Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa
File:                     5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa (raw, json)
Hash identifier:          8Pa9Q3spEefKqahKQdmhtjp8affxJknrzkh0LoyaO+c=
Subject key identifier:   B7:C9:F7:B4:83:2B:8D:6E:9C:C6:6A:88:93:86:07:ED:59:CC:85:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84115294859DED853E9D80C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:52:94:85:9d:ed:85:3e:9d:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5683bd9d-bc9a-45b7-b484-8ca49fa6708f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:9d:a0:b0:10:86:e0:c5:0c:d9:47:bb:83:
                    47:8a:74:0e:2d:f2:14:95:a0:bb:cb:e2:1b:e5:37:
                    9a:87:6e:86:2e:09:d5:07:75:21:3c:50:e5:ac:37:
                    71:9d:86:8e:22:62:97:6d:c9:9a:d2:42:25:ab:35:
                    75:08:67:17:93:e1:2f:fb:45:5f:81:26:13:38:3e:
                    1f:22:ea:b7:8a:51:c9:64:b1:f1:b7:dc:43:04:4a:
                    92:e7:e6:99:65:7c:c0:b8:61:2f:e2:b2:e9:6e:63:
                    f0:f0:46:ca:7e:fd:04:68:44:e5:a5:25:5b:fa:8d:
                    a8:8f:e7:56:67:b5:24:e4:1c:89:a1:a2:7f:f6:d2:
                    f2:9a:60:2b:a1:f7:49:43:c2:85:83:17:48:9e:8d:
                    45:bf:e0:61:85:e3:49:76:81:f4:76:81:4a:54:90:
                    3a:8a:f6:bd:68:2f:b0:dd:7f:44:09:0e:08:55:bf:
                    28:07:7a:07:76:7f:15:3e:52:02:fb:d5:b4:f4:68:
                    5b:f7:af:0a:b3:11:17:54:78:c8:f0:70:b9:01:34:
                    17:d1:2b:a7:bf:6a:b4:8f:40:ee:88:63:c8:ae:bd:
                    fe:02:2f:38:b1:1b:5b:b6:78:a6:3a:10:d9:83:d0:
                    57:1c:c2:f1:6a:df:25:32:6a:11:ed:13:fc:1d:7b:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C9:F7:B4:83:2B:8D:6E:9C:C6:6A:88:93:86:07:ED:59:CC:85:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4382d5-86d1-315c-870b-6bf9ba74ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:67:24:1c:b5:c4:ef:19:8c:7d:4f:60:0d:19:46:5c:f2:df:
         5f:6c:06:98:c5:13:a0:eb:e3:43:5c:dc:c5:0f:94:94:67:54:
         ae:a1:75:2c:65:0d:97:08:45:66:2b:26:0b:fe:cb:ec:26:d5:
         ce:60:2d:77:6c:04:7f:93:7f:2c:5d:12:d3:90:90:64:d3:58:
         ee:54:43:7a:e8:d5:c3:60:c9:2d:b4:47:3e:8a:f4:97:02:a7:
         0a:2d:98:c3:4f:aa:77:ee:55:aa:11:4c:13:cb:91:ab:11:96:
         3f:2f:d3:5d:23:bd:68:f6:f6:78:75:72:37:f9:43:37:e0:bf:
         37:b8:75:e1:00:14:98:d2:d9:79:7d:da:d0:59:5f:8b:d4:05:
         64:73:77:42:28:f7:82:2b:d7:8a:17:af:5e:45:a8:f6:7b:c7:
         9b:1f:27:03:db:d3:89:5a:19:a1:50:93:d8:0d:3c:a5:c1:45:
         37:ac:f6:66:c5:3a:14:ca:ca:49:7f:f4:d0:3e:a1:e3:cd:cb:
         10:a0:79:c6:13:94:44:be:89:06:33:79:03:04:19:55:66:ef:
         63:af:cf:e8:30:cb:1b:4a:71:81:e2:b2:ab:0f:76:60:2b:05:
         91:cc:3f:fc:38:7d:e6:b0:4c:cf:65:6a:29:f5:af:40:ef:1d:
         f2:e1:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:07 2025 by rpki-client