Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa
File:                     85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa (raw, json)
Hash identifier:          Nrb1PaGs2fJEFsaSw9krNiKq7EVqJWtKNw4OfB8wMvQ=
Subject key identifier:   8C:EB:81:AF:4B:73:4D:01:A7:10:FF:6E:0E:BB:80:E9:4B:B2:8E:40
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58151B96CC4A0425FEBC550
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:51:b9:6c:c4:a0:42:5f:eb:c5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=1170c1f8-0dce-4152-91e4-58e42750c70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:92:7e:c1:69:30:ab:80:a7:3f:f7:5b:a0:
                    0f:c0:6f:58:28:b2:6b:ee:d6:1b:77:dd:39:23:fe:
                    13:fe:38:46:1d:1d:93:0b:58:87:1a:64:4e:38:83:
                    91:cf:b2:34:2a:97:03:3a:7c:49:f0:00:b2:14:e9:
                    5b:d2:e3:5f:76:ed:f4:bb:f1:74:85:81:68:e6:b5:
                    8c:0a:80:01:d3:6d:83:80:6c:e3:1b:25:35:00:7d:
                    e0:b6:6b:07:1e:9c:bb:f6:f9:c3:82:5c:29:c6:ec:
                    38:68:14:3c:70:1b:6b:7b:a9:9a:83:60:84:8f:da:
                    c9:0d:ab:38:ea:b7:dc:a2:74:07:27:77:5b:4d:90:
                    4b:c2:bb:60:74:9f:6d:b0:64:6c:14:69:7a:a0:43:
                    ba:05:31:94:a1:87:ff:da:62:d9:d9:ea:ce:88:91:
                    e4:4e:68:38:cc:3d:c0:06:16:7d:58:90:96:69:bb:
                    f3:e7:d6:24:5b:83:cf:02:fd:20:d8:3f:b5:63:f2:
                    eb:8c:a0:83:20:b3:4f:74:84:5d:f0:0b:92:98:09:
                    5f:cf:2a:28:9c:58:e5:b5:20:95:be:a9:44:71:7d:
                    4a:ed:1a:29:a1:45:30:fd:5c:7a:d5:77:01:cd:26:
                    61:35:ea:0d:f5:c5:41:d8:15:45:19:12:b6:e0:68:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EB:81:AF:4B:73:4D:01:A7:10:FF:6E:0E:BB:80:E9:4B:B2:8E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:de:84:af:6f:d9:d3:25:32:a9:61:83:7d:e6:e1:d3:1a:
         d2:07:5f:b7:9a:14:c6:f8:21:d5:bd:46:05:a8:65:63:8d:2a:
         97:ad:f1:f0:28:73:dd:cf:ea:7a:f2:15:79:39:c2:d9:60:cd:
         7c:5e:91:d6:fb:0a:e3:a7:37:39:b5:8c:9d:0b:1d:ba:ef:eb:
         27:5d:b7:2c:4e:b7:3f:e2:39:f4:e7:4d:36:16:36:75:d7:57:
         28:15:9e:d2:b8:9f:08:16:cd:86:45:3c:db:59:96:a2:8c:e8:
         37:a5:a5:e9:de:4b:20:d3:c8:06:5c:43:87:d2:f1:b3:aa:b8:
         c1:b6:ca:e0:27:22:ad:32:97:a3:13:0f:74:43:a3:d9:d6:03:
         bc:2e:17:87:53:af:3b:02:c7:90:14:d1:08:59:12:af:c9:54:
         b2:58:56:be:01:59:40:d4:f0:b2:3e:b8:7d:2b:68:37:75:9d:
         09:3b:32:6b:34:97:73:d0:67:ce:22:33:b4:c1:bb:34:dd:d0:
         7b:4f:10:90:c0:4b:e9:a1:63:01:78:3c:cb:64:ee:91:02:11:
         06:f4:04:ff:dd:39:49:0c:ef:cc:be:ab:32:51:f7:9f:dd:0d:
         f0:04:af:43:2e:ad:8f:11:b7:2b:e0:f9:1b:4c:7d:07:5a:da:
         98:a3:43:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVG5bMSgQl/rxVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTE3MGMxZjgtMGRjZS00MTUyLTkxZTQtNThlNDI3NTBjNzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EqSfsFpMKuApz/3W6APwG9YKLJr7tYbd905
I/4T/jhGHR2TC1iHGmROOIORz7I0KpcDOnxJ8ACyFOlb0uNfdu30u/F0hYFo5rWM
CoAB022DgGzjGyU1AH3gtmsHHpy79vnDglwpxuw4aBQ8cBtre6mag2CEj9rJDas4
6rfconQHJ3dbTZBLwrtgdJ9tsGRsFGl6oEO6BTGUoYf/2mLZ2erOiJHkTmg4zD3A
BhZ9WJCWabvz59YkW4PPAv0g2D+1Y/LrjKCDILNPdIRd8AuSmAlfzyoonFjltSCV
vqlEcX1K7RopoUUw/Vx61XcBzSZhNeoN9cVB2BVFGRK24GiHCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzrga9Lc00BpxD/bg67gOlLso5AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVlZGZiNWItMjQ4ZS0z
NWVmLWEzZjQtOWY4OGYwZDlhNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDn3oSvb9nTJTKpYYN95uHTGtIHX7eaFMb4IdW9RgWoZWONKpet8fAo
c93P6nryFXk5wtlgzXxekdb7CuOnNzm1jJ0LHbrv6yddtyxOtz/iOfTnTTYWNnXX
VygVntK4nwgWzYZFPNtZlqKM6DelpeneSyDTyAZcQ4fS8bOquMG2yuAnIq0yl6MT
D3RDo9nWA7wuF4dTrzsCx5AU0QhZEq/JVLJYVr4BWUDU8LI+uH0raDd1nQk7Mms0
l3PQZ84iM7TBuzTd0HtPEJDAS+mhYwF4PMtk7pECEQb0BP/dOUkM78y+qzJR95/d
DfAEr0MurY8Rtyvg+RtMfQda2pijQwM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:13:43 2025 by rpki-client