Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b7d27e2-77a1-3273-80b3-fd945abe41c9.roa
File:                     9b7d27e2-77a1-3273-80b3-fd945abe41c9.roa (raw, json)
Hash identifier:          ACF/8Gi4UqE4It5raVZD+JG5j29+JXgxh9THo4tsnCk=
Subject key identifier:   DC:F3:DC:41:B3:4B:A0:81:E3:02:33:50:3A:71:BD:90:96:8D:2F:56
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA9C6F37243A8538216B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b7d27e2-77a1-3273-80b3-fd945abe41c9.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:9c:6f:37:24:3a:85:38:21:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=08a75209-1b9c-4460-ab58-a8fb2bec3fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:52:f1:5f:75:d9:2a:55:04:d9:31:2e:6f:
                    cc:9a:8d:6f:b1:5b:f1:93:b2:65:19:4d:a6:7b:71:
                    91:59:f7:de:13:00:34:d2:71:75:1c:c3:59:b7:ac:
                    48:84:83:ff:9c:1c:f2:4e:4c:cd:2d:96:80:a1:9d:
                    f7:d6:f3:08:0d:7b:e8:d0:65:6e:fc:e5:d6:b4:c5:
                    19:73:ba:51:71:65:e7:33:94:36:f0:5e:02:57:70:
                    93:6e:7a:81:f4:5a:cb:6a:f2:1c:88:6e:a8:f7:94:
                    cf:de:17:db:e0:1d:63:42:ad:e0:75:b5:79:70:61:
                    5e:96:ea:8c:38:6d:95:0a:54:c9:c6:95:23:79:c9:
                    1c:a4:84:db:c5:6c:d2:1c:34:b6:08:65:29:f1:9f:
                    f6:92:a0:19:45:48:d2:c6:76:1f:ac:c0:7e:54:82:
                    d6:b2:90:74:85:14:2e:9a:9c:28:6d:e3:fe:9a:3c:
                    fa:e3:02:c3:89:9a:14:7a:01:a4:9d:c8:67:51:34:
                    df:d8:db:1a:e5:ec:9d:7b:8d:7f:76:ab:d5:cd:3f:
                    49:e6:40:b9:68:4b:45:82:e7:46:a0:e4:7e:95:94:
                    e3:86:db:2d:16:7f:48:2b:65:cd:a1:e7:41:41:ba:
                    fd:72:45:b7:d9:4f:49:2d:80:8d:93:ea:24:fe:cd:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:DC:41:B3:4B:A0:81:E3:02:33:50:3A:71:BD:90:96:8D:2F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b7d27e2-77a1-3273-80b3-fd945abe41c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:a7:1d:3e:d7:9c:94:21:86:80:94:04:e9:f4:d5:7f:6c:0a:
         69:f3:f3:91:10:03:1f:52:94:8c:33:b7:fd:95:d3:ab:71:4e:
         70:0a:7e:0d:12:e0:3d:89:ba:52:e1:e5:b6:20:9d:f9:e2:33:
         dd:95:92:e4:43:25:86:5d:41:49:1e:62:cd:66:30:48:82:fc:
         c5:67:e0:a9:ec:6c:b9:39:45:80:ae:51:dc:90:54:6e:f2:fe:
         7a:a6:ea:d9:81:f7:de:bb:c9:2e:05:48:7f:63:cd:91:23:1b:
         df:85:8a:4b:1d:ff:f1:16:89:47:3f:7a:71:68:23:2b:3a:f7:
         5d:77:76:4e:e2:c6:ab:00:3a:0d:70:e1:62:9a:fe:29:c5:e1:
         84:2c:2a:30:4e:be:f6:10:7c:72:9f:86:ea:1b:4b:81:62:06:
         c9:8d:a6:79:dc:5e:91:a4:38:73:45:ed:5d:23:64:22:da:f7:
         f6:a7:29:20:e0:31:2c:48:d6:8e:26:c4:c9:b0:cc:fb:05:b4:
         b9:e9:28:78:0e:dd:89:3a:7c:a5:91:c5:43:3e:4a:11:77:a8:
         80:ce:f7:08:93:4b:81:48:33:e6:3e:c8:a6:40:25:87:3c:cc:
         8a:f6:c8:bf:de:65:c8:4f:2e:af:f3:5c:e7:81:9e:d6:a8:16:
         e9:b5:77:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupxvNyQ6hTgha0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MDhhNzUyMDktMWI5Yy00NDYwLWFiNTgtYThmYjJiZWMzZmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm85S8V912SpVBNkxLm/Mmo1vsVvxk7JlGU2m
e3GRWffeEwA00nF1HMNZt6xIhIP/nBzyTkzNLZaAoZ331vMIDXvo0GVu/OXWtMUZ
c7pRcWXnM5Q28F4CV3CTbnqB9FrLavIciG6o95TP3hfb4B1jQq3gdbV5cGFeluqM
OG2VClTJxpUjeckcpITbxWzSHDS2CGUp8Z/2kqAZRUjSxnYfrMB+VILWspB0hRQu
mpwobeP+mjz64wLDiZoUegGknchnUTTf2Nsa5eyde41/dqvVzT9J5kC5aEtFgudG
oOR+lZTjhtstFn9IK2XNoedBQbr9ckW32U9JLYCNk+ok/s0o0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzz3EGzS6CB4wIzUDpxvZCWjS9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWI3ZDI3ZTItNzdhMS0z
MjczLTgwYjMtZmQ5NDVhYmU0MWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBREMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMmnHT7XnJQhhoCUBOn01X9sCmnz85EQAx9SlIwzt/2V06txTnAKfg0S
4D2JulLh5bYgnfniM92VkuRDJYZdQUkeYs1mMEiC/MVn4KnsbLk5RYCuUdyQVG7y
/nqm6tmB9967yS4FSH9jzZEjG9+Fiksd//EWiUc/enFoIys69113dk7ixqsAOg1w
4WKa/inF4YQsKjBOvvYQfHKfhuobS4FiBsmNpnncXpGkOHNF7V0jZCLa9/anKSDg
MSxI1o4mxMmwzPsFtLnpKHgO3Yk6fKWRxUM+ShF3qIDO9wiTS4FIM+Y+yKZAJYc8
zIr2yL/eZchPLq/zXOeBntaoFum1d2g=
-----END CERTIFICATE-----
Generated at Thu May 8 10:21:24 2025 by rpki-client