Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74da1442-5851-32fb-b1f0-a4872489e5c4.roa
File:                     74da1442-5851-32fb-b1f0-a4872489e5c4.roa (raw, json)
Hash identifier:          wH67qTsCj8E5C3f+EGYmGydgQm9uyoTzWChdAQmc3qI=
Subject key identifier:   1E:61:24:A3:75:C2:33:7A:14:67:AA:7E:6C:99:4E:42:E4:7E:F8:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581EC051ECB11F7C61F5B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74da1442-5851-32fb-b1f0-a4872489e5c4.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ec:05:1e:cb:11:f7:c6:1f:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7994bc5e-771c-4e3f-9d64-7130e68db179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:43:96:07:e0:1b:25:28:4b:a4:14:8b:7b:
                    37:51:37:18:45:67:3b:6b:e3:48:b9:9d:57:98:a1:
                    fb:12:3f:d3:39:10:3d:b2:79:dc:9c:8f:b9:75:10:
                    e7:97:de:91:41:7d:0c:2f:30:12:e4:96:e1:ee:48:
                    32:54:1d:83:4a:36:c6:56:db:22:c2:7a:0e:2c:00:
                    4b:87:9f:6e:83:94:59:25:1f:60:53:92:26:b7:93:
                    9b:88:2b:41:4f:ea:cb:e8:30:7c:df:4b:63:bd:10:
                    93:f2:12:73:04:e7:7a:75:be:d6:37:a2:76:1d:d9:
                    d2:81:82:8e:80:04:ed:bc:fe:bb:69:9a:fe:1a:1a:
                    84:be:d2:db:60:e3:6a:08:3e:7b:74:d4:2c:af:d0:
                    fa:7d:84:13:b6:0a:d3:76:b4:c4:90:0d:d6:79:a1:
                    7e:a2:f7:5d:29:b5:9c:0f:2d:3a:ab:35:e7:db:f3:
                    d3:2d:2c:74:2a:af:28:f0:ad:37:e7:3e:23:53:3d:
                    2d:4f:70:ae:ef:57:39:bb:c8:ee:04:61:a1:d1:2b:
                    e1:d3:ac:58:02:e5:d0:15:b1:bc:6b:18:b2:4a:d1:
                    40:00:5b:85:29:0e:ca:cd:9c:7a:1f:53:87:c3:c5:
                    e3:de:3c:a7:51:bc:2c:0d:c4:32:fe:51:04:4e:96:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:61:24:A3:75:C2:33:7A:14:67:AA:7E:6C:99:4E:42:E4:7E:F8:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74da1442-5851-32fb-b1f0-a4872489e5c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:f2:92:5c:67:6b:71:ab:c7:d8:5f:de:cf:9d:36:44:e6:
         0b:ea:71:b8:30:ff:0b:a4:72:d4:6b:ae:94:41:fa:2a:0f:e9:
         73:39:b3:0a:6f:64:5e:36:95:ce:89:3a:22:db:8f:e6:71:b6:
         62:bb:a0:a5:37:ad:55:87:b9:f3:12:47:6c:52:f4:44:72:98:
         cd:1a:94:6e:4c:be:9e:0b:e3:1b:9e:82:74:ad:87:c0:9e:27:
         d0:95:23:50:71:27:c5:b8:bf:0f:8b:b1:c9:81:92:6c:64:98:
         16:58:6c:f7:fe:a7:c8:25:f1:e4:b5:e0:6f:c8:07:85:90:3c:
         a1:06:ee:8a:8c:f9:bf:27:a3:cb:d0:ee:12:97:6a:3a:a1:b0:
         c0:78:cb:66:9c:f1:14:c7:14:f6:5c:ba:19:6d:1c:78:80:20:
         30:04:47:66:4d:43:d0:27:2d:53:76:c2:b2:84:e9:11:be:f4:
         c0:89:da:21:80:47:e4:d4:56:b0:bc:3f:d7:77:67:91:67:9a:
         65:05:36:8e:9d:29:d4:a9:b5:e8:1c:37:41:aa:de:7e:11:1e:
         47:87:03:44:02:bb:46:32:98:d6:e4:0e:ed:08:41:81:08:ed:
         3f:e6:ad:95:bc:d8:22:98:de:f7:06:8e:41:95:20:6d:9c:ad:
         ea:e7:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:59 2025 by rpki-client