Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa
File:                     4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa (raw, json)
Hash identifier:          AHIs+hnpK2ZdMC03Qhi0yAepRSwAajXFQAdDWLXg4Go=
Subject key identifier:   18:AA:ED:87:00:99:BA:0D:F3:FE:BE:1D:CD:16:FB:62:2C:64:C6:72
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841207E19F17347FD37EC500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:07:e1:9f:17:34:7f:d3:7e:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b9630804-1299-4adb-8e45-3c3f1bc36c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:de:73:33:85:f2:a4:00:0c:32:fd:f8:c3:
                    74:11:76:9b:e9:b2:47:b3:95:35:a2:3a:24:f9:bf:
                    42:83:87:cf:4c:dc:64:c0:8a:e2:9f:b6:25:52:1a:
                    f9:e1:cc:ee:50:2e:23:13:48:d9:ca:f7:30:91:e8:
                    6a:b1:6c:80:ea:08:e6:f5:d1:0a:cc:a3:7c:ee:51:
                    67:1c:c2:1a:56:8a:61:d5:e5:a5:98:b5:13:c1:5b:
                    4d:06:15:d5:ac:b9:14:5b:c2:cc:aa:d0:b3:e1:5a:
                    b9:11:dc:f2:1c:7b:4f:c2:9e:14:8f:01:ef:fc:7f:
                    61:2f:c5:6c:ce:8c:6b:13:59:bf:0e:7b:71:88:70:
                    10:1a:5a:f3:af:1b:cc:b4:35:12:58:66:ce:e9:58:
                    d5:b8:c2:99:59:5a:2e:cf:d1:54:dd:ef:95:d0:07:
                    ca:2b:06:38:b9:7e:12:00:91:65:4b:5c:70:5f:e9:
                    4b:f1:56:c8:01:a6:84:54:48:70:51:8d:53:44:90:
                    1b:ba:9c:e1:5a:da:fd:b2:f6:f5:50:a5:2a:ff:5d:
                    30:49:94:f7:74:27:fe:fe:c6:d7:51:e2:7e:3d:4e:
                    b3:3f:18:96:0f:a2:f5:27:76:2c:79:8c:5d:d4:72:
                    20:20:60:cf:13:39:87:9f:f2:e0:b1:66:ba:5a:e8:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AA:ED:87:00:99:BA:0D:F3:FE:BE:1D:CD:16:FB:62:2C:64:C6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:cd:e2:03:4c:f5:da:98:62:92:c2:78:cb:b2:05:0a:6d:b3:
         9b:95:24:09:80:7b:db:7e:af:f3:08:9d:27:99:17:29:75:f2:
         fc:55:5a:ef:df:15:24:80:1a:b5:92:b5:ea:a6:19:70:b3:4c:
         a2:34:84:cd:96:50:6e:d7:80:73:f4:d6:a0:c9:b6:47:72:56:
         05:ba:7c:d5:04:44:16:ef:0d:10:93:7f:86:d2:ae:51:15:65:
         0e:e2:5e:c5:6b:45:ee:63:ad:01:d3:1d:8a:7b:e2:39:c2:61:
         60:0d:8c:98:40:71:9b:f0:d5:a0:59:03:4a:d3:88:9e:9c:a2:
         5c:e1:a9:40:35:53:90:d4:f9:9b:8f:51:93:d1:10:02:c3:47:
         83:b8:6c:70:a2:b4:54:fc:fb:3a:b9:86:9b:b9:f0:a2:24:89:
         a1:a4:ef:81:3c:37:88:2b:10:37:4c:6e:e9:19:4e:bf:28:d0:
         24:48:05:29:48:24:ba:c3:60:a9:3c:79:75:6d:9a:e0:f2:fd:
         cb:98:1a:6b:9a:40:80:8b:59:c4:cb:19:6a:a4:57:a1:a4:14:
         42:7c:77:43:d9:cb:f6:71:72:10:bc:50:d1:be:2f:13:71:41:
         fe:e3:bf:bb:ee:d6:80:ec:86:ff:05:ae:f6:d2:51:52:bd:8c:
         39:78:24:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgfhnxc0f9N+xQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
Yjk2MzA4MDQtMTI5OS00YWRiLThlNDUtM2MzZjFiYzM2YzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4LeczOF8qQADDL9+MN0EXab6bJHs5U1ojok
+b9Cg4fPTNxkwIrin7YlUhr54czuUC4jE0jZyvcwkehqsWyA6gjm9dEKzKN87lFn
HMIaVoph1eWlmLUTwVtNBhXVrLkUW8LMqtCz4Vq5EdzyHHtPwp4UjwHv/H9hL8Vs
zoxrE1m/DntxiHAQGlrzrxvMtDUSWGbO6VjVuMKZWVouz9FU3e+V0AfKKwY4uX4S
AJFlS1xwX+lL8VbIAaaEVEhwUY1TRJAbupzhWtr9svb1UKUq/10wSZT3dCf+/sbX
UeJ+PU6zPxiWD6L1J3YseYxd1HIgIGDPEzmHn/LgsWa6WuhwWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiq7YcAmboN8/6+Hc0W+2IsZMZyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGRjZTY1MmYtYjBhZC0z
OGNmLTkwZDctZmI0NWEzNzdmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALzN4gNM9dqYYpLCeMuyBQpts5uVJAmAe9t+r/MInSeZFyl18vxVWu/f
FSSAGrWSteqmGXCzTKI0hM2WUG7XgHP01qDJtkdyVgW6fNUERBbvDRCTf4bSrlEV
ZQ7iXsVrRe5jrQHTHYp74jnCYWANjJhAcZvw1aBZA0rTiJ6colzhqUA1U5DU+ZuP
UZPREALDR4O4bHCitFT8+zq5hpu58KIkiaGk74E8N4grEDdMbukZTr8o0CRIBSlI
JLrDYKk8eXVtmuDy/cuYGmuaQICLWcTLGWqkV6GkFEJ8d0PZy/ZxchC8UNG+LxNx
Qf7jv7vu1oDshv8FrvbSUVK9jDl4JKM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:11:33 2025 by rpki-client