Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97494dfd-dc7f-3695-a901-48a38bcc1c7b.roa
File:                     97494dfd-dc7f-3695-a901-48a38bcc1c7b.roa (raw, json)
Hash identifier:          e95M4XncLT9gukFjcGRK00BoRsOtrGQDqzrQMAl50fQ=
Subject key identifier:   D9:86:59:0B:8E:32:82:4A:99:89:3F:38:84:E4:6B:44:77:A2:23:50
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84120F3DF331FC729BA4B300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97494dfd-dc7f-3695-a901-48a38bcc1c7b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:0f:3d:f3:31:fc:72:9b:a4:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=15207b6f-1198-4dde-a072-73bafb063b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:1f:f6:36:da:27:7a:6d:87:22:78:3e:3b:
                    13:57:51:74:12:88:5b:11:05:8a:71:30:f7:8a:91:
                    2b:1c:cf:af:62:45:11:67:8e:9c:3a:45:94:de:f2:
                    32:76:54:c3:ab:67:1c:73:74:fb:84:1d:f3:8d:db:
                    37:d6:7a:1b:5d:4e:12:d5:e2:70:9a:61:95:5d:fd:
                    e6:2c:9a:75:3f:bf:8a:c6:20:6d:4f:b6:d9:f1:e9:
                    3e:4c:29:34:7c:f0:e3:c9:4b:9c:92:5b:cb:bb:be:
                    f0:ff:c5:2c:22:6f:78:10:5a:63:ae:48:bf:d1:e9:
                    5d:0f:d7:1b:78:b5:28:1a:33:62:a6:f7:52:76:bf:
                    90:f9:f5:9f:9b:ae:b9:2a:dc:3c:21:28:64:16:73:
                    a8:d1:be:5f:89:f1:96:74:37:f2:ff:3e:41:79:62:
                    08:4d:03:ad:d0:53:51:8d:30:be:b8:7c:90:36:b1:
                    56:a0:53:32:12:44:d4:3a:87:c8:71:ac:e7:21:99:
                    42:24:31:a6:fe:2c:a5:ac:59:ff:ec:df:87:ce:c6:
                    9e:77:24:e9:9b:68:1a:bf:20:44:55:cf:63:84:1d:
                    2c:91:51:4c:23:7e:60:1b:a5:92:20:5a:6c:cd:f2:
                    ef:a5:56:ca:6b:3d:96:8a:65:b7:c6:13:fe:8f:b2:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:86:59:0B:8E:32:82:4A:99:89:3F:38:84:E4:6B:44:77:A2:23:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97494dfd-dc7f-3695-a901-48a38bcc1c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:aa:91:e7:c9:2d:3f:71:4e:e2:2c:3e:52:54:36:8a:4d:
         57:21:1a:76:b2:bd:98:b6:91:19:c4:68:7c:dd:e5:6e:58:f1:
         68:f7:9e:69:05:28:d2:c7:b0:41:bb:45:d6:96:df:2e:85:66:
         dd:85:9b:21:34:e5:05:06:f1:84:ba:7b:52:a4:9f:68:a5:2c:
         06:34:96:b8:01:25:54:18:8d:84:1c:53:30:4d:23:4e:5f:b0:
         d2:b2:5d:80:28:3b:cc:d8:f9:13:ce:45:16:ce:fd:cb:a9:18:
         5f:e4:21:14:e3:cc:77:d7:6f:0f:d1:39:83:c8:c8:6a:9b:12:
         28:97:a3:2f:81:e9:78:91:6b:06:cb:16:bf:f2:1d:8c:e9:c3:
         76:a8:24:4a:ba:f9:1f:55:bd:8c:81:db:0e:45:e0:f7:d6:5f:
         32:08:91:15:c8:90:38:d3:19:06:2c:5f:8a:d8:7b:98:1f:6f:
         e8:96:f0:c3:36:73:68:d8:78:a1:0f:b8:cc:ef:21:a3:11:c5:
         5a:73:61:26:0f:e5:c6:cc:c5:cb:6a:16:ff:af:85:a8:39:28:
         7b:32:dc:36:f3:31:98:8c:3c:4f:ef:dd:f5:47:1d:68:fd:be:
         5f:78:4c:15:26:99:8d:54:14:b1:be:94:8d:9e:60:c6:38:2f:
         9e:46:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:05 2025 by rpki-client