Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa
File:                     454a8fab-a8e3-3b41-9727-e0e8d9535738.roa (raw, json)
Hash identifier:          Rr8ltLBSH5EcXx/9p7hcfsPdhrT5tC6PLDimO1RDBSg=
Subject key identifier:   B2:B8:6C:24:FE:3E:9D:06:5F:F9:E3:39:E7:A9:EB:E9:6C:D2:CC:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841207105BB8774BB646A600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:07:10:5b:b8:77:4b:b6:46:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=99bd4141-0841-49bb-9350-7ef49d79b7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:dd:95:b3:f1:3f:77:95:e2:7b:a2:73:a8:
                    ef:77:b3:d3:6b:23:c2:01:11:27:b2:23:cd:2b:18:
                    20:16:d9:da:7e:8c:e7:c6:d3:1b:8a:bf:1f:d5:b2:
                    76:9b:1b:47:1e:47:c2:e3:b0:e0:d1:b7:d8:ac:50:
                    e3:5b:86:a5:5e:b7:43:36:66:fb:09:68:80:13:ec:
                    ad:f5:d1:21:48:cd:3e:2e:46:4f:6b:c7:32:44:74:
                    73:70:46:99:dd:34:ac:e4:ef:43:c1:b1:b1:07:93:
                    98:c4:26:0a:bf:7d:28:aa:95:c3:9c:cd:ca:d2:f4:
                    bb:56:5b:24:63:78:bd:bd:95:6e:8f:ae:fd:30:58:
                    fa:78:4e:90:59:d3:27:d4:3f:be:00:af:45:d9:b3:
                    81:00:ee:53:1e:ad:0f:c0:1c:2b:9e:42:8c:41:4a:
                    0e:ba:d6:c1:dd:ad:44:fc:2b:71:f3:86:34:05:dd:
                    6c:55:fb:32:47:7b:51:e4:9c:f9:9c:49:4c:d7:ca:
                    9f:b5:3d:9a:f8:5c:1a:d9:c3:1b:35:6b:9e:3e:1f:
                    aa:56:5d:c3:ba:44:f8:1b:dc:0c:7e:1c:c0:35:83:
                    95:05:74:fe:e1:19:b8:a0:98:da:f0:7c:5c:93:6d:
                    6a:11:58:3e:c2:3e:d9:83:ae:fb:79:12:08:89:f7:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B8:6C:24:FE:3E:9D:06:5F:F9:E3:39:E7:A9:EB:E9:6C:D2:CC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:97:8a:b3:8d:75:f0:b0:79:4a:2d:7c:b5:0c:13:f3:69:bd:
         1d:c5:35:12:4f:3d:f6:c2:4d:ad:71:7b:68:da:b7:15:aa:a4:
         6f:c1:dd:36:f9:c0:75:69:b6:0b:e0:36:3e:16:bd:27:70:8b:
         06:ff:58:fd:b1:b6:37:f5:c2:3b:84:9a:3a:d6:50:83:88:b5:
         cd:be:ff:e8:25:5e:63:bc:5d:ea:47:3e:93:8b:92:70:0d:5d:
         cd:f2:4f:45:2e:81:85:79:17:37:8f:e9:66:3a:47:0a:26:0e:
         86:a7:18:b5:dc:4b:a9:5e:62:ad:6f:7c:3d:b2:ab:6b:60:8c:
         c0:34:e0:23:9b:f7:b8:a8:44:d2:72:56:0f:3f:4e:31:70:ca:
         e2:fe:1e:80:e8:5d:06:02:63:88:1b:14:67:91:6d:77:a4:9f:
         74:25:f9:d4:4e:b9:68:85:96:85:7d:c5:df:94:f8:8e:d9:c2:
         05:2f:16:05:d5:52:1a:ae:93:7d:43:df:24:39:f2:73:b8:07:
         39:75:92:76:99:c8:ac:a9:24:47:d0:86:23:62:28:bd:59:5e:
         41:5c:06:39:5d:27:b4:67:33:8b:95:a0:87:b1:64:7f:e5:fc:
         0e:e1:df:9c:1b:13:0d:64:12:0c:71:56:06:4e:91:e3:60:3b:
         6f:9e:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:10:17 2025 by rpki-client