Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2813cc6c-1cbb-3678-9aa9-f283a878ae0b.roa
File:                     2813cc6c-1cbb-3678-9aa9-f283a878ae0b.roa (raw, json)
Hash identifier:          7LJZRpCxvvrnwYJS+mTigtq9SmnokW5MJveqAi0oyoE=
Subject key identifier:   DF:35:D7:C1:81:23:3F:FF:F0:C0:41:AF:0A:1C:6D:F3:78:53:C0:C3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84115B36AA49B3839EF6F4E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2813cc6c-1cbb-3678-9aa9-f283a878ae0b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:5b:36:aa:49:b3:83:9e:f6:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a66c63c3-c158-4703-bdb3-723a6a32ac4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:8d:db:0a:59:aa:71:1e:2a:3c:75:99:6a:
                    80:78:4d:20:97:36:e7:1f:41:c3:ec:4a:31:67:c0:
                    a3:04:92:20:5a:44:81:35:68:4a:03:ce:a5:7e:18:
                    c7:38:c4:c4:e9:f5:b5:2a:bf:57:86:7c:21:67:0f:
                    12:e3:cb:03:b2:dc:12:ec:97:ea:7d:79:2d:a0:40:
                    53:e0:3d:b6:a9:c9:bc:68:7e:26:f3:4e:25:10:ab:
                    9c:b3:40:51:81:f2:76:c0:59:76:02:b5:86:68:2e:
                    99:01:a8:bc:b5:41:b0:a3:04:92:b4:3d:4b:8d:d3:
                    80:88:45:11:6f:33:12:f2:e8:fe:dd:cc:82:11:6c:
                    19:54:b3:bd:df:ae:9e:55:6d:b0:90:b7:1a:22:fc:
                    85:e8:35:b3:87:7f:20:12:1e:23:6d:c2:d5:d6:8e:
                    92:f2:28:32:79:cb:11:75:d7:ab:b4:10:3e:5c:71:
                    47:76:f4:a1:61:d5:83:a7:e6:3c:7c:35:4a:9d:96:
                    6c:6b:74:77:8a:fb:a7:24:41:18:5a:27:c4:29:01:
                    22:8b:fa:fe:5a:19:92:a8:57:25:41:44:ae:43:b7:
                    20:96:ea:86:3e:f3:c2:18:10:d9:9b:e5:4c:5e:99:
                    2f:06:8f:e2:63:11:c9:60:3c:47:41:a8:15:64:c2:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:D7:C1:81:23:3F:FF:F0:C0:41:AF:0A:1C:6D:F3:78:53:C0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2813cc6c-1cbb-3678-9aa9-f283a878ae0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:ab:e7:18:82:99:94:7f:db:d3:8f:f0:bd:be:60:38:33:
         4a:9d:da:af:dc:30:82:03:97:87:ba:c7:80:9f:8b:b1:01:b1:
         b6:57:77:60:8c:86:3c:6e:b0:1b:f1:62:60:62:24:bf:9e:5b:
         35:76:30:9c:da:d2:bb:3b:cf:b0:8d:a8:f0:4e:cf:da:ce:ac:
         01:f2:5b:85:65:76:c8:08:fb:6e:00:a7:18:00:7d:64:2c:5e:
         28:4b:66:f8:b1:3c:c0:97:e1:2b:d8:1d:11:22:b0:4b:89:21:
         22:d7:e0:7c:58:a0:96:41:7e:fd:12:1b:e3:eb:38:58:0f:5d:
         45:e6:42:54:b0:1e:72:f6:bb:5a:da:e2:a0:6d:b5:aa:bc:a9:
         5c:e4:d1:ca:91:33:fd:35:b3:44:06:74:1e:6c:49:43:4a:e9:
         29:ba:32:61:20:93:34:d3:9e:fe:63:a6:83:91:2f:7d:6a:3e:
         38:17:ce:af:af:61:44:4c:88:3a:23:0e:e2:7b:9d:a0:a9:2d:
         6e:8e:bc:30:61:a8:15:ed:9a:24:4d:19:cc:b6:45:fe:11:82:
         cc:77:63:e1:ed:d8:8f:dc:53:06:b1:73:51:7a:f1:02:59:fe:
         ad:c9:75:61:2a:8c:b4:5d:b3:c6:19:85:8c:46:1d:01:53:3d:
         20:61:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:57 2025 by rpki-client