Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa
File:                     9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa (raw, json)
Hash identifier:          xIH8mPzBflE+Qef54R8HnRIRyHNd0c/WWw2SJDziZ78=
Subject key identifier:   2B:51:63:54:B5:2B:04:26:80:3E:72:B0:68:71:D8:4C:A7:4B:A1:95
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841208FFD49057727A0E7080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:08:ff:d4:90:57:72:7a:0e:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=24497b64-c37a-404e-be50-b7c021590b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:b2:09:bf:af:63:93:09:f8:93:90:d7:48:
                    59:37:d9:b9:89:5e:51:6e:ef:81:79:be:e7:f3:28:
                    04:1c:2c:bc:3b:ea:ce:9e:4d:07:65:9a:e6:33:67:
                    74:4f:15:7c:5c:6a:bd:68:52:78:0c:24:4f:af:d2:
                    1c:ea:12:3b:c1:9d:dd:8f:8e:cf:80:64:6b:70:78:
                    14:f3:50:48:d7:2a:4d:53:a2:7c:ea:d3:bf:97:5e:
                    ce:89:5d:88:3e:62:45:56:fc:61:98:c4:83:94:f8:
                    ef:3d:55:14:84:34:7f:50:dd:2f:fc:98:89:02:43:
                    c5:66:5f:f9:24:d2:c0:20:62:ff:03:53:b7:b1:5b:
                    13:95:d9:0d:cf:bd:97:82:a7:63:3a:cb:ee:49:f9:
                    83:c2:69:7e:27:86:94:31:0d:40:04:5e:e5:e4:6e:
                    ce:ee:3a:6e:2b:2d:77:77:66:b7:e7:6e:7d:3d:3b:
                    c1:b3:fa:d7:49:31:58:af:65:ea:57:77:4e:13:2b:
                    fd:1f:dd:5c:8c:5b:49:dc:f4:34:ea:78:95:24:dd:
                    02:5f:a3:a4:68:ba:3a:f1:ea:78:13:e2:ee:85:eb:
                    c3:b2:22:86:b3:93:c5:71:19:82:24:07:87:70:c9:
                    5e:fe:1a:96:5f:b9:df:36:8c:ea:d3:da:d9:96:20:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:51:63:54:B5:2B:04:26:80:3E:72:B0:68:71:D8:4C:A7:4B:A1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:ff:cb:e6:cb:51:fb:ab:be:b8:f8:be:53:0c:a7:d6:aa:48:
         79:77:c9:27:f5:8b:5c:74:0c:84:e3:10:10:99:23:df:5d:66:
         49:a1:96:bd:3b:53:dc:2e:f5:c5:be:b8:19:b7:4e:33:78:51:
         1a:19:7b:f4:e4:c0:cf:fa:dd:89:54:85:5a:e8:e3:73:b4:43:
         c0:b1:5e:f9:c3:51:dd:d3:eb:fc:7a:0d:43:dd:4c:7d:d8:56:
         b6:d9:0e:26:a9:a8:eb:2c:78:01:43:18:7e:5e:69:e5:cd:73:
         c4:b2:2f:74:83:5e:fc:82:8a:eb:90:4e:f9:2b:02:64:ae:b9:
         f4:98:3b:c2:d9:33:75:ea:19:32:85:81:ce:8c:07:b4:39:b6:
         08:c2:86:13:84:5c:68:ae:81:6d:93:3b:5a:c4:27:d3:e8:6d:
         45:a3:15:ca:2f:a1:67:93:50:42:98:31:98:be:b5:e5:43:71:
         46:67:c3:1a:35:a9:2d:59:45:f8:12:37:28:b3:55:f0:74:c3:
         d9:59:78:2d:39:a9:c0:d4:ba:67:c9:4e:c5:81:6f:33:e1:4b:
         67:8e:78:c9:3e:de:d0:88:c8:31:00:99:91:cc:5e:e8:33:bf:
         02:1a:75:68:c1:16:bc:f6:0a:49:4e:88:d7:12:fd:59:4f:7f:
         cf:fa:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:15:35 2025 by rpki-client