Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa
File:                     551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa (raw, json)
Hash identifier:          tRyUvharRx+GgzcN1Tfmrqu9bIsvRcH/Zcv2qo/WhDI=
Subject key identifier:   A4:39:2B:0E:CF:2E:E9:E8:9A:5C:3C:AA:43:86:48:A9:22:41:9B:81
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411594598CBEC09F36C6900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:59:45:98:cb:ec:09:f3:6c:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2a75203d-b8e3-426f-89b9-b7f257b91734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:65:57:02:91:1e:52:f6:4a:1c:dd:d6:4c:
                    9b:0a:13:87:17:37:90:54:c2:fc:a2:47:ec:2b:88:
                    9d:72:37:b2:d1:21:6b:7c:f0:75:4a:fc:84:62:20:
                    fe:a0:64:8c:47:fe:ac:6a:1c:c2:09:ad:72:26:59:
                    e6:b7:86:08:a6:78:24:51:80:14:8a:6a:f7:5f:86:
                    fe:26:71:d4:5e:f6:e5:33:c2:ba:95:c4:13:aa:0d:
                    87:08:d8:cb:07:46:de:38:cc:e6:8e:ae:55:09:0f:
                    46:97:a3:98:90:44:0b:6a:86:ca:5f:5a:28:44:56:
                    e9:85:58:81:34:e6:5f:d7:97:fb:38:91:3a:33:55:
                    6d:8a:da:03:c4:46:83:3c:08:7f:8a:a7:87:26:8e:
                    01:94:b8:92:71:4d:75:ff:51:e7:b4:20:14:90:e8:
                    63:8d:ff:f1:5a:7b:4a:32:c5:62:10:f5:ef:1a:81:
                    97:bc:fb:71:a2:8f:55:af:63:54:54:26:d5:93:ad:
                    5d:8b:24:55:5e:ad:8c:f7:5f:ab:80:e4:b0:ab:62:
                    84:25:37:e9:19:52:00:e6:d9:7f:1e:29:dc:50:3a:
                    ad:75:4f:d9:99:31:cf:80:24:b2:2e:f1:ba:63:ea:
                    99:f5:d5:50:4b:b4:d4:3e:8e:09:ee:4e:f9:19:fe:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:39:2B:0E:CF:2E:E9:E8:9A:5C:3C:AA:43:86:48:A9:22:41:9B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:72:db:d5:31:97:30:f1:25:cc:ca:24:a4:81:8a:46:77:36:
         7b:f1:84:74:2d:5c:e5:c2:4e:17:d4:ce:7b:91:d0:56:1d:80:
         ca:58:40:7a:1b:72:25:aa:23:43:c3:a6:15:83:9e:ae:6d:16:
         ce:69:8a:6c:bd:e9:de:25:6c:22:a7:cd:c6:69:68:0b:fd:89:
         bd:bf:46:1f:b4:38:f6:90:77:dc:5a:3d:cc:4b:8d:38:c7:dc:
         de:7b:4d:f9:6f:b5:a3:a6:78:dd:b0:73:fd:ee:9b:44:ba:79:
         96:4d:a0:68:90:a0:65:86:b3:c4:eb:33:dc:47:f2:8f:5e:de:
         ae:38:7e:42:4e:72:19:1e:a8:2c:12:10:d2:ad:9a:69:a1:9d:
         5a:b6:89:27:3a:97:12:e3:90:43:db:22:c4:3f:41:27:ad:3c:
         5f:17:09:96:6c:fd:55:b9:6f:d0:54:92:91:8e:06:3c:77:f1:
         f2:5e:07:09:bf:cc:e0:22:07:ab:60:b7:bb:e3:6c:dd:bc:36:
         85:f3:2b:97:52:9b:18:7f:6e:a0:16:b9:93:26:da:2e:61:6d:
         59:11:f4:e9:f8:c5:ea:87:3c:32:11:35:6f:5c:c5:9f:d6:19:
         83:46:e7:ef:f1:f3:10:4f:c3:ed:26:77:9f:5c:8f:6e:96:b8:
         89:59:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:14 2025 by rpki-client