Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7360d417-ebb4-3492-abcd-cf46fc9f64cb.roa
File:                     7360d417-ebb4-3492-abcd-cf46fc9f64cb.roa (raw, json)
Hash identifier:          p/WwVHkx6uA0n47RcpHDZNs9aVPaqdm3VfcvoKFgjpg=
Subject key identifier:   DE:3C:C7:A0:4F:C4:4F:0F:27:9B:4F:A7:EF:CE:94:55:6D:6C:E7:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841208A919A240B10DE15A40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7360d417-ebb4-3492-abcd-cf46fc9f64cb.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:08:a9:19:a2:40:b1:0d:e1:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3343b497-6ddd-44ed-b644-a2b175258744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:b6:94:15:a2:1e:ae:9b:06:a4:33:61:d0:
                    b6:d3:18:47:ed:9c:cf:60:8f:f1:f6:03:4b:af:e1:
                    7b:68:e0:95:b7:e5:be:47:a6:34:10:2a:53:f5:34:
                    f4:6a:e2:22:19:ef:8a:10:bd:20:a3:a6:15:de:4b:
                    bf:db:d0:96:f2:c1:f1:dc:90:1a:38:fd:20:42:4f:
                    8d:e2:39:13:89:83:cb:b8:1c:dd:94:47:43:f9:b5:
                    57:44:29:fe:4d:dc:97:f4:35:71:e6:17:32:47:ff:
                    8b:3e:88:b1:08:d8:a0:f7:66:96:9e:cf:74:ff:b2:
                    ee:49:8d:2f:e1:0c:d0:57:28:5f:81:3b:90:4a:fb:
                    bc:76:98:93:c9:ce:f7:4b:d5:ce:3c:8b:fe:fe:15:
                    2e:ca:95:98:1f:e0:62:de:44:20:db:4c:8b:a5:5a:
                    0d:bc:7c:f3:d7:fa:10:8e:fe:27:03:80:26:a6:79:
                    4b:ca:52:eb:8f:9d:e6:83:98:0f:e3:69:ab:ba:02:
                    83:1b:9d:d8:f1:f1:76:ef:36:34:23:f0:d4:e3:16:
                    7f:d9:7c:11:ec:ba:20:25:64:8e:34:de:04:bb:3d:
                    2d:b6:7d:7d:1e:06:dc:61:1c:69:55:27:14:03:68:
                    2c:6d:c3:0e:28:05:3c:d9:b1:ba:f7:d5:03:99:80:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:C7:A0:4F:C4:4F:0F:27:9B:4F:A7:EF:CE:94:55:6D:6C:E7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7360d417-ebb4-3492-abcd-cf46fc9f64cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:14:ed:48:cd:29:02:64:2d:26:8d:e5:85:16:96:96:da:
         f3:94:db:71:ac:f8:f0:26:d2:62:e6:32:65:6c:b8:24:8c:25:
         70:16:e0:3b:1f:89:d4:f5:bc:f5:49:eb:b5:26:2e:7c:36:1d:
         2c:15:b1:26:35:5c:80:6c:fd:f0:21:83:04:e2:16:aa:92:ab:
         98:7d:86:57:d6:7b:46:c7:17:f2:cb:b7:01:35:bc:7a:34:da:
         b9:9c:3c:4e:26:e9:69:dd:6c:fe:be:6f:25:a4:23:8b:93:d7:
         a0:8a:83:ec:52:4d:45:9b:86:d7:b2:82:f6:58:25:82:84:82:
         23:6e:cf:08:eb:aa:5d:43:08:71:82:c2:38:2a:ab:94:83:7a:
         ae:4b:bd:85:62:10:ea:2c:ef:73:d9:7a:ca:77:02:81:eb:f2:
         7e:3d:b6:2c:33:a9:5d:1d:eb:15:d6:ee:0e:75:6a:68:a1:4b:
         ee:83:e5:11:57:72:eb:2d:be:a5:a4:ec:67:21:2f:3c:6f:cb:
         7a:f3:50:41:04:32:d6:d4:b2:42:8d:fb:b1:f0:17:01:b1:b0:
         07:d3:ac:cb:1a:88:dc:f2:a3:c3:40:70:30:e8:f1:0b:75:92:
         4f:d1:79:6d:22:dc:4f:58:53:2f:8f:e4:6c:54:f7:34:ac:fe:
         4f:34:d0:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgipGaJAsQ3hWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MzM0M2I0OTctNmRkZC00NGVkLWI2NDQtYTJiMTc1MjU4NzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifG2lBWiHq6bBqQzYdC20xhH7ZzPYI/x9gNL
r+F7aOCVt+W+R6Y0ECpT9TT0auIiGe+KEL0go6YV3ku/29CW8sHx3JAaOP0gQk+N
4jkTiYPLuBzdlEdD+bVXRCn+TdyX9DVx5hcyR/+LPoixCNig92aWns90/7LuSY0v
4QzQVyhfgTuQSvu8dpiTyc73S9XOPIv+/hUuypWYH+Bi3kQg20yLpVoNvHzz1/oQ
jv4nA4AmpnlLylLrj53mg5gP42mrugKDG53Y8fF27zY0I/DU4xZ/2XwR7LogJWSO
NN4Euz0ttn19HgbcYRxpVScUA2gsbcMOKAU82bG699UDmYCETQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN48x6BPxE8PJ5tPp+/OlFVtbOfOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzM2MGQ0MTctZWJiNC0z
NDkyLWFiY2QtY2Y0NmZjOWY2NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAT9FO1IzSkCZC0mjeWFFpaW2vOU23Gs+PAm0mLmMmVsuCSMJXAW4Dsf
idT1vPVJ67UmLnw2HSwVsSY1XIBs/fAhgwTiFqqSq5h9hlfWe0bHF/LLtwE1vHo0
2rmcPE4m6WndbP6+byWkI4uT16CKg+xSTUWbhteygvZYJYKEgiNuzwjrql1DCHGC
wjgqq5SDeq5LvYViEOos73PZesp3AoHr8n49tiwzqV0d6xXW7g51amihS+6D5RFX
custvqWk7GchLzxvy3rzUEEEMtbUskKN+7HwFwGxsAfTrMsaiNzyo8NAcDDo8Qt1
kk/ReW0i3E9YUy+P5GxU9zSs/k800GA=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:03 2025 by rpki-client