Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa
File:                     6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa (raw, json)
Hash identifier:          6aIjwpc9U4SdK8EnjPXr1DvY3ULT7z9yaV3ZksvGVqU=
Subject key identifier:   A7:12:C8:DF:EA:96:6D:05:BD:D2:E4:F5:B3:73:F8:5D:87:D1:E0:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841151AF35EBBFAE06289470
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:51:af:35:eb:bf:ae:06:28:94:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=941b5a46-0d1c-4433-a3c6-8d564b215033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:5a:87:9a:3d:90:22:00:bd:30:e9:b2:8c:
                    f5:a2:2f:73:3c:36:02:9b:54:6b:43:8e:4e:fd:d8:
                    51:4e:c9:22:84:fb:63:2c:76:35:62:d3:d7:b7:c3:
                    d1:68:70:7f:a3:21:bb:6f:2f:bc:a7:54:6c:86:a2:
                    c6:34:c5:1a:f0:90:9c:6a:c2:7c:6e:91:cb:b3:60:
                    6a:93:31:14:3f:17:ff:b5:b5:b7:9c:e2:38:06:3e:
                    90:84:00:47:f7:a2:39:d1:27:69:2e:34:4a:bb:d0:
                    62:bb:62:8f:16:69:61:5f:a2:b4:a1:b1:1f:4b:bc:
                    fa:69:1d:bd:36:f6:2a:57:69:b9:e5:c2:5e:6d:74:
                    49:06:50:53:df:d1:63:a1:1a:1e:5e:72:c0:ce:91:
                    54:48:47:cf:b5:71:32:ea:55:ce:5a:8b:31:40:87:
                    b2:c3:03:71:31:35:35:e3:6d:d1:69:ce:fa:d2:8e:
                    9e:5b:fd:9c:7e:42:ce:00:37:e1:b2:d0:06:52:e6:
                    0d:62:a2:26:d0:7f:95:17:c7:0d:42:c6:21:0e:d3:
                    ed:09:e4:1c:43:e7:54:c7:bd:2c:e0:9c:6f:ca:31:
                    6f:e4:56:86:a8:8d:42:98:dd:38:cc:25:ba:de:10:
                    ba:81:cf:1b:34:08:f8:64:58:54:5b:ae:22:92:6e:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:C8:DF:EA:96:6D:05:BD:D2:E4:F5:B3:73:F8:5D:87:D1:E0:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:84:da:b3:d1:3f:08:55:53:4b:a6:bf:6a:c1:a4:70:e2:75:
         da:3e:42:2a:4c:e9:7b:73:b1:b3:b8:64:64:f9:8f:5e:0d:c3:
         01:cc:99:24:b8:16:da:3b:3d:1c:a2:5e:3c:51:15:4c:33:b1:
         96:b1:56:5e:30:cf:83:73:38:94:81:6b:85:24:a5:fe:f4:66:
         fe:b2:12:2c:bb:e9:18:a3:18:63:53:47:52:29:7f:76:5c:51:
         f9:ee:36:11:5d:6d:ce:fb:bf:9b:0b:f3:76:9d:a6:7c:61:b2:
         0e:4c:b8:a7:0f:2c:1b:ed:ea:42:5e:28:ff:e3:b2:1e:14:ff:
         11:42:e4:5c:01:86:13:5f:74:0e:3e:b6:4f:84:9c:29:03:03:
         51:31:e7:40:b9:8c:71:c2:dc:bf:a2:f3:6d:c0:f5:50:6e:2f:
         a3:d5:e6:0f:c9:5f:20:24:33:fc:3d:91:83:00:87:11:08:e7:
         c3:11:08:34:11:52:0a:cb:63:91:d0:46:c1:e9:11:19:99:22:
         37:f0:7c:47:c0:d7:29:2e:01:12:3f:c8:76:e1:6f:2f:10:6f:
         d5:57:36:92:86:16:81:64:73:7d:28:c6:69:0e:2d:cb:4d:55:
         b9:42:45:42:f9:41:0d:c8:13:ab:fd:10:8f:6b:bb:63:86:cc:
         5f:5b:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:57 2025 by rpki-client