Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f51c8d94-3b42-32c4-81fc-13f55e160171.roa
File:                     f51c8d94-3b42-32c4-81fc-13f55e160171.roa (raw, json)
Hash identifier:          B6yIDgknsGCDxghTgh4FBPVXnZQD7SXesnLMXr6zOLo=
Subject key identifier:   44:4D:3E:79:2E:98:5C:3E:59:84:B8:5B:DD:83:20:25:00:70:03:60
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA52F9C01D765858CCA800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f51c8d94-3b42-32c4-81fc-13f55e160171.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:52:f9:c0:1d:76:58:58:cc:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8805208a-f2d1-46c3-8e2a-e15db2b81025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:12:aa:7a:dc:96:e7:85:b5:bb:d9:50:fc:
                    80:e3:80:e9:d3:9c:58:ea:76:91:bc:43:c9:12:b1:
                    72:69:22:64:63:b8:20:dc:2e:12:91:41:b0:9f:cd:
                    08:c2:b1:bd:bc:d0:f8:59:00:57:2d:dc:58:03:c7:
                    3b:63:ae:09:fb:50:22:de:5e:e1:1e:83:39:b6:c8:
                    a0:95:7c:b8:6d:a4:f4:d8:78:4d:89:1b:3e:84:7d:
                    9e:ac:d7:45:f8:d9:1c:d6:65:aa:33:71:4b:e3:4d:
                    63:51:1c:38:24:25:35:98:8a:39:47:11:8f:e0:b0:
                    fa:fe:c4:2c:bb:6c:d5:be:2c:3a:b4:29:65:43:a7:
                    5c:e7:59:d7:3d:b7:8c:04:76:37:6f:17:e2:3c:84:
                    1c:ec:fe:f3:ca:79:56:8f:6e:33:af:36:b8:7d:f7:
                    58:8f:0d:17:de:f8:66:66:4d:7d:c1:a3:94:0d:13:
                    63:47:80:c6:28:9a:a4:7a:45:43:78:a0:17:ae:33:
                    c5:9e:f8:00:a3:cc:19:b0:fa:e9:d0:ab:72:02:7b:
                    a8:72:c3:4a:3d:58:10:13:4e:0c:59:7f:9c:e0:53:
                    9d:fe:d2:95:74:56:eb:62:3a:f7:11:80:64:bc:aa:
                    cf:6b:10:dc:14:74:20:c1:3a:a7:7a:e0:17:3b:03:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:3E:79:2E:98:5C:3E:59:84:B8:5B:DD:83:20:25:00:70:03:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f51c8d94-3b42-32c4-81fc-13f55e160171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b5:44:70:52:56:5a:f5:1c:cb:0f:b3:77:db:f6:36:a4:b9:
         52:c8:36:1a:85:fd:37:19:18:34:3f:03:28:54:88:1a:43:24:
         87:c4:fb:a7:de:6b:f2:24:b7:56:5f:e6:2e:37:fd:63:02:d4:
         60:2d:40:ee:90:93:a1:bf:78:e6:91:53:13:e3:7c:b3:7c:4d:
         49:fa:4a:24:4f:d4:9a:99:45:85:00:fe:45:2d:da:83:d7:b2:
         14:cc:08:a3:4f:b5:06:11:c4:4b:ab:d8:bc:c2:db:3b:ef:7b:
         58:e9:07:31:a0:cd:69:fb:43:84:f9:2b:2a:c1:f6:db:c9:d0:
         fe:ac:d4:fc:77:3f:6f:8b:5a:17:06:f7:87:6b:21:dd:97:76:
         1a:bb:4c:b8:8f:2a:6b:7c:ff:f2:fa:f0:9d:24:c3:a4:86:98:
         ab:d6:99:0b:30:25:7d:6e:9f:a0:2e:b2:a5:33:62:18:77:ac:
         62:09:12:77:93:ca:3c:65:70:4f:ac:07:2a:33:f5:34:a3:f9:
         94:06:df:ee:8b:8e:29:c0:8f:69:fe:00:7b:a7:9e:da:84:27:
         51:1c:dd:b2:af:b6:99:15:7b:69:be:f1:8c:f5:23:bd:29:92:
         d5:a1:f8:6e:40:bc:d7:00:bb:52:3c:53:fc:13:4a:f0:d0:0a:
         08:7f:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:34:39 2025 by rpki-client