Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa
File:                     1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa (raw, json)
Hash identifier:          4V6AdsvOnG5hsA8U8C4nVuujBogY5k8f8qRiEzutYT8=
Subject key identifier:   C2:6F:11:68:42:51:32:F1:FF:AD:74:81:E2:F4:50:4B:75:1F:3E:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84120830C6AB0CD9B903DA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:08:30:c6:ab:0c:d9:b9:03:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=48b7e7bb-6f77-4f30-b4cf-8c1b52241e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:77:bc:be:75:5b:c5:00:0f:64:23:47:48:24:
                    ad:cb:06:7e:ad:2d:65:9b:5e:4b:31:0a:b8:1b:bf:
                    6c:81:9e:4f:9f:c3:7c:ad:21:62:d6:66:4c:e5:ba:
                    d0:bf:66:0a:2f:4b:41:c5:7c:a0:6f:4d:7d:5a:8d:
                    45:de:5e:ea:34:84:4a:a9:fa:e4:58:ef:a4:48:92:
                    9e:19:01:8c:69:14:04:09:be:66:b0:74:f7:79:8f:
                    7c:c5:44:2c:ab:db:c1:40:6d:f0:53:5c:a8:c1:e7:
                    fc:01:7e:f5:b8:0c:87:d7:3c:07:03:37:1a:e2:b9:
                    1e:a1:75:a7:0c:b9:f6:68:20:3f:a3:61:a1:a0:b9:
                    29:cd:0b:e5:c2:dc:44:3f:44:79:bb:84:f8:d9:c0:
                    e8:20:50:87:44:74:18:f2:9e:dd:3d:66:61:3e:61:
                    cd:e8:15:56:52:45:f1:2e:46:96:51:dd:02:21:46:
                    f5:b8:56:24:32:7e:69:3a:26:51:36:41:0b:a8:a0:
                    46:12:3e:e6:99:66:7e:04:d7:c5:28:02:64:5e:96:
                    32:b9:b9:56:8a:f1:9b:f4:9d:21:c9:81:f2:49:2d:
                    26:bd:f3:f6:51:c6:bf:eb:98:d2:98:ef:1a:6d:2f:
                    f8:e3:3c:41:74:dc:0e:f7:1c:44:8a:67:7c:6e:e6:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6F:11:68:42:51:32:F1:FF:AD:74:81:E2:F4:50:4B:75:1F:3E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:92:fb:0d:cc:96:ce:34:ba:1d:8a:de:c6:fc:2d:35:ec:be:
         9c:7e:a3:86:1e:fa:99:9a:f5:cf:b8:b8:09:28:c6:4a:64:be:
         e6:cd:60:1d:02:8d:42:da:ca:1d:4f:49:d2:32:a6:e6:bf:fd:
         62:d1:da:1b:a4:05:67:b6:de:ec:f7:cb:0f:67:90:6d:0f:73:
         a8:3a:67:c0:94:db:3c:39:41:ca:ed:fa:aa:01:6a:cb:30:f1:
         ae:4a:15:a7:2c:61:9a:1c:32:45:bc:d3:ac:30:7a:66:4d:2e:
         9f:a4:d5:5e:88:13:00:f2:07:5d:87:44:c3:db:65:c8:f8:9c:
         ad:10:16:0e:6a:c4:2e:58:a3:3a:e0:8a:23:69:dc:e3:af:35:
         0b:8a:18:b1:f0:8c:88:5d:7c:16:ec:17:be:12:94:a6:f4:3e:
         0d:f7:28:20:ad:ba:96:d2:fd:51:49:1a:76:6c:f7:89:9d:a6:
         ba:d5:cb:3c:f3:97:6e:e8:e2:c4:e3:d7:ab:4f:ac:f9:7f:37:
         e7:99:66:36:f0:cc:7d:0a:b8:a4:cc:98:86:c2:63:56:e2:56:
         92:5f:d0:50:ee:82:35:de:24:5b:cc:d5:2b:41:90:99:fc:3a:
         44:99:e6:f6:85:9e:df:0c:e5:60:72:58:34:d7:8b:6f:15:be:
         2d:05:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:18 2025 by rpki-client