Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa
File:                     8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa (raw, json)
Hash identifier:          YdBhC744b2JzUxAg29BvZBsZJCkUQQ1QJHZNDafvmW4=
Subject key identifier:   08:DB:67:52:74:22:24:9A:17:E3:BC:E9:72:A9:7D:E7:D7:EF:7E:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411570807C989CF52B02B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:57:08:07:c9:89:cf:52:b0:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0f8e92f0-9fcb-4cb3-a601-8d226d9b1a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:45:65:e1:0a:e6:43:b3:25:b2:20:96:9f:
                    1b:fa:9c:47:72:d2:84:da:d7:1e:46:8e:66:97:2c:
                    f7:bf:36:7a:30:4f:94:d6:2f:2a:33:e3:c3:e0:02:
                    53:e4:6e:31:11:33:50:99:50:bd:86:00:2c:37:d2:
                    fe:07:30:0f:f6:44:0b:85:cb:c3:98:4a:fd:c3:b9:
                    1b:03:83:20:6b:0e:bb:9f:5a:b0:2f:4b:6c:fe:96:
                    c4:6f:1e:4b:a6:16:63:5c:60:73:50:75:a4:2d:28:
                    0d:45:8d:72:f5:49:ed:41:8d:83:93:a8:f0:0c:c2:
                    78:7f:a1:40:e2:ce:9b:4b:2f:87:a4:63:c4:39:90:
                    0b:20:57:0a:41:6c:2a:00:4f:4b:da:82:51:08:07:
                    f3:e3:75:b4:84:4f:b7:f7:86:e7:b6:bd:71:e3:73:
                    3a:af:7f:8a:f3:01:fa:c0:cf:b5:84:15:c8:fe:7a:
                    56:72:48:23:08:9d:12:c4:c9:86:3e:61:29:c8:31:
                    34:99:c1:e4:19:57:5f:f1:e4:f4:22:00:79:e6:f5:
                    d7:8d:fd:48:a2:c8:21:1b:8f:d5:74:67:ce:c8:4c:
                    ea:e3:78:49:e6:4b:a4:09:08:69:31:fc:ca:45:a2:
                    5f:09:5d:18:5a:5d:67:57:30:72:92:1e:c7:6f:60:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:67:52:74:22:24:9A:17:E3:BC:E9:72:A9:7D:E7:D7:EF:7E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8d:a9:10:55:34:20:61:27:6b:48:ca:ab:8f:95:cd:3f:c6:
         c5:19:d4:ee:f9:0e:ee:8b:97:ac:68:02:6b:86:7e:39:52:49:
         2f:fd:75:de:8e:5c:db:58:69:1c:3a:d8:82:27:01:0d:8d:78:
         56:76:74:64:21:02:ce:25:5a:4b:b0:f4:be:9b:a2:76:16:ba:
         b9:75:0f:e3:40:96:fd:d2:34:ce:e7:4f:8e:be:9b:de:a7:b6:
         10:ab:54:52:80:99:34:8a:dc:48:ec:f7:65:90:62:f8:31:a7:
         d5:34:9f:ba:c4:46:cd:41:5c:ef:be:cb:71:88:80:6f:fc:e7:
         40:86:30:f4:1b:6b:12:79:eb:17:d2:2f:eb:90:5d:c4:48:28:
         36:5e:04:c8:37:4c:fd:96:ed:22:9f:a0:3e:2d:1a:e5:e3:2e:
         8a:d6:e9:2d:c2:5a:b4:1d:26:25:d0:58:56:17:a9:af:e8:c8:
         7e:84:d7:fb:d6:00:72:92:7c:62:0d:3b:86:f3:c4:9b:1c:55:
         97:de:7b:e9:c9:2b:f9:c0:d5:90:7e:fd:4f:8f:36:7e:94:ed:
         3a:7e:2c:44:bb:0d:8e:0e:29:eb:ed:60:b8:31:bc:4a:d1:03:
         8b:ff:8a:f6:86:49:68:68:92:28:af:96:bc:0a:fc:8a:08:8d:
         d6:7b:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:52 2025 by rpki-client