Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dd86eee-6500-308b-a482-b45ea2454ad5.roa
File:                     7dd86eee-6500-308b-a482-b45ea2454ad5.roa (raw, json)
Hash identifier:          FcyGoHCOav9SJ+IUJF7TVN8B9n72kTghMC7/ERWIIQg=
Subject key identifier:   FD:FF:E4:04:79:09:CC:DE:D7:AE:41:25:92:7F:69:50:6C:69:CA:E5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9D6F119279114585FFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dd86eee-6500-308b-a482-b45ea2454ad5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9d:6f:11:92:79:11:45:85:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=06a269cd-147e-4984-89e0-0a720e59883b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:2e:73:d5:9f:51:1a:ae:51:9c:18:9e:fd:
                    e3:99:56:c8:50:c3:c4:ed:21:4f:bf:74:a3:df:c0:
                    f3:90:20:e6:bb:5a:72:69:a7:e3:6d:89:f5:e5:5c:
                    f7:f2:8b:53:14:a6:b4:27:f8:0c:c1:b4:fd:70:9a:
                    02:09:70:fa:3b:12:e2:58:e4:69:33:66:59:8e:93:
                    80:de:3a:66:19:1c:90:36:b9:03:07:b2:43:d9:21:
                    8c:52:0c:92:cc:26:ff:59:48:dc:90:da:9a:2a:6a:
                    f5:f4:01:06:69:c1:82:ff:70:df:9f:04:a9:e9:20:
                    6e:9a:58:47:fa:62:51:e1:11:17:8e:a7:1b:22:34:
                    00:c1:dd:7b:68:44:7f:07:e8:25:d1:75:41:16:b6:
                    c3:2a:92:df:44:b6:76:37:93:11:f7:4b:02:df:6b:
                    3a:97:6c:25:1f:56:99:1a:dd:9c:ac:14:97:6a:c5:
                    bb:db:1b:72:d2:fc:80:50:2f:92:b3:66:b2:16:0b:
                    5b:58:58:c1:b0:a4:e9:eb:36:7f:d4:c9:9a:c1:0e:
                    b3:03:5d:c3:7c:f5:63:35:0d:c3:cd:84:f9:85:33:
                    cb:36:1f:57:12:1a:0d:81:41:4f:d8:9c:9f:71:27:
                    d2:0d:42:eb:a1:21:b5:a2:3f:1d:2b:0e:a1:97:76:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FF:E4:04:79:09:CC:DE:D7:AE:41:25:92:7F:69:50:6C:69:CA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dd86eee-6500-308b-a482-b45ea2454ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:13:ef:33:e8:29:78:43:51:d4:5e:e1:bb:68:50:62:ad:7c:
         43:c0:55:d1:48:ae:a7:c4:14:29:97:48:c6:f0:2e:cc:b0:39:
         97:4c:96:f3:10:b5:16:d1:98:ad:bf:3e:01:47:ec:6d:75:47:
         2c:b3:ef:a7:a1:ae:f2:e0:a4:4e:9a:58:a8:74:95:50:f5:04:
         ba:b7:14:6a:6f:41:06:0a:3e:c4:91:71:cc:d1:7f:dd:95:78:
         d3:a4:e6:f0:b9:72:55:49:de:5d:7a:be:81:97:90:c7:ee:09:
         d7:53:94:7e:f7:47:87:ff:d6:64:0b:a2:74:7a:55:b5:bc:1d:
         ba:f2:be:79:61:b5:91:d1:64:18:2c:38:7c:2b:0b:f1:91:d5:
         43:13:2f:4b:6a:ca:11:63:a7:60:5b:2e:9d:0a:30:07:fe:01:
         74:1a:16:2c:23:ee:69:c6:cd:fc:2f:0e:c5:fc:36:ca:6f:c0:
         2a:e7:b3:33:89:42:6b:cc:02:4d:65:34:a7:fd:6d:77:fc:ba:
         8e:ec:da:2b:ff:e7:d6:3c:8b:2d:62:d6:be:3f:10:bb:56:57:
         d1:4b:2c:fb:8b:c7:26:ee:b9:3e:e0:94:29:9c:ed:52:11:fa:
         d6:d3:5b:e2:cb:bc:e8:99:bf:17:5d:d2:3d:44:59:57:35:f6:
         eb:7e:f9:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup1vEZJ5EUWF/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MDZhMjY5Y2QtMTQ3ZS00OTg0LTg5ZTAtMGE3MjBlNTk4ODNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZsuc9WfURquUZwYnv3jmVbIUMPE7SFPv3Sj
38DzkCDmu1pyaafjbYn15Vz38otTFKa0J/gMwbT9cJoCCXD6OxLiWORpM2ZZjpOA
3jpmGRyQNrkDB7JD2SGMUgySzCb/WUjckNqaKmr19AEGacGC/3DfnwSp6SBumlhH
+mJR4REXjqcbIjQAwd17aER/B+gl0XVBFrbDKpLfRLZ2N5MR90sC32s6l2wlH1aZ
Gt2crBSXasW72xty0vyAUC+Ss2ayFgtbWFjBsKTp6zZ/1MmawQ6zA13DfPVjNQ3D
zYT5hTPLNh9XEhoNgUFP2JyfcSfSDULroSG1oj8dKw6hl3aS1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3/5AR5Ccze165BJZJ/aVBsacrlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2RkODZlZWUtNjUwMC0z
MDhiLWE0ODItYjQ1ZWEyNDU0YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQT7zPoKXhDUdRe4btoUGKtfEPAVdFIrqfEFCmXSMbwLsywOZdMlvMQ
tRbRmK2/PgFH7G11Ryyz76ehrvLgpE6aWKh0lVD1BLq3FGpvQQYKPsSRcczRf92V
eNOk5vC5clVJ3l16voGXkMfuCddTlH73R4f/1mQLonR6VbW8HbryvnlhtZHRZBgs
OHwrC/GR1UMTL0tqyhFjp2BbLp0KMAf+AXQaFiwj7mnGzfwvDsX8NspvwCrnszOJ
QmvMAk1lNKf9bXf8uo7s2iv/59Y8iy1i1r4/ELtWV9FLLPuLxybuuT7glCmc7VIR
+tbTW+LLvOiZvxdd0j1EWVc19ut++Sw=
-----END CERTIFICATE-----
Generated at Sat May 10 05:12:30 2025 by rpki-client