Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/184b015a-e9ac-3def-8098-0fc7ac388573.roa
File:                     184b015a-e9ac-3def-8098-0fc7ac388573.roa (raw, json)
Hash identifier:          ZCfeHD7L8tfbisGM0iYPuUluQaCnRb3YuFvo8rLY4SE=
Subject key identifier:   27:31:7C:0D:9B:7E:C8:99:D1:68:97:8B:86:5E:36:E6:E8:D8:DF:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5815828DF623B548A08F500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/184b015a-e9ac-3def-8098-0fc7ac388573.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:58:28:df:62:3b:54:8a:08:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=38a41c3a-9d33-440f-9107-d88823ca0265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:99:dd:1c:ce:b5:56:e8:77:eb:24:21:f9:
                    47:77:2c:6a:5a:31:95:ad:c4:0e:7a:73:04:5e:1b:
                    1a:26:5f:e6:bc:0b:f9:51:7b:af:e0:f1:17:44:f8:
                    63:87:c6:1e:f6:a3:19:ba:0f:ea:a8:67:d0:09:be:
                    80:c6:87:e8:a1:5f:4c:fd:68:55:11:9c:2b:19:3d:
                    67:51:e8:84:be:83:54:41:cb:98:44:19:07:70:93:
                    be:55:ca:0f:7c:dd:8c:b4:4f:04:56:c4:17:94:b9:
                    88:88:7a:3f:a5:21:65:3b:12:d4:26:2d:d5:0e:66:
                    81:5d:4c:1d:4e:1e:48:5c:cc:a9:3a:2e:4f:cd:d1:
                    b6:1d:55:31:53:61:63:f4:72:e2:dc:ef:cf:de:f1:
                    e5:0c:5d:6a:28:45:f4:02:64:88:4b:dc:65:d3:6c:
                    00:71:8e:96:23:ce:be:f0:5b:0f:9d:6d:7f:f9:07:
                    28:f7:41:b9:a4:b8:d8:99:bf:70:ed:ae:d8:28:84:
                    65:ba:79:5e:9e:7b:2d:90:fb:56:e9:00:60:6f:76:
                    71:cc:bb:61:d8:df:a1:9a:ae:ba:9c:d4:86:aa:5c:
                    bc:85:22:3a:3d:bc:dd:e9:4b:95:7e:52:ad:7f:6d:
                    28:30:f7:9e:98:38:e3:ea:ce:b7:af:27:c8:af:a5:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:31:7C:0D:9B:7E:C8:99:D1:68:97:8B:86:5E:36:E6:E8:D8:DF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/184b015a-e9ac-3def-8098-0fc7ac388573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:6c:d4:be:f9:e8:61:ab:54:86:35:92:33:03:3e:9b:e5:
         82:c2:81:c4:0b:38:7c:7f:fb:88:01:4f:99:7a:08:6c:3e:cb:
         bf:39:6c:af:db:a2:25:32:7d:26:8c:f2:1b:f7:47:36:cb:e4:
         62:23:48:10:01:ca:36:b1:02:be:cd:88:46:8c:1c:fd:20:05:
         ca:ac:69:60:16:10:67:00:94:d4:ea:2c:35:29:bf:a6:5b:60:
         4b:c6:e1:c0:fe:26:1b:0e:0b:e2:38:92:81:e9:e4:a8:44:9e:
         ba:22:3f:fe:29:f1:9b:40:8d:1e:87:16:f6:f9:05:6f:89:49:
         4b:a2:da:5d:b7:15:0f:c1:a9:d8:f6:08:26:bd:92:0a:51:51:
         b3:6f:00:11:2f:dc:27:68:63:e0:d8:5a:52:97:a5:50:75:b5:
         4b:20:92:34:70:86:77:72:07:d0:b5:6e:17:69:4c:da:66:31:
         df:5b:ec:ac:90:0a:65:e4:24:bf:11:cd:65:e7:a8:89:e8:94:
         4e:16:5f:fc:68:19:15:03:6d:89:87:18:aa:65:6d:65:11:18:
         3e:3f:9f:ed:a0:6b:90:db:26:07:38:59:17:eb:af:f5:58:78:
         af:5b:65:a4:66:03:a5:fa:a6:f7:33:a7:e7:f3:0d:0b:81:49:
         24:5b:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:27 2025 by rpki-client