Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a154eeb4-b949-3ed9-b21f-1df10d22b2c8.roa
File:                     a154eeb4-b949-3ed9-b21f-1df10d22b2c8.roa (raw, json)
Hash identifier:          N0Kla0IZXJPRfSdAXMua8OydPBqbSnuRy7Vi34FvSd4=
Subject key identifier:   02:0C:C8:D8:36:BA:14:3F:E8:03:97:20:22:CC:E3:9C:93:73:E7:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84120B4DA4903E1F915F7F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a154eeb4-b949-3ed9-b21f-1df10d22b2c8.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:0b:4d:a4:90:3e:1f:91:5f:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2a956d7f-06f1-4995-bba2-dc18bc14ff37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:51:99:2c:9f:93:38:e2:9f:4a:01:97:24:
                    a6:c4:35:29:37:10:52:7a:5b:d2:0a:7f:ac:00:30:
                    36:45:d1:8b:35:5b:2b:1e:53:c6:54:a3:8f:b6:e6:
                    80:c3:30:57:e6:1e:ee:1a:8b:d0:37:70:cf:e5:cd:
                    16:9f:ec:d5:43:a8:9a:08:90:d8:04:07:f4:e9:62:
                    54:a5:d3:11:48:ba:81:20:13:d7:ea:ef:5b:b1:8a:
                    52:74:63:82:db:41:11:1e:71:62:1d:50:95:5b:a6:
                    51:81:1a:46:a8:37:c5:65:3f:9a:71:d2:30:ad:a6:
                    fe:6b:55:7b:48:d3:26:8a:9f:e2:46:0e:15:da:97:
                    9a:9f:e4:25:ff:d1:3f:fb:e6:4f:91:ca:24:24:fd:
                    87:f6:3e:76:bf:bc:02:07:e9:a1:9e:d9:15:62:45:
                    8a:99:d6:93:4a:1c:da:3b:14:d7:09:d1:fb:48:8b:
                    6a:14:02:6b:5c:95:4c:26:78:4a:51:fe:6b:1f:cb:
                    b3:6d:79:4b:87:87:47:76:74:bb:82:59:a5:53:19:
                    91:00:f9:47:aa:d3:ca:2c:99:62:19:46:14:ea:b4:
                    80:bc:66:c1:16:fe:9c:04:97:95:d1:a4:4f:0e:7f:
                    59:f8:99:95:2c:c0:56:91:07:eb:be:70:b0:43:9a:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0C:C8:D8:36:BA:14:3F:E8:03:97:20:22:CC:E3:9C:93:73:E7:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a154eeb4-b949-3ed9-b21f-1df10d22b2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:9c:03:d8:65:f7:45:36:74:60:1d:07:44:a2:2a:86:94:
         7d:bc:2e:93:3c:be:85:28:d3:7b:14:75:a6:59:49:07:41:38:
         53:ab:a7:63:eb:6d:5a:21:a9:53:67:29:48:76:f9:3d:30:f1:
         bc:25:fc:46:29:8f:7b:56:e4:39:b6:c8:e8:58:70:af:9d:e5:
         3d:95:af:5e:9e:62:8b:43:0e:f1:e7:f7:d4:1e:77:a6:15:1d:
         9c:ff:ae:a1:9d:08:44:c0:20:01:8e:60:9f:2a:9b:d4:b1:0a:
         da:97:93:0e:ea:af:39:ac:cd:46:ab:f8:5d:c3:65:2c:db:b6:
         f8:9b:f6:10:87:15:1a:db:32:05:e2:ee:bb:d0:01:0c:2b:ab:
         4e:99:d8:84:c6:43:06:66:94:2e:b2:c1:27:95:51:fb:55:da:
         30:7b:22:bc:21:ee:b7:e1:ef:5b:57:bf:67:b6:b7:6f:95:2d:
         30:81:fe:7c:bf:eb:a1:92:c5:10:33:48:0a:5c:11:31:4c:49:
         fa:70:5c:60:ff:7b:3f:65:b3:90:e4:46:f4:6b:f9:4f:5a:de:
         5f:b8:a3:10:cd:01:66:12:70:12:72:17:f2:db:7e:b3:7e:63:
         42:f2:b5:c3:b2:e6:82:0b:72:b0:c0:9b:80:f1:2b:7f:53:3e:
         25:18:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:06:50 2025 by rpki-client