Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e53ebd-ae57-38ab-8699-107c43b74d1b.roa
File:                     04e53ebd-ae57-38ab-8699-107c43b74d1b.roa (raw, json)
Hash identifier:          ZH5n/tPOAY6umMVLwTkinMRkEu6lYH5Dbtv5inRjpV8=
Subject key identifier:   23:14:E3:28:7A:17:BD:F0:F1:8C:A2:2B:E4:52:52:43:E5:85:A5:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E6DF408AA7E74D928DC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e53ebd-ae57-38ab-8699-107c43b74d1b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e6:df:40:8a:a7:e7:4d:92:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e9615227-2a41-4456-9fd5-b166bb859dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:ca:e4:b1:9b:87:e5:3b:2c:84:e3:cb:d0:
                    99:dd:9c:7d:3b:ec:b2:72:ec:3c:d9:a6:15:5a:9d:
                    16:f4:80:08:33:12:12:d5:8b:9a:9f:4c:dc:f8:84:
                    9c:88:e8:02:f3:cb:17:c9:be:67:57:53:73:31:1d:
                    ba:0a:ac:b8:3d:05:c9:9d:2a:e2:2a:96:e8:59:07:
                    b9:01:2b:6c:55:fb:6d:94:80:b7:48:2c:98:7b:1d:
                    00:bd:ae:24:b7:b3:df:5d:ee:7b:78:a2:d4:39:c9:
                    50:64:55:59:52:0c:10:90:0c:fa:24:3a:7d:04:b3:
                    42:7b:ff:33:a5:4f:a0:33:f3:a3:36:06:12:ac:e5:
                    7f:a1:4f:21:73:74:55:e0:76:91:8d:56:95:6d:96:
                    b3:8d:05:03:b2:b1:6c:10:38:9a:9c:a3:8e:64:3e:
                    50:2b:28:33:7c:c3:3f:5d:72:7c:78:23:5d:64:f8:
                    ea:38:ba:76:31:cf:59:72:8c:fd:ef:8a:2d:fc:0f:
                    1c:c1:49:18:ae:00:6c:59:9a:08:05:3d:09:17:5c:
                    6e:4c:d5:6d:38:39:3b:e0:ff:a9:ac:e0:94:4e:75:
                    aa:04:3f:d4:02:cb:14:5c:1e:10:8a:98:5b:f2:3d:
                    d9:65:df:e5:73:af:b6:94:b1:8e:2e:9b:55:4c:0b:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:E3:28:7A:17:BD:F0:F1:8C:A2:2B:E4:52:52:43:E5:85:A5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e53ebd-ae57-38ab-8699-107c43b74d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b1:22:9d:c1:15:da:24:54:ca:7f:4d:5f:08:6e:f3:c7:39:
         89:94:f6:4c:2b:85:19:e4:e5:0c:20:57:dd:29:09:3d:6a:22:
         20:03:51:79:7a:24:b8:12:79:49:7c:c4:a4:e7:67:65:78:4d:
         f8:03:ff:29:0c:0c:d6:24:f2:1b:42:55:6c:db:bb:e3:6d:fd:
         df:bd:62:14:a0:a6:37:80:f1:14:21:f4:4d:32:eb:d1:70:61:
         04:41:15:50:4a:42:ed:60:96:1c:fe:ff:b7:3e:15:f7:41:50:
         6d:a1:4c:4d:57:d5:64:fa:34:37:82:b2:7a:d5:18:f3:20:77:
         f9:d6:6b:82:d8:90:ed:95:b5:5d:ea:2c:18:75:f9:05:db:2b:
         ec:81:e1:5b:7b:8b:88:fd:16:ae:0b:0f:62:46:8a:fd:04:10:
         23:19:7b:52:45:ec:db:86:a6:00:49:32:c1:d2:90:2a:76:1f:
         ff:32:be:39:b3:7d:c2:c3:8f:64:20:e6:0f:08:b9:ef:8f:b1:
         38:34:26:d8:13:86:45:7e:16:2f:b0:48:c6:69:b4:29:ca:8d:
         ad:ff:0b:75:df:f9:40:dc:f0:38:a6:6b:7c:2f:33:94:f8:b0:
         87:e4:02:ff:0b:78:14:9b:61:42:c1:92:54:ab:a9:67:0c:98:
         74:77:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:56 2025 by rpki-client