Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa
File:                     16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa (raw, json)
Hash identifier:          YX6pw2S14FnL0OLmva9zmatLCKaMuwYspzT0I4sp51Y=
Subject key identifier:   54:4A:50:E5:8E:03:19:6C:47:40:66:62:19:C9:A0:3D:18:A2:9B:0B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58152D9D2E214F327CE71A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:52:d9:d2:e2:14:f3:27:ce:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=fb36ec38-c00d-4072-9437-0d4c6210c2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4c:4b:72:b5:aa:34:87:38:c1:6a:ab:d5:39:
                    43:95:57:5b:30:bd:17:13:1f:f9:f2:03:89:ef:38:
                    a6:4a:cc:36:a5:63:7c:d7:b3:d1:82:b5:fd:53:10:
                    98:43:80:f9:8b:45:c0:e5:d7:f4:90:95:83:7a:e3:
                    02:3b:b9:55:a7:ab:14:e7:c0:b7:8d:6d:69:58:d6:
                    e7:8a:66:1f:1b:65:34:7e:55:c6:90:14:1e:68:d6:
                    e0:c1:4c:de:56:48:be:a1:fe:f7:be:d9:29:42:ec:
                    f2:64:8e:3e:cb:7d:54:8f:6d:53:50:65:f7:c9:6f:
                    86:79:d8:8c:7f:6d:5d:92:aa:7d:3e:13:ea:c6:70:
                    9e:9a:29:f1:49:44:4a:76:f8:3c:a4:19:80:7c:58:
                    f1:b6:35:d3:10:29:05:cb:9f:1e:6a:35:2d:bf:79:
                    23:5b:5d:9d:1b:98:b8:7d:31:f2:97:dd:ef:a6:60:
                    7c:99:0f:ba:a4:f3:cc:49:59:56:98:b6:ca:72:fd:
                    36:5e:a7:cb:3d:c0:88:ac:57:c3:86:6a:3e:f7:15:
                    2b:92:7c:22:bd:3a:f1:f2:45:fe:c2:f1:fe:04:d7:
                    1c:df:83:f5:e9:99:a3:2b:d8:62:87:38:bd:12:37:
                    80:92:b9:a0:9b:5f:59:81:ad:fe:bd:ea:ba:cc:c7:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:50:E5:8E:03:19:6C:47:40:66:62:19:C9:A0:3D:18:A2:9B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:3d:b7:00:b3:59:66:5c:b9:01:fc:ae:08:de:f6:3b:43:bb:
         e5:4d:16:b5:85:e6:c9:7c:85:23:b4:1e:32:52:5d:21:1f:55:
         65:66:da:70:e1:e8:34:1d:eb:19:ac:34:95:bf:c3:8a:31:63:
         44:e9:f5:d2:f8:d6:06:98:ff:c6:aa:de:91:46:d7:81:f5:b5:
         57:f5:94:a5:dc:86:81:47:cb:a9:8b:03:24:bc:07:2d:c1:de:
         ae:cb:5d:01:ae:0a:b1:44:8d:5c:92:c6:52:4f:17:4d:31:5e:
         44:3f:d0:1b:31:83:da:ed:1c:fc:64:c5:6e:fd:05:8a:d7:ac:
         68:cd:fa:bc:7e:23:0c:23:34:a2:21:d3:48:e7:60:ca:ba:13:
         7c:23:12:18:b8:b6:7a:66:ec:63:49:53:82:03:a4:f6:56:db:
         ef:43:e2:7d:f4:03:49:dc:48:d7:0f:dd:7a:cb:2d:83:17:79:
         15:12:e4:b1:ae:9e:dd:ce:c2:89:66:25:66:91:50:34:e3:38:
         56:fa:da:3e:23:5b:1e:80:58:39:be:07:33:34:d8:f0:2f:47:
         2e:8f:21:4d:9e:9d:e7:24:ef:94:ec:cf:d0:b1:23:81:14:e6:
         26:d4:40:6e:b1:df:42:4a:8c:d2:de:b2:f4:67:d9:6b:b3:b5:
         fe:2f:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:57:27 2025 by rpki-client