Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e2a4e69-edce-3f5b-bda3-f9e81c0948f2.roa
File:                     1e2a4e69-edce-3f5b-bda3-f9e81c0948f2.roa (raw, json)
Hash identifier:          abBvfG+MNdGqYRP/SXfOV63NUijlWx+kwWzTywxD10I=
Subject key identifier:   F9:8C:71:B7:48:FE:37:47:0D:27:65:62:84:17:AD:D8:D1:11:40:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411554729A8A31EB404F4C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e2a4e69-edce-3f5b-bda3-f9e81c0948f2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:55:47:29:a8:a3:1e:b4:04:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9e5f27e4-69de-4e65-b23b-cd45326e2a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:aa:73:cc:e6:b7:dc:fd:81:32:67:32:aa:
                    bb:17:0d:28:93:87:13:74:48:75:08:d0:b1:e2:fb:
                    5a:96:55:92:1d:af:09:9c:f0:b2:4c:8d:52:1d:ea:
                    ef:b3:f9:b2:b2:e2:ce:ac:c3:f6:ed:66:a0:96:ca:
                    23:84:be:f3:30:a7:5d:39:98:9a:c0:ae:7f:f5:4f:
                    1c:18:14:e8:60:e8:e3:c9:3d:93:46:d6:14:28:d5:
                    61:eb:70:b6:e9:31:68:1d:53:d2:53:91:cd:14:2d:
                    44:75:c0:b6:ff:de:c1:db:78:a2:e2:51:6d:5e:db:
                    1f:c4:b6:87:f4:ca:8a:0c:bb:ee:98:a0:c8:a4:e8:
                    1c:43:11:e1:dd:27:cd:d4:0e:9d:50:c2:59:78:fd:
                    7d:4d:2b:42:7a:43:54:eb:f6:33:4d:8c:3a:63:a4:
                    63:92:a5:ea:69:b5:56:3a:bf:1b:20:ee:eb:83:5f:
                    69:25:ae:62:93:76:c6:63:1f:a1:41:43:07:40:d7:
                    a9:17:ba:af:c5:79:4b:38:a2:9b:e6:f2:95:12:6c:
                    3a:a6:d6:1e:75:dd:ee:38:af:6d:a6:ad:e4:dc:3f:
                    41:7d:37:06:d6:79:b0:1c:6a:c6:7a:3e:6c:7f:72:
                    02:3d:51:93:c6:0f:e7:84:48:3b:c5:6d:0b:d3:65:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:71:B7:48:FE:37:47:0D:27:65:62:84:17:AD:D8:D1:11:40:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e2a4e69-edce-3f5b-bda3-f9e81c0948f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:7f:67:21:96:c0:e8:1b:5c:86:62:90:ca:c6:22:cc:4f:
         dd:ca:7a:3d:be:d7:09:e3:98:50:61:c2:67:4f:2e:c8:94:4c:
         fd:f9:1e:1e:55:83:81:24:11:ea:05:51:81:33:9e:26:df:7d:
         2c:8d:21:72:17:a7:70:6d:17:ea:fc:1e:b8:b6:41:17:df:c5:
         51:e6:bb:4c:1c:d3:bc:92:29:72:05:53:47:f4:40:92:58:ca:
         32:17:c3:e5:2f:57:60:5b:c9:55:e1:5a:e0:c4:cb:46:a4:a4:
         d6:cb:d1:01:65:c5:08:c5:7a:f7:7e:91:bf:2f:8f:6a:7c:4d:
         18:83:71:d7:77:18:4f:7c:00:2b:e0:74:51:f0:b1:2e:6b:31:
         57:37:41:b2:d2:21:86:9f:79:d8:b8:3e:d2:e8:84:f5:f6:3b:
         87:1c:3c:50:5b:ef:76:23:20:93:06:33:82:d0:5e:46:6d:8b:
         b5:58:c0:48:e6:76:4a:63:0b:8b:be:58:3a:4e:d5:4a:7a:35:
         33:ef:80:a2:c1:de:92:9c:13:98:9c:c6:34:57:dc:34:34:3c:
         1a:7f:1b:b5:1e:21:d0:91:15:73:86:5f:62:83:1e:06:4f:13:
         ee:5c:e0:a8:b7:27:cf:75:3f:9a:da:49:2f:4c:fd:49:06:af:
         d0:c6:c7:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEVVHKaijHrQE9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OWU1ZjI3ZTQtNjlkZS00ZTY1LWIyM2ItY2Q0NTMyNmUyYTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8+qc8zmt9z9gTJnMqq7Fw0ok4cTdEh1CNCx
4vtallWSHa8JnPCyTI1SHervs/mysuLOrMP27WaglsojhL7zMKddOZiawK5/9U8c
GBToYOjjyT2TRtYUKNVh63C26TFoHVPSU5HNFC1EdcC2/97B23ii4lFtXtsfxLaH
9MqKDLvumKDIpOgcQxHh3SfN1A6dUMJZeP19TStCekNU6/YzTYw6Y6RjkqXqabVW
Or8bIO7rg19pJa5ik3bGYx+hQUMHQNepF7qvxXlLOKKb5vKVEmw6ptYedd3uOK9t
pq3k3D9BfTcG1nmwHGrGej5sf3ICPVGTxg/nhEg7xW0L02VD6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmMcbdI/jdHDSdlYoQXrdjREUDXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWUyYTRlNjktZWRjZS0z
ZjViLWJkYTMtZjllODFjMDk0OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6jf2chlsDoG1yGYpDKxiLMT93Kej2+1wnjmFBhwmdPLsiUTP35Hh5V
g4EkEeoFUYEznibffSyNIXIXp3BtF+r8Hri2QRffxVHmu0wc07ySKXIFU0f0QJJY
yjIXw+UvV2BbyVXhWuDEy0akpNbL0QFlxQjFevd+kb8vj2p8TRiDcdd3GE98ACvg
dFHwsS5rMVc3QbLSIYafedi4PtLohPX2O4ccPFBb73YjIJMGM4LQXkZti7VYwEjm
dkpjC4u+WDpO1Up6NTPvgKLB3pKcE5icxjRX3DQ0PBp/G7UeIdCRFXOGX2KDHgZP
E+5c4Ki3J891P5raSS9M/UkGr9DGx0o=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:08:14 2025 by rpki-client