Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa
File:                     5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa (raw, json)
Hash identifier:          eP+AuqN/Gi27fCV1gxr8CPBOOJVv78NNYJX7W72UGDQ=
Subject key identifier:   9B:57:7E:4F:6F:50:77:8A:D0:4B:09:B4:9B:E9:D9:DA:1C:1A:C3:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E43663882EF15D776E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e4:36:63:88:2e:f1:5d:77:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e170198b-cc65-4a06-8efb-3bba65320ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:fc:f6:81:51:49:11:8a:6a:fd:6e:32:8c:
                    f7:ca:a6:37:be:44:16:ee:e6:f2:fb:6f:7d:75:04:
                    a6:dd:8c:b9:d1:49:6a:22:2a:81:cf:8f:0f:0d:19:
                    18:8e:4d:09:e7:0e:f7:0e:38:70:a5:e5:d2:9a:06:
                    96:bb:36:2e:51:7b:44:91:cc:36:7a:d3:37:c7:69:
                    4b:2b:ca:13:a0:a9:c5:96:9a:c7:a4:79:d9:8e:b6:
                    ff:09:33:5b:6a:f1:7f:ce:c5:04:58:c9:e0:2d:8e:
                    ed:40:2f:f0:40:63:5e:b0:4d:13:2a:71:91:7f:41:
                    2b:66:9b:c5:9a:b4:84:6e:61:5a:4c:49:38:23:da:
                    4c:fe:1f:94:69:67:68:78:72:20:b2:ab:3c:b4:10:
                    1d:d2:c9:85:5d:5a:f8:fb:fb:76:29:cd:7b:ba:eb:
                    9c:1f:c2:57:48:93:13:8b:d0:69:08:87:49:1f:db:
                    01:ad:54:14:64:26:88:61:4e:eb:94:e9:74:5d:ef:
                    41:7b:85:ee:17:c1:b2:37:5f:df:e8:df:6e:d2:0d:
                    99:ba:98:cd:c2:c0:b2:2d:f8:61:dd:0d:d1:44:b4:
                    c3:56:92:78:37:b2:e2:42:0d:a5:cb:18:07:63:7b:
                    56:86:d3:24:f3:f7:a5:d4:32:71:4f:2c:12:98:9b:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:57:7E:4F:6F:50:77:8A:D0:4B:09:B4:9B:E9:D9:DA:1C:1A:C3:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:ae:74:64:37:3c:65:38:4a:ba:dd:49:f9:03:ca:6f:1c:
         b4:78:aa:59:e0:d6:57:55:65:b7:a5:8e:d9:46:df:73:70:69:
         4f:fd:24:80:ca:82:20:da:20:a8:69:57:66:af:a6:e3:5f:1d:
         db:b2:5f:d1:bb:f4:a2:01:b3:38:e9:a1:63:f6:75:4b:88:3e:
         43:38:6a:82:08:ab:d9:ea:c7:22:ca:65:57:bb:c8:97:08:a8:
         b6:35:84:fd:4c:be:7f:38:df:14:68:fd:c4:8a:ec:2f:c2:d9:
         ad:e9:92:84:82:4c:e6:c7:fc:a0:58:1a:b1:00:ea:04:5e:a1:
         65:6c:99:16:8e:5b:26:f4:67:d1:ad:77:b3:fa:e1:4d:d0:7e:
         ce:46:fa:89:da:2c:4e:d2:1d:91:7d:e4:57:8c:1b:47:be:db:
         e1:81:cc:d0:db:a2:3c:01:d8:fa:e0:03:fb:a0:c8:80:62:ca:
         3d:bc:a0:e3:44:4d:88:9a:84:f7:4e:19:0d:24:e5:b9:31:16:
         e9:f6:12:26:3e:5a:f6:cf:4a:74:95:60:aa:bb:15:c9:cf:ae:
         18:fa:b9:d6:7e:bb:8f:08:a8:d7:1a:98:82:1f:1c:5e:bf:15:
         b8:a7:50:56:6f:9a:69:55:4e:65:bc:39:d7:aa:0f:da:6f:a5:
         7d:83:15:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeQ2Y4gu8V13bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTE3MDE5OGItY2M2NS00YTA2LThlZmItM2JiYTY1MzIwYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/v89oFRSRGKav1uMoz3yqY3vkQW7uby+299
dQSm3Yy50UlqIiqBz48PDRkYjk0J5w73DjhwpeXSmgaWuzYuUXtEkcw2etM3x2lL
K8oToKnFlprHpHnZjrb/CTNbavF/zsUEWMngLY7tQC/wQGNesE0TKnGRf0ErZpvF
mrSEbmFaTEk4I9pM/h+UaWdoeHIgsqs8tBAd0smFXVr4+/t2Kc17uuucH8JXSJMT
i9BpCIdJH9sBrVQUZCaIYU7rlOl0Xe9Be4XuF8GyN1/f6N9u0g2ZupjNwsCyLfhh
3Q3RRLTDVpJ4N7LiQg2lyxgHY3tWhtMk8/el1DJxTywSmJsX6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtXfk9vUHeK0EsJtJvp2docGsOUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWQ3YThiMjgtMWM1Yy0z
NTEwLWI3NGUtNjNlODFmNjlmNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfurnRkNzxlOEq63Un5A8pvHLR4qlng1ldVZbeljtlG33NwaU/9JIDK
giDaIKhpV2avpuNfHduyX9G79KIBszjpoWP2dUuIPkM4aoIIq9nqxyLKZVe7yJcI
qLY1hP1Mvn843xRo/cSK7C/C2a3pkoSCTObH/KBYGrEA6gReoWVsmRaOWyb0Z9Gt
d7P64U3Qfs5G+onaLE7SHZF95FeMG0e+2+GBzNDbojwB2PrgA/ugyIBiyj28oONE
TYiahPdOGQ0k5bkxFun2EiY+WvbPSnSVYKq7FcnPrhj6udZ+u48IqNcamIIfHF6/
FbinUFZvmmlVTmW8OdeqD9pvpX2DFcI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:14 2025 by rpki-client