f:8c:95:60:65:75:6c:be:5f:e2:80:0e:
         3d:db:2c:8d:fb:72:ef:12:46:79:e8:e2:4e:9b:90:82:d7:37:
         b1:9e:b4:59:d3:88:ce:00:eb:79:83:d1:68:9e:fe:7c:38:eb:
         a9:e8:6f:90:01:c0:c6:41:f0:ae:f4:b5:58:27:fd:83:0c:fe:
         29:cb:58:cb:7a:51:92:37:f1:43:4c:d0:ba:55:79:26:2f:e1:
         67:e2:c0:3b:93:8c:7c:b7:f1:30:97:04:ae:32:c3:f0:87:7f:
         c4:90:92:92:03:da:c7:4c:03:5b:31:6b:de:e0:48:81:1b:f5:
         e0:c1:64:55:98:1f:31:53:72:cc:77:ad:51:93:bc:17:97:4f:
         7c:16:5d:47:61:75:1b:a1:24:69:55:76:fd:35:27:bc:ba:98:
         c0:2e:96:32:27:92:48:35:61:0b:38:a0:6c:a4:1d:02:f0:aa:
         5a:d8:44:29:d0:0b:ff:dd:d9:46:ad:45:b0:5b:8a:f0:18:96:
         a5:8b:1c:0e:75:f4:1f:6e:76:30:90:79:79:51:0f:b0:be:32:
         3a:71:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:09:44 2025 by rpki-client