Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14cc5b06-053d-31d2-923f-c096b811b837.roa
File:                     14cc5b06-053d-31d2-923f-c096b811b837.roa (raw, json)
Hash identifier:          Q+YktJNcJTQ7p4P2FZozg9Yrli1zHTPZ9+INQXxno0g=
Subject key identifier:   47:8B:22:60:C9:39:EC:7C:A1:EB:34:9E:D0:16:BF:88:51:7B:3C:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5815C2638651F40511CA700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14cc5b06-053d-31d2-923f-c096b811b837.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:5c:26:38:65:1f:40:51:1c:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=fd2ba66b-ea6e-4e68-a116-9f3b44b7022b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:79:9b:f5:a7:b0:6c:f9:1f:f4:39:dd:49:
                    bf:12:50:09:a9:24:37:0f:6a:05:e9:63:ae:f1:f1:
                    56:d0:73:fe:d3:59:21:7d:c2:70:9d:9c:d2:df:91:
                    59:37:17:2b:fe:f7:6a:d6:7e:26:df:2b:35:db:2f:
                    53:ce:bc:3e:c5:2a:01:98:10:58:cb:3e:e8:f9:91:
                    8b:d5:27:d0:7a:99:7c:b1:5f:e8:03:1c:6b:d3:7b:
                    0e:ca:9c:16:3c:33:1e:c8:ad:20:5c:77:87:18:0e:
                    cb:3e:28:fb:96:1c:47:25:b4:5f:64:3f:dd:90:dd:
                    29:09:15:95:be:01:13:f7:76:83:cf:c4:a5:b8:22:
                    22:f8:fb:9a:1b:53:5e:02:07:d0:2d:0c:bb:b0:50:
                    ff:07:9f:06:92:75:4f:e5:20:d6:df:9d:af:c7:89:
                    0b:48:89:50:36:83:ba:81:64:4f:54:b3:1d:9b:6f:
                    58:57:b0:49:49:3b:36:b1:69:6e:cf:b1:2b:74:6b:
                    89:ac:41:f7:bd:cb:b1:8e:6f:a6:a5:82:32:34:05:
                    ba:64:58:4b:b8:2f:03:b4:ca:a4:c7:21:26:2a:52:
                    11:a2:23:b7:42:0e:41:a2:8b:a1:ca:ec:56:78:82:
                    4a:06:ba:e9:68:c1:4b:75:3d:0b:ba:1e:96:c2:0b:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8B:22:60:C9:39:EC:7C:A1:EB:34:9E:D0:16:BF:88:51:7B:3C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14cc5b06-053d-31d2-923f-c096b811b837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:15:9b:4c:bd:6b:96:6e:21:d2:8e:90:ec:4b:b8:75:45:
         21:78:bd:50:8d:2c:4c:98:b8:97:31:c4:6d:ad:2e:64:4c:6f:
         22:67:9c:00:0f:d9:75:b4:95:2d:25:33:b8:0a:17:cf:4d:ee:
         b4:35:79:f7:45:e5:1d:34:df:f9:7a:70:ed:4b:81:a7:c6:30:
         45:89:d2:42:c8:e7:7a:b3:54:09:c8:a9:3f:19:e9:ca:e1:83:
         12:cd:80:7d:0e:bb:2a:7f:55:d4:e6:33:24:cc:42:6c:79:6c:
         ae:10:d8:12:5f:3a:31:a1:6c:ec:0d:b8:22:59:3c:16:1f:1f:
         48:36:58:4e:2d:bd:f6:9c:6f:ed:1f:d8:26:7f:a5:c4:cc:a9:
         23:0a:3f:b5:c7:b4:48:61:ae:ad:ad:0a:2b:83:ba:9d:ee:99:
         5e:d3:05:d5:fb:96:98:e8:f6:8c:97:33:9e:3f:31:de:93:c6:
         85:43:09:89:c0:45:e4:db:35:5c:38:dc:e2:fd:bb:28:23:c2:
         30:8d:e4:b0:2b:cc:1f:4c:8c:70:cf:3f:7e:3c:59:29:60:2c:
         6c:1f:58:3d:9d:66:c5:86:25:1b:d2:54:38:ab:82:fd:d9:5b:
         54:e0:8c:f2:94:7b:f3:76:58:6c:72:8f:71:07:7e:df:ea:25:
         ee:27:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:09 2025 by rpki-client