Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/596982a3-ec50-3142-8807-438ab7eddc89.roa
File:                     596982a3-ec50-3142-8807-438ab7eddc89.roa (raw, json)
Hash identifier:          D0kDv1PrwUHhwxatxTXzeF+8jj3X20VV20YRPkf2j88=
Subject key identifier:   23:EF:4E:9A:F2:B2:EB:02:AE:0F:50:38:4F:16:49:E4:6E:2C:C4:83
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411520BE911C179F8A12620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/596982a3-ec50-3142-8807-438ab7eddc89.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:52:0b:e9:11:c1:79:f8:a1:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d4dc251f-1346-473e-9107-82b603ffcaea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:4d:24:54:65:d2:7b:6a:f0:a6:3e:0a:f9:
                    da:e9:57:50:8f:31:ec:84:24:b7:25:df:b1:37:32:
                    b3:09:e4:aa:1b:6c:4d:18:e6:11:c2:0e:cd:f9:1c:
                    20:23:f3:8a:74:b4:07:62:c7:53:9b:83:4e:ef:bc:
                    23:36:54:4b:08:67:91:41:fa:1b:24:03:c2:f8:c2:
                    0e:6a:64:2c:da:73:89:c8:b0:f0:62:cf:81:93:0f:
                    15:15:7e:2a:b2:66:cc:c1:b2:dc:42:4e:3b:da:2c:
                    d2:41:d0:e6:5a:06:f4:5a:57:b0:b8:e3:6c:34:11:
                    19:1a:93:15:0a:8f:14:94:5b:55:c1:f2:a3:90:91:
                    c0:8a:b8:e7:1f:9c:57:5e:24:cf:9e:83:72:23:40:
                    c4:6b:75:78:d5:1a:39:85:d3:c3:db:cb:c3:e0:17:
                    b4:76:cb:29:c6:3c:db:03:ba:cc:a4:0a:2a:49:c3:
                    a2:28:5d:91:98:e7:e3:61:c6:8b:46:5d:bc:07:3f:
                    9a:c7:7b:19:df:4f:f0:02:08:39:96:cc:50:6a:45:
                    09:6c:a6:74:6d:eb:f7:70:5e:ff:ac:dd:28:ba:8b:
                    92:5a:2a:9a:45:cd:10:f5:e4:6b:59:99:e4:e5:5f:
                    60:1e:b2:32:d8:93:ed:6c:b2:5e:d6:61:d5:27:e3:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:4E:9A:F2:B2:EB:02:AE:0F:50:38:4F:16:49:E4:6E:2C:C4:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/596982a3-ec50-3142-8807-438ab7eddc89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:22:d1:65:56:a2:ef:4a:7f:42:d5:e7:a5:ac:6f:5d:4c:65:
         f6:78:0b:ba:48:8d:43:02:56:23:98:68:9a:8e:cf:33:be:e7:
         13:82:90:90:d0:af:09:06:2f:c5:81:bd:32:6f:5e:42:df:33:
         a0:03:bf:a6:a4:58:29:8f:dc:94:a6:10:8a:d9:77:7b:40:bd:
         97:ed:91:7a:30:c9:00:1a:03:f3:27:c4:e0:b3:ef:41:8e:ec:
         93:70:c1:fe:1e:ad:57:cb:00:c4:b3:56:b5:76:f0:b1:3e:1f:
         90:c6:08:76:5f:65:f6:5f:e0:70:f4:d5:83:f0:bc:f2:77:bf:
         ac:5f:53:87:1a:fe:8e:03:e5:2c:48:21:ef:24:85:9b:88:da:
         e0:77:90:76:79:25:83:e5:e2:4b:dc:37:a4:76:0a:bc:bb:0b:
         34:5f:a0:89:aa:42:cb:de:bf:36:f9:96:0b:89:ed:68:1b:32:
         26:5b:64:98:89:99:30:c5:48:10:6f:dc:14:32:d8:4f:f3:f9:
         60:09:5e:df:98:b9:9e:22:1f:0d:dc:7d:a8:18:45:a5:6c:10:
         bf:cc:67:12:6c:9a:2a:f3:6d:ce:9d:3c:aa:eb:76:eb:23:c3:
         b9:63:e0:66:ef:31:38:b5:b9:fd:a5:fb:55:d4:27:cc:64:97:
         7e:51:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:27 2025 by rpki-client