Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9e75b3-2ec3-3b18-b286-3a2d20f4ede8.roa
File:                     8d9e75b3-2ec3-3b18-b286-3a2d20f4ede8.roa (raw, json)
Hash identifier:          yaqCWfPOUJuWqtExxUvLfRpS7D3cEe2oDjGXOs87f2M=
Subject key identifier:   6C:76:25:92:B7:6C:67:FA:4B:DF:3C:16:87:DF:E8:15:1D:D6:33:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E60072118D103CC0FC40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9e75b3-2ec3-3b18-b286-3a2d20f4ede8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e6:00:72:11:8d:10:3c:c0:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d9a8b6b1-9357-487b-b779-db74fbe30bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:0d:d1:1d:60:39:c9:9f:a6:64:30:bf:c6:
                    9a:e6:a3:a7:39:26:ac:fb:60:00:55:fd:78:db:99:
                    04:66:f5:eb:23:9c:c2:ce:8c:80:85:2e:ed:64:71:
                    cb:8a:ef:da:f2:4a:78:23:8e:a2:b4:27:c4:16:11:
                    cf:e6:f1:17:3a:92:8b:57:f9:b5:c5:f2:39:18:9d:
                    ae:5d:b0:b7:87:3c:35:67:d7:a0:6b:49:17:87:2d:
                    2c:17:08:63:7d:d9:e7:b9:a4:30:4d:c2:8f:a1:06:
                    c0:0d:86:83:79:4a:a2:a5:bb:34:95:8c:5e:a0:35:
                    46:ad:d2:1b:c3:42:c0:aa:b1:b0:d8:ca:f9:3d:b3:
                    21:cf:74:57:f6:bc:47:68:c9:9e:ae:4a:cb:d7:30:
                    52:68:e7:74:ae:d8:f7:57:06:5c:06:c8:62:be:54:
                    d0:88:a3:c4:ec:04:3f:ed:c3:3c:a7:02:79:2f:1e:
                    ca:19:81:42:9c:0f:d4:52:a0:6b:89:47:ff:e2:a2:
                    b3:a3:76:5c:18:58:bc:06:09:23:03:44:fa:87:b3:
                    71:9f:67:bf:3b:70:fb:80:92:27:70:91:9e:e6:5f:
                    06:8b:f2:b8:aa:bc:15:e0:94:2f:e8:2c:f5:fa:d3:
                    35:45:63:ce:3e:c4:9c:00:dc:2c:a9:56:35:bf:04:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:76:25:92:B7:6C:67:FA:4B:DF:3C:16:87:DF:E8:15:1D:D6:33:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9e75b3-2ec3-3b18-b286-3a2d20f4ede8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:43:fb:6d:8d:44:0a:e8:28:00:92:fb:6b:3f:71:5e:b6:93:
         9b:3a:5c:2b:18:82:58:c6:37:ea:b6:98:5e:bc:84:9a:80:76:
         d0:aa:78:cc:59:64:16:94:6b:5a:92:b5:34:9a:e8:d8:b8:91:
         e6:67:ae:7b:ad:36:7b:85:9a:38:33:8a:fc:f1:b0:14:1c:ba:
         a1:84:33:ca:61:49:79:62:07:c9:7d:e0:51:f7:bd:69:73:e0:
         32:76:b0:e2:10:27:d3:ed:e6:6d:66:2b:f7:9e:34:90:3c:f2:
         2b:08:8c:30:18:9c:2c:c9:54:ba:d8:52:61:bb:e0:35:82:20:
         65:b6:3b:74:6e:58:43:b4:6d:92:fb:bb:e3:9a:a6:b7:96:3a:
         b1:96:60:59:3f:78:bf:9c:9f:e8:4a:19:5c:16:ee:84:52:5e:
         00:95:bf:16:a0:f8:30:7a:e4:5f:df:c2:33:24:9c:6c:f3:36:
         4e:b6:d1:0b:96:2c:a8:10:e5:ca:fa:65:9d:e8:9d:31:62:0a:
         78:2e:1f:21:56:e0:14:f6:af:da:62:a0:70:65:77:44:d3:dd:
         c0:6e:4e:2c:a5:87:93:2b:2e:25:24:58:7a:40:cf:64:23:26:
         2f:79:d3:00:c0:cc:5f:7a:47:63:fb:4b:c9:7f:64:9c:23:7b:
         58:83:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:53 2025 by rpki-client