Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa
File:                     cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa (raw, json)
Hash identifier:          WS4jZsvvgAoF0K8wz1Ge2jea9U03Ooml2Uvv+5u9HV4=
Subject key identifier:   AB:D2:B2:8B:1B:59:7F:B0:0F:07:FA:D2:E1:C7:5B:B0:CE:F2:09:FD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841158CEE17A3D3010289A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:58:ce:e1:7a:3d:30:10:28:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=05a8ad6b-a49b-46e9-8297-3be9e2bd1a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:29:d8:3c:ed:5b:c1:04:1a:f6:67:18:d9:
                    bf:8b:a2:ac:db:5e:91:b5:bb:27:bb:05:43:1a:e5:
                    09:4f:a8:97:7e:ec:ae:b2:10:d9:9b:cd:3e:7f:49:
                    cb:3d:0a:37:8b:e5:ef:b3:01:0c:ca:ef:b2:92:aa:
                    31:85:74:a9:62:09:3d:eb:52:15:60:b0:67:37:43:
                    fb:d8:e0:2b:81:3e:06:91:50:df:3f:4c:e2:2f:a6:
                    46:7d:7d:73:a9:31:a5:44:70:d8:0c:5a:c4:6c:d0:
                    5f:1c:ef:d1:34:c1:9d:a7:17:ad:44:e3:e3:41:0c:
                    9b:fa:98:5d:18:62:4d:54:c3:d2:1d:bd:a9:8e:bf:
                    52:b5:99:64:d9:4d:6e:32:6e:4d:81:05:12:d5:a3:
                    f5:51:a4:02:e5:ac:0f:9b:60:64:bc:ae:3d:13:84:
                    1f:5c:e3:da:bb:99:21:a7:d3:38:c3:76:3a:80:26:
                    68:db:98:45:45:5c:fb:63:59:0a:4a:75:5e:6f:90:
                    b6:09:e9:85:cf:a1:8b:c4:2d:7b:97:79:20:8d:63:
                    3a:f3:c9:f2:cb:99:78:56:66:76:e2:64:82:c7:4c:
                    1f:a9:ed:6d:32:fe:5b:f0:1b:2e:c8:df:1c:6f:fb:
                    60:1c:e9:04:49:9a:2f:fb:81:26:30:0f:0f:7b:c4:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:B2:8B:1B:59:7F:B0:0F:07:FA:D2:E1:C7:5B:B0:CE:F2:09:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:72:61:43:93:a9:a7:2b:db:98:cf:65:20:9c:c2:e7:cd:27:
         ff:95:a2:9b:df:ca:9e:12:16:4a:0d:6f:31:bd:21:19:21:e0:
         67:b6:a3:15:61:93:9f:1c:c8:f9:66:9f:45:c5:d2:c6:d1:ba:
         97:b4:6b:86:00:c0:47:9d:b3:c7:c2:e8:d3:85:0c:49:a1:d4:
         68:07:c3:b7:56:56:be:87:92:6e:4c:68:e7:b3:7f:42:3e:7f:
         ae:b1:8c:c6:cb:0b:6f:ff:1a:81:9b:45:8c:5b:b9:a1:a9:32:
         8e:8e:83:84:d6:b2:4d:f0:8a:4d:7f:2d:ac:ec:1f:b7:87:f0:
         cf:03:d6:5a:28:80:e2:1f:15:73:a4:05:8d:46:6c:ab:dc:63:
         0d:ab:fb:7a:da:ba:5a:f3:32:03:4c:98:ff:9e:17:56:f8:4c:
         dc:16:c0:83:4e:08:68:6b:66:54:2d:e3:46:7b:7d:ea:73:f1:
         ba:71:87:1b:4d:ea:ce:00:75:ea:b7:51:ea:64:ee:f5:cf:79:
         b2:84:39:e6:06:59:3b:5f:41:64:8a:f8:77:5b:ad:97:b2:b1:
         b0:c4:28:bd:0f:cd:c0:7d:e1:9e:cb:8e:25:d5:32:9f:64:97:
         44:d1:90:e3:3f:5e:b5:80:b0:a5:b9:d6:3b:b2:5f:a7:e2:b9:
         26:69:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:43 2025 by rpki-client