Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/44c048df-fe80-3693-963f-ca7d94c8011e.roa
File:                     44c048df-fe80-3693-963f-ca7d94c8011e.roa (raw, json)
Hash identifier:          P3aMrbbBg/HUqbDdJSklFjPtwTfvELun5kkxwEuTaNM=
Subject key identifier:   A1:6D:BA:76:81:BE:7B:28:57:C4:62:A7:3C:D5:F6:42:79:EE:D3:27
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412124BA562BF49F9F21B60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/44c048df-fe80-3693-963f-ca7d94c8011e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:12:4b:a5:62:bf:49:f9:f2:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c7a6c802-05e2-48de-aa95-f17abc3864bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:bc:fa:5d:67:f6:27:19:5c:28:69:97:05:
                    98:f5:b9:9a:95:93:c7:b0:51:67:2c:35:56:ab:89:
                    3d:f1:2f:cf:35:47:f9:30:ca:b2:d8:7a:ed:64:37:
                    ab:59:8f:13:3d:d4:55:06:45:a2:14:21:06:38:a3:
                    0e:72:7c:9a:61:35:65:9f:5e:27:35:d8:12:96:6a:
                    86:1e:97:6b:cc:95:82:08:0a:dc:f0:d4:2f:f7:cc:
                    c5:c0:00:83:f6:91:a2:8a:a2:13:8c:1f:e3:a8:2a:
                    6e:06:e2:9e:88:f2:e1:2b:b5:49:7c:6a:d7:65:72:
                    c3:88:e1:0a:2c:60:a7:8b:cb:cc:6b:3b:6e:89:e9:
                    a9:7d:63:d0:15:7a:26:22:54:9e:a3:a6:5c:16:e7:
                    28:00:af:70:aa:51:a2:af:71:2d:09:3f:4f:e6:c7:
                    38:a6:27:35:6e:f7:bb:65:8a:9a:cd:ec:83:94:9e:
                    d0:cc:9c:5b:d0:8e:e1:22:f3:be:81:79:ce:0a:c0:
                    48:7b:e3:76:68:70:31:b7:6c:ca:86:86:9a:ec:d9:
                    69:64:14:11:5f:20:27:1a:64:07:d9:be:f5:db:50:
                    0f:81:07:d2:d9:d1:3c:bc:51:1d:0b:fe:f3:cc:21:
                    73:55:eb:6a:84:93:f2:2b:33:fc:8f:f2:d4:13:3e:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6D:BA:76:81:BE:7B:28:57:C4:62:A7:3C:D5:F6:42:79:EE:D3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/44c048df-fe80-3693-963f-ca7d94c8011e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:46:36:dd:7b:a5:d4:b1:35:4b:e7:18:df:1a:81:80:41:7f:
         36:f3:c4:df:b1:f3:fe:c7:a5:6a:9b:0c:69:7b:dc:f2:e7:fd:
         dc:74:f2:6a:2d:76:97:b0:82:2e:5e:a0:f5:27:5b:22:8f:fd:
         cd:01:67:a8:3c:48:61:ad:01:ba:11:4d:a8:81:c1:f8:02:e7:
         9c:b6:4d:0a:b8:09:5a:7d:29:1f:43:fc:05:db:03:6e:d2:90:
         44:31:ef:48:f0:06:45:a5:7b:3f:46:88:a6:9d:d2:7b:a7:b6:
         a0:16:ea:ab:d9:c8:24:f9:91:a3:5e:11:7e:8c:3a:ed:0a:60:
         91:21:b1:b9:fc:ff:b0:03:67:93:8f:e0:98:86:42:0b:b6:a6:
         34:50:91:ad:ef:1e:d1:1f:cd:5f:55:8d:8b:95:8b:98:7d:3f:
         62:71:66:2d:62:25:e7:c4:17:8a:51:3e:ff:1c:a1:69:ad:af:
         59:1a:27:26:67:0c:fd:af:60:82:9c:05:f0:09:e9:c8:59:0b:
         f1:fa:31:4c:8c:93:25:50:64:fb:d4:32:30:06:37:56:62:57:
         11:1c:99:a2:68:6b:cc:3f:28:f2:3c:65:31:d5:4d:9f:23:3c:
         04:ee:e8:75:e7:8b:51:51:16:70:ca:51:37:06:59:23:9e:9a:
         08:be:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:10:17 2025 by rpki-client