Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa
File:                     a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa (raw, json)
Hash identifier:          ngP2WnTIcZzfhRmnmU+uTQMfFfts9JZusYjmfYzDYkc=
Subject key identifier:   8C:7D:F0:C3:56:5D:84:CF:1B:CB:21:B0:0E:8D:FD:84:C0:AC:29:2C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5815B372790D142E6067C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:5b:37:27:90:d1:42:e6:06:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=71c76040-e725-43c7-a505-373e4be07b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:a7:a9:eb:fa:79:0d:7f:ee:d2:d3:4c:7e:
                    c8:47:49:dc:e8:85:e7:92:9e:17:52:e7:49:ea:74:
                    01:ac:98:93:df:fe:24:35:dd:f1:73:0c:af:5d:fa:
                    57:1c:b8:34:02:64:9c:a9:82:5c:ff:53:33:83:f2:
                    b1:6d:8c:b1:1e:50:05:eb:f1:18:c1:30:5e:d4:54:
                    91:0b:98:48:95:da:90:03:39:16:c9:65:b9:af:b8:
                    cc:7b:49:c7:c4:0d:66:11:8b:1f:54:fb:97:4d:9d:
                    75:6c:ac:d9:bc:b6:7b:f7:1f:db:57:53:e8:79:4d:
                    50:da:8b:7f:66:b0:b4:46:c8:59:ed:02:e2:ca:46:
                    24:2d:e9:a0:89:a3:23:66:a1:95:03:49:6c:c7:74:
                    18:78:08:19:5b:e9:60:7d:65:93:9e:d3:0e:43:fd:
                    3d:54:b5:78:ab:fd:ab:93:91:4b:ec:ed:8d:a4:bb:
                    6f:b2:a0:8a:2e:90:5e:c3:9b:28:4f:37:16:df:4a:
                    9d:bd:0a:ca:23:81:86:8f:86:07:62:f5:07:35:56:
                    0a:b3:b4:62:10:af:61:52:6c:aa:1a:7a:89:2d:f7:
                    4d:b4:16:0a:23:34:61:72:56:3b:87:91:63:e5:a7:
                    2b:53:16:1f:2c:51:26:60:5c:0c:8d:e6:13:d3:5e:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7D:F0:C3:56:5D:84:CF:1B:CB:21:B0:0E:8D:FD:84:C0:AC:29:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0328fef-11c1-3b45-884f-11dcd1e4d8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1d:b5:d2:e0:fc:e9:f1:8a:af:fc:53:a5:98:08:ad:c8:8c:
         43:e0:7f:68:7c:47:8a:75:b5:82:62:94:e5:09:c3:2c:64:97:
         36:2f:b7:e4:32:1c:e2:3c:c9:9b:78:ee:07:b2:47:15:ff:ff:
         a7:42:e4:fb:aa:51:2f:4a:aa:68:d1:30:1f:16:8a:54:f2:91:
         f8:e1:30:0b:57:e8:97:10:3a:22:26:69:f5:d0:06:19:25:cb:
         60:20:b9:7b:92:f1:27:ae:71:49:af:f6:94:e8:c4:19:7e:d4:
         bc:56:9a:f8:10:dd:b1:26:3a:2c:b2:cb:cb:e5:39:50:b2:d2:
         4e:93:1c:a4:c2:59:07:7a:a5:4c:b5:c3:3f:9e:8f:9e:ee:ca:
         3a:db:f5:d3:fa:93:05:ba:9c:ba:26:6e:38:7a:a7:be:b0:99:
         27:26:16:c6:7b:d7:45:2b:99:91:87:30:a4:57:86:da:6e:24:
         e7:29:23:83:e6:11:04:af:88:16:d1:6a:1e:eb:a0:bb:b4:24:
         88:da:d1:05:73:1b:7f:61:92:a9:26:e2:9f:e9:74:c2:95:ab:
         9b:f9:8b:44:f9:c9:d9:e3:bb:bc:b2:63:48:40:8f:78:f4:c8:
         06:75:f4:7b:70:89:5c:bc:4e:38:35:85:16:8a:05:56:e6:8c:
         7a:9b:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:59 2025 by rpki-client