Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d2724aa-ed32-3fbd-bd2e-d64e69072d24.roa
File:                     7d2724aa-ed32-3fbd-bd2e-d64e69072d24.roa (raw, json)
Hash identifier:          YSoJwom+AXxd5NoFE9nlHect+3/xEsHOBGRr3h1ESsQ=
Subject key identifier:   FB:35:C5:20:CA:1A:D8:AE:81:90:A9:77:D8:F8:09:1F:60:7F:85:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412094DE682A68B92F8E3C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d2724aa-ed32-3fbd-bd2e-d64e69072d24.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:09:4d:e6:82:a6:8b:92:f8:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=cee98e7c-65c3-4288-b05d-4da7380c7a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:6c:9c:dd:7a:63:8a:61:35:39:c3:37:bc:
                    8a:ca:8b:b0:b9:89:cf:12:6d:41:2d:5e:9c:e6:3f:
                    c6:95:62:37:4c:1b:af:2f:92:8a:fd:0f:7b:22:f8:
                    be:d0:5a:a6:08:69:73:fb:96:ac:21:7a:7c:2d:0f:
                    03:28:6e:b7:9b:3d:0d:5b:e1:ec:5d:0b:ea:47:28:
                    b1:90:e4:22:69:cc:42:68:9c:e2:3e:7e:d3:c6:00:
                    86:a9:93:34:dc:4d:87:28:6c:db:b9:f1:17:a0:ee:
                    65:a3:37:74:b2:ab:c2:43:27:06:d3:98:00:12:28:
                    d0:52:ce:3f:b3:df:40:62:48:4d:c2:ea:c9:7b:cd:
                    71:01:c7:0e:64:47:a3:f3:bf:51:12:45:74:2b:30:
                    b6:c2:c5:6e:c5:73:fe:a7:da:e9:f0:98:72:c8:e2:
                    dc:bd:14:fa:5b:c7:67:40:3b:3b:73:0e:ca:90:f5:
                    20:6e:6c:e0:69:b0:b7:ef:1c:65:af:5a:ee:e1:2c:
                    91:15:f0:d0:b7:5f:4f:c8:df:26:d8:08:3d:40:bb:
                    12:f2:15:93:de:c3:65:e5:6a:69:10:6d:d1:b6:24:
                    63:fa:20:fc:a5:d9:59:30:46:10:78:40:ce:03:cc:
                    b5:b7:73:af:72:f1:a8:80:42:94:f3:95:b6:52:9b:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:C5:20:CA:1A:D8:AE:81:90:A9:77:D8:F8:09:1F:60:7F:85:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d2724aa-ed32-3fbd-bd2e-d64e69072d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:69:c0:67:96:e0:1f:e0:b7:c4:a3:43:37:db:e9:0c:ed:57:
         1f:0a:0d:fd:f9:e6:12:42:27:12:b3:53:5d:db:86:ff:36:8f:
         8e:e7:7d:c4:83:13:b0:b3:0f:99:54:58:c5:56:dd:5e:fc:87:
         0c:0c:ca:b2:30:87:0a:64:ac:13:d7:6d:de:d4:6e:80:a1:79:
         01:48:e1:f0:b6:6f:c1:d4:2d:df:e2:a1:95:58:37:f4:70:73:
         c2:cf:a1:b2:f8:dc:2b:ba:d1:12:31:df:65:bd:4b:c4:9e:3f:
         81:16:fb:76:24:c4:81:79:f2:a1:a2:fe:c7:fb:04:57:de:08:
         90:e4:26:f8:2b:65:8f:a7:4c:9d:cd:93:c2:7a:5e:43:50:6c:
         d4:67:a8:6a:6b:d9:2a:7a:6b:1c:6b:b3:50:45:f0:3f:63:4b:
         f1:17:ac:37:eb:76:d3:4b:4b:6a:c8:1f:a7:43:d8:27:18:2b:
         69:41:c0:06:16:45:fa:32:da:d4:bc:8d:3f:9f:18:31:5f:b4:
         d0:2b:f7:1b:ac:2d:97:17:07:b2:72:4a:3d:36:c4:fc:b8:76:
         2e:80:31:6e:b2:1f:89:12:ee:63:b8:c3:80:29:89:05:33:2f:
         82:f4:ae:e1:51:2e:a3:69:63:6b:c4:d4:c9:ce:0c:cb:15:fb:
         14:df:d1:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEglN5oKmi5L448AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
Y2VlOThlN2MtNjVjMy00Mjg4LWIwNWQtNGRhNzM4MGM3YTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukFsnN16Y4phNTnDN7yKyouwuYnPEm1BLV6c
5j/GlWI3TBuvL5KK/Q97Ivi+0FqmCGlz+5asIXp8LQ8DKG63mz0NW+HsXQvqRyix
kOQiacxCaJziPn7TxgCGqZM03E2HKGzbufEXoO5lozd0sqvCQycG05gAEijQUs4/
s99AYkhNwurJe81xAccOZEej879REkV0KzC2wsVuxXP+p9rp8JhyyOLcvRT6W8dn
QDs7cw7KkPUgbmzgabC37xxlr1ru4SyRFfDQt19PyN8m2Ag9QLsS8hWT3sNl5Wpp
EG3RtiRj+iD8pdlZMEYQeEDOA8y1t3OvcvGogEKU85W2UpvI7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPs1xSDKGtiugZCpd9j4CR9gf4UdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2QyNzI0YWEtZWQzMi0z
ZmJkLWJkMmUtZDY0ZTY5MDcyZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBpwGeW4B/gt8SjQzfb6QztVx8KDf355hJCJxKzU13bhv82j47nfcSD
E7CzD5lUWMVW3V78hwwMyrIwhwpkrBPXbd7UboCheQFI4fC2b8HULd/ioZVYN/Rw
c8LPobL43Cu60RIx32W9S8SeP4EW+3YkxIF58qGi/sf7BFfeCJDkJvgrZY+nTJ3N
k8J6XkNQbNRnqGpr2Sp6axxrs1BF8D9jS/EXrDfrdtNLS2rIH6dD2CcYK2lBwAYW
Rfoy2tS8jT+fGDFftNAr9xusLZcXB7JySj02xPy4di6AMW6yH4kS7mO4w4ApiQUz
L4L0ruFRLqNpY2vE1MnODMsV+xTf0RI=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:24 2025 by rpki-client