Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a68a29-b53b-31cf-8574-db1102c618d2.roa
File:                     72a68a29-b53b-31cf-8574-db1102c618d2.roa (raw, json)
Hash identifier:          8bfEQYDMuItJd3uP+AE+8ypnFE4STlEFlYMsVPc2BtM=
Subject key identifier:   3E:87:82:DC:C5:BB:A8:ED:F9:0A:13:F0:95:D6:D3:9A:F6:71:81:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E32A97AD0FD0B1DC5900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a68a29-b53b-31cf-8574-db1102c618d2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e3:2a:97:ad:0f:d0:b1:dc:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=108c074a-ce58-4c16-bbb4-bd19c7949d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:c9:2e:91:57:7d:40:df:99:cd:ee:4e:5f:
                    78:88:68:85:50:72:71:ca:72:f3:9e:f4:bd:fd:02:
                    29:0e:aa:52:a9:49:11:ac:46:2b:39:b6:2e:d0:f4:
                    b1:db:61:7d:8a:1a:59:e8:f3:74:8c:77:ce:4a:27:
                    97:4e:b0:e6:13:fd:11:54:da:c3:d8:27:b8:1e:40:
                    9f:5c:3a:b9:e5:fe:a2:9e:5c:0d:e8:37:b1:d8:08:
                    bc:e6:4b:28:d6:aa:ea:24:6b:a2:0b:a9:c3:c7:3f:
                    33:16:88:98:9b:cb:83:24:11:9f:6f:e8:35:90:8f:
                    c5:90:87:c2:60:d7:b5:fd:6c:10:08:e8:7f:87:1c:
                    2e:ad:ba:91:08:3e:a0:9b:6a:bc:18:93:b5:c2:70:
                    86:54:09:3b:71:d5:9f:bd:72:c4:8b:8d:72:1f:4b:
                    26:53:03:2f:6d:17:4f:c3:89:81:ba:ee:a4:a9:3a:
                    b5:ad:39:05:dd:21:7a:fc:e1:18:59:9a:1e:c8:b8:
                    12:39:8f:d9:b3:4e:82:61:8d:b7:ee:9e:7d:cd:c1:
                    97:64:65:2d:db:18:9c:15:f1:d6:ea:9b:cf:74:02:
                    b7:96:1a:32:72:97:ad:a0:cb:3c:01:b6:1b:b2:08:
                    01:e6:da:5c:20:08:27:b4:44:c4:19:2e:bb:44:fb:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:87:82:DC:C5:BB:A8:ED:F9:0A:13:F0:95:D6:D3:9A:F6:71:81:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a68a29-b53b-31cf-8574-db1102c618d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:06:76:fa:9a:6c:23:c4:44:7b:09:fd:9e:ed:98:97:0c:13:
         be:c9:a3:e1:4e:07:24:a7:81:3d:ed:cf:fa:24:0d:e2:96:77:
         e8:43:ab:4f:64:e6:46:af:ed:1e:7e:14:c4:c1:f4:2c:3e:7b:
         6c:06:82:c2:f4:bc:c4:0d:e5:3b:8d:00:9a:2f:20:dc:99:1d:
         61:bd:82:2f:e9:45:24:20:77:7c:37:d6:8d:06:57:c1:1d:bf:
         02:17:24:83:a1:c3:5d:5f:3f:d0:2e:78:c1:f2:22:7f:de:86:
         c3:b3:dc:bf:16:3a:1a:b4:ed:f2:ba:40:b9:54:71:7d:2e:41:
         b3:cb:21:40:dc:89:ab:06:0a:66:23:49:f9:7b:05:c8:0c:94:
         d5:34:c7:04:d2:b1:61:a1:bb:03:ba:3f:85:64:78:1a:0e:14:
         94:93:88:eb:99:c1:80:7d:8c:16:0f:b6:e9:3f:09:f6:d1:46:
         bb:8a:1c:36:42:7b:f0:7e:90:ed:6e:44:62:06:28:29:dc:87:
         ea:1f:a1:58:d4:26:84:61:17:36:06:24:53:bd:05:f5:59:63:
         cd:26:23:82:be:2c:a8:61:3f:b2:e3:4f:7e:b0:42:99:b0:f7:
         05:cc:1a:df:b0:41:2c:63:66:bf:cb:06:14:72:79:3a:be:ec:
         17:29:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:16 2025 by rpki-client