Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce9b85f1-4922-3e5e-a3e8-9d86bf1e1d2a.roa
File:                     ce9b85f1-4922-3e5e-a3e8-9d86bf1e1d2a.roa (raw, json)
Hash identifier:          dCwIg8DjXWYT92xEiTBp9pgKe2HQYAzcV7hL2Dc07XQ=
Subject key identifier:   50:12:0F:06:C2:2A:6B:72:02:16:0B:FF:6F:1D:0D:F6:2B:6D:37:17
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411521BAABAFF3072FE9800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce9b85f1-4922-3e5e-a3e8-9d86bf1e1d2a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:52:1b:aa:ba:ff:30:72:fe:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5683b74d-d492-4a6a-8d0a-73a9262142ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:00:0e:61:76:21:fc:86:21:64:5b:57:bb:
                    f2:db:90:6b:89:34:1e:2e:96:17:7e:df:57:16:10:
                    96:b9:86:43:ee:66:64:b7:a6:b3:72:0a:6c:20:6e:
                    9d:9f:2a:85:f7:44:e5:cd:8b:a3:08:3d:f1:2c:94:
                    b0:7a:90:6a:dc:78:ec:32:02:ae:0e:90:4c:e3:13:
                    0f:b4:28:4a:ec:f9:01:6d:0a:fa:ca:80:60:ee:eb:
                    09:ea:6b:94:06:6f:30:17:75:c8:40:19:88:08:3e:
                    5d:d1:47:7c:cb:00:e1:5f:97:a8:1b:cc:5e:01:50:
                    fd:84:f0:b3:dc:87:59:56:9b:90:59:9f:8d:d1:60:
                    30:9a:01:96:55:82:0c:0a:6a:e7:f0:f2:d9:3d:d3:
                    76:0c:e4:81:2d:f2:5c:cd:ea:4d:f3:72:f6:6a:a5:
                    34:c0:3d:67:4c:c9:78:75:52:b0:72:b6:f8:54:97:
                    a2:b4:d7:d1:6f:9f:c4:f8:7f:7c:2b:49:ce:75:d7:
                    d2:66:e0:36:a7:73:4c:9e:de:06:84:ce:ba:ff:54:
                    9a:d9:d8:1d:81:05:ce:8e:eb:76:24:b0:2e:b9:34:
                    08:cd:10:b2:ae:0a:d8:40:6f:14:ff:e8:b7:c8:d9:
                    73:53:a8:b1:ba:8e:ab:22:24:a9:c1:0a:18:10:e5:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:12:0F:06:C2:2A:6B:72:02:16:0B:FF:6F:1D:0D:F6:2B:6D:37:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce9b85f1-4922-3e5e-a3e8-9d86bf1e1d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:89:77:e0:1e:5b:8c:ef:2d:1d:f9:ff:68:30:07:42:82:
         60:df:dd:12:9b:5d:5a:2f:df:37:b6:06:c6:53:03:a2:7f:fe:
         47:0f:51:ae:56:37:4e:13:ad:24:7a:d5:5b:b8:75:ad:f4:c0:
         df:b9:83:b2:59:72:1b:a7:2b:fa:47:ac:65:ad:10:18:70:f8:
         52:51:2b:3e:6e:49:20:aa:91:fa:95:d1:a8:3f:ec:0c:30:4d:
         e9:d0:4b:dd:24:f0:f5:dc:87:c3:a2:3a:89:72:32:01:84:2d:
         c3:bf:5e:1f:d7:f8:88:79:d2:08:fc:72:df:cd:22:1d:cf:bb:
         03:6c:fa:82:1f:2c:6e:19:1b:83:ad:69:58:36:b4:7f:cf:fa:
         2d:2f:53:b0:e1:6b:3e:3f:11:34:02:67:35:00:c0:31:65:d7:
         3c:56:cd:bd:58:95:bc:df:77:ee:b1:f5:22:8b:45:2d:6e:0b:
         e0:89:fe:d0:de:43:c5:73:ff:c3:98:83:b0:34:9e:19:2a:ce:
         92:10:b8:4d:c3:71:72:15:f1:40:88:ca:84:27:ff:6a:42:df:
         a1:38:52:70:f8:95:cb:74:ec:ab:c5:37:31:e3:51:8b:ae:ab:
         52:55:62:e9:b8:3a:35:f3:5c:ff:c7:f9:6b:99:fa:6a:18:19:
         07:62:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:25 2025 by rpki-client