Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ccfedf5-5004-3268-aa7b-30b75a9eec27.roa
File:                     2ccfedf5-5004-3268-aa7b-30b75a9eec27.roa (raw, json)
Hash identifier:          xcvdMHKD0XBP1n2YnsYQrCkYQxjoRos4JVZAzGWXl5s=
Subject key identifier:   87:1E:4C:0A:26:63:21:2B:04:EA:64:E8:0B:58:9D:69:D5:E9:BC:AC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E923D69BCB704B269CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ccfedf5-5004-3268-aa7b-30b75a9eec27.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e9:23:d6:9b:cb:70:4b:26:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e15a0209-baab-4132-a53f-11a4a994b69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c3:62:32:ba:72:60:8b:66:ab:65:f4:cb:25:
                    95:9a:49:7e:2c:e4:83:91:55:a7:ac:e0:2f:63:ed:
                    e7:b4:1f:c9:c3:06:44:51:30:9a:01:a2:6b:0a:de:
                    ce:99:26:a0:60:a6:a1:80:81:c6:78:14:79:aa:dc:
                    22:15:df:0f:04:da:26:3b:3b:f8:94:a5:82:1e:1f:
                    5c:ad:51:be:d7:b8:11:87:8b:4e:ff:a8:08:7d:c3:
                    0a:61:82:d8:7b:b5:c6:89:e1:b8:29:5c:a2:94:63:
                    bf:0d:f8:7c:03:d3:a3:1b:b4:26:e3:74:3d:46:9a:
                    b6:57:18:c2:7d:33:76:e2:b2:07:33:ef:63:c5:ff:
                    4c:db:d8:c7:44:10:7e:9e:81:5b:59:c7:76:89:b3:
                    df:91:e7:b1:47:b7:19:9f:45:74:21:9b:6b:1e:5d:
                    bc:00:bb:3b:f0:bf:00:d4:eb:f3:1d:60:f9:00:01:
                    c5:95:f8:f6:43:66:e1:51:d1:9c:bd:9e:62:f3:06:
                    e7:3d:98:50:b3:ff:4b:62:22:40:08:a9:6a:79:33:
                    d1:ae:98:ab:cf:7b:68:a8:b9:a6:32:08:a3:52:23:
                    d1:0f:c1:da:b6:05:7f:87:21:3c:7c:0b:9a:00:c8:
                    8e:c0:7b:3a:52:f2:a5:1c:fd:4c:5d:37:54:1d:f1:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:4C:0A:26:63:21:2B:04:EA:64:E8:0B:58:9D:69:D5:E9:BC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ccfedf5-5004-3268-aa7b-30b75a9eec27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:58:73:2d:84:ab:2b:93:88:c9:02:19:ed:38:89:eb:f9:
         64:b6:22:36:33:7e:1d:11:f7:54:02:a9:af:08:7e:09:4a:bb:
         9f:08:45:4e:61:e6:80:a1:9f:31:34:b1:a2:9b:4d:c0:dd:f7:
         77:13:4f:db:46:69:ab:83:86:71:d4:1b:33:88:aa:ec:7e:21:
         3f:98:73:39:d8:fd:9d:fd:e5:28:a3:d2:5b:6d:03:bc:8b:d1:
         18:f3:bd:d2:57:7d:72:0c:9c:3f:cc:9f:08:26:a1:cd:1b:0d:
         dc:5b:84:d3:a7:74:cd:e1:aa:76:ba:8e:5a:fb:de:c5:3e:97:
         42:59:88:73:58:f4:63:48:75:0f:70:e4:50:d3:c6:45:9f:c1:
         39:4f:dd:f6:87:c8:d6:9d:0a:62:f0:1c:e5:5d:de:84:97:3b:
         71:f6:9e:10:53:ee:11:f8:64:0e:87:6f:d3:51:44:a2:82:3e:
         75:23:97:2d:3f:b9:a8:72:c6:6a:3c:8d:f6:18:4b:82:ad:33:
         09:0d:e5:81:93:09:35:bf:0a:96:ea:48:60:db:7e:f8:6a:d9:
         49:01:91:f1:b4:e0:cd:b0:a8:e1:87:9b:be:62:a6:8a:94:38:
         c2:6a:19:5a:d7:24:5c:96:4e:98:35:e8:b8:af:ba:a7:ea:30:
         27:4c:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:11:09 2025 by rpki-client