Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7e834b3-08d1-3b74-98fb-c98d3ab5e20e.roa
File:                     b7e834b3-08d1-3b74-98fb-c98d3ab5e20e.roa (raw, json)
Hash identifier:          kiHnUqQTf2+J4HycxtT59RjM4pvbnkfpS5YBsrSkEAI=
Subject key identifier:   61:F1:58:3F:EE:4C:74:5E:90:E9:A9:7B:2C:1A:B2:2D:EA:29:FA:91
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E7F77FB68C27E62D03A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7e834b3-08d1-3b74-98fb-c98d3ab5e20e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e7:f7:7f:b6:8c:27:e6:2d:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=471b5e3b-c0fb-42f7-bf87-f776d04b11fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:f5:78:84:c8:4d:20:e5:0f:53:14:d3:32:
                    09:a7:fe:3d:6c:da:6e:df:ff:19:94:52:8b:2d:1a:
                    9d:18:36:a2:24:cc:73:e3:cd:59:fe:02:a1:af:11:
                    a6:2d:81:bf:b4:3e:0e:ec:f0:83:ca:40:c5:74:be:
                    e8:67:10:f4:18:ff:2e:88:44:c9:35:76:be:c2:a4:
                    1c:f3:84:b6:c0:2b:e3:b7:b8:ac:7b:f0:b0:3a:f2:
                    ed:bf:06:8b:40:20:d6:73:86:55:f9:bb:62:c8:e5:
                    7c:c4:78:e5:78:b8:40:78:17:fb:56:9f:29:51:2d:
                    d9:38:b6:ad:7a:8b:59:45:f9:28:c1:26:77:14:4e:
                    b3:45:e7:cd:b7:cd:d4:6d:0d:60:68:3f:8b:a3:68:
                    9c:16:98:7f:93:80:d6:ca:1e:ed:33:89:b8:b5:74:
                    30:94:5f:1f:c2:32:01:76:57:44:8f:4a:e0:09:c4:
                    01:8d:ae:3a:67:ce:a2:8b:55:72:95:c5:eb:3c:e7:
                    e4:ba:9c:97:77:15:c3:59:e7:ff:30:fc:cb:39:38:
                    f2:28:72:93:c0:9f:71:a5:1d:f1:f0:d7:2f:49:9c:
                    52:fb:9f:74:5b:d5:b6:50:d5:6b:58:96:14:26:02:
                    39:b8:5e:19:7f:d9:dc:e7:bc:d1:28:20:56:4d:7d:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F1:58:3F:EE:4C:74:5E:90:E9:A9:7B:2C:1A:B2:2D:EA:29:FA:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7e834b3-08d1-3b74-98fb-c98d3ab5e20e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:af:cf:9a:6e:dd:8a:78:69:81:e6:4c:de:ea:aa:1a:47:83:
         5e:4e:49:bc:16:c6:59:1d:08:4a:e8:db:c6:4a:53:1d:cb:94:
         f0:fa:c0:3e:0c:cf:38:ce:8e:83:50:86:7e:bd:4c:f1:71:37:
         36:32:05:f4:ff:e1:32:36:50:c4:cb:ae:15:d3:60:db:1f:94:
         2a:72:80:40:ce:61:98:93:cd:37:57:37:40:ad:48:69:22:01:
         92:69:2a:53:66:8e:0c:07:a3:0b:e2:e8:b8:23:1e:97:d1:39:
         29:12:b5:8d:c1:45:be:86:fa:cc:09:b4:aa:73:ef:92:54:32:
         bb:86:b3:c2:fe:85:de:8e:23:4a:73:a7:90:c4:6c:41:0c:80:
         d0:42:72:fb:a2:49:9a:a3:b3:0e:b4:44:25:d0:10:52:6f:5e:
         27:b5:86:ac:2b:e7:51:0d:b5:b3:0d:03:d1:c9:9b:03:84:0e:
         4f:b3:47:12:db:24:f0:6e:36:c3:2e:02:24:0d:dd:27:b7:8e:
         02:6a:28:74:66:ff:56:7b:09:43:a8:f6:ee:98:14:82:0a:0a:
         4b:06:88:3c:05:d0:08:47:76:5f:a1:76:6d:58:8a:19:a7:1b:
         be:6b:bb:3d:5a:bf:3d:0b:ae:05:65:42:7d:d1:ad:f5:49:17:
         51:7b:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:57 2025 by rpki-client