Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75496b95-93a4-3c6e-af48-1728080bc8eb.roa
File:                     75496b95-93a4-3c6e-af48-1728080bc8eb.roa (raw, json)
Hash identifier:          p2hX97RHCzDf90UzKfxFhI1w+oR12jKlkCsySIua7gk=
Subject key identifier:   48:D9:84:A6:A9:7C:4C:65:A9:F1:E9:4C:1D:61:1E:71:D6:93:17:9A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581EADEC2D56C377776E200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75496b95-93a4-3c6e-af48-1728080bc8eb.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ea:de:c2:d5:6c:37:77:76:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f6b1075e-abf9-486b-b587-3a6a1f6f9fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:b9:44:3d:64:ce:52:2e:e4:01:fc:ec:ed:
                    e8:52:96:ce:ac:c2:79:52:2a:44:46:07:c1:57:c5:
                    c5:e2:69:54:9c:c4:f0:b1:f9:3e:2a:fc:c5:ac:b1:
                    ea:af:58:1f:85:17:25:ae:00:3d:df:3a:2e:a1:b1:
                    3e:f0:3f:87:3d:ea:04:25:41:ff:90:8d:53:31:c8:
                    31:70:d0:90:7c:02:3a:ff:32:da:47:1e:64:7a:2b:
                    30:77:b4:31:91:8f:82:34:d0:d4:04:3a:c7:d7:fc:
                    8d:6f:e8:b8:03:13:4c:09:77:56:1d:19:2e:e3:78:
                    b1:80:c9:c5:98:be:13:40:98:1d:ea:c6:19:32:68:
                    6f:05:a5:42:8f:3e:ed:ec:76:b6:fa:32:73:dd:c8:
                    df:a6:82:c9:18:49:6b:4c:db:4f:ca:43:a6:07:6a:
                    21:ac:f4:1b:63:2d:d9:a2:9b:59:4f:99:df:06:f5:
                    f0:35:52:f0:34:6e:0e:79:29:9a:9e:69:3d:c1:0d:
                    eb:0a:d7:29:87:c8:7e:9d:58:c5:e4:bf:51:e9:98:
                    11:bf:6b:73:51:92:63:9a:0a:09:8f:c1:88:6f:5f:
                    f9:ed:58:07:f5:ab:e9:de:ec:1e:ef:ea:5e:6b:31:
                    54:13:2f:3f:77:18:c3:e8:04:1e:42:22:d2:ca:e4:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D9:84:A6:A9:7C:4C:65:A9:F1:E9:4C:1D:61:1E:71:D6:93:17:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75496b95-93a4-3c6e-af48-1728080bc8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ed:2d:a2:fe:91:ee:23:70:49:54:05:99:ef:37:17:4b:fb:
         c3:ce:fd:4a:98:30:18:1a:dc:13:f8:95:b5:12:9f:87:0e:64:
         83:d7:b7:85:33:a8:79:a4:60:ee:12:ed:63:5b:e5:6a:e7:4f:
         43:03:ff:f2:5b:16:8c:08:31:6e:fe:49:e2:09:de:c8:f5:d7:
         a1:04:ee:bb:5f:ca:e5:ff:53:11:cb:29:f5:3d:19:8f:07:d4:
         21:2a:bf:a2:b8:f5:87:66:21:71:b2:f5:ad:96:b4:a7:d2:ef:
         19:9d:cd:53:ae:1f:14:a0:87:34:fe:ed:58:96:82:48:a0:74:
         b0:56:b5:0e:e9:17:75:96:c4:02:2e:86:a1:0f:fb:11:1c:64:
         40:e6:a2:f3:13:80:9e:55:60:b5:25:58:17:44:20:9e:ba:0c:
         db:e7:d3:85:d2:ef:b4:4a:e2:32:d1:1f:1f:d3:6c:f0:42:18:
         30:fd:98:ce:fa:a9:7a:e2:99:3c:f8:a9:2d:79:8b:be:19:24:
         d5:23:ba:c6:d0:de:1a:07:28:a1:d3:fc:93:94:84:ed:f0:25:
         2f:d5:13:4e:0e:ee:b0:c9:9d:a1:30:0e:7f:d0:eb:5a:22:db:
         7d:da:76:57:ac:97:77:6a:bc:2f:86:e3:79:69:07:e2:bc:05:
         43:8f:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:37 2025 by rpki-client