Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa
File:                     cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa (raw, json)
Hash identifier:          qO/IjfGsRcICIgBvKB3DcLQonf2ZhTb3XU03lWAf8xU=
Subject key identifier:   FE:6A:31:16:05:EC:76:2D:F2:69:D2:C8:8A:ED:D7:64:C0:4C:79:ED
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58158B5DA2FC2828C4FB100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:58:b5:da:2f:c2:82:8c:4f:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6b78ee06-855f-4a13-a9fe-ec1060db550d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:86:8c:e9:2e:d8:b5:d8:7d:7e:61:77:60:
                    aa:20:c4:8c:4e:35:ca:c3:fc:82:61:28:78:cd:53:
                    78:e3:ad:fa:2a:c6:19:92:de:66:7c:05:d5:91:91:
                    11:75:41:2c:89:1b:74:9d:b9:2b:ab:75:ee:09:ea:
                    2d:90:87:25:4a:71:54:9b:cd:d8:be:c3:8f:16:b8:
                    63:04:02:44:f0:c6:ea:fe:1f:99:81:1a:4e:42:5d:
                    90:14:75:5a:e8:67:05:64:1a:db:08:b3:b3:d9:6d:
                    a4:f4:c4:d0:93:4e:cd:66:74:ba:8d:a7:81:68:57:
                    bb:73:c4:6b:d5:f2:23:31:46:0c:63:8c:34:1b:60:
                    05:4e:47:78:47:94:dc:38:8d:74:96:96:30:65:75:
                    6a:73:ba:5d:28:e0:ae:18:b9:8e:d8:a0:8f:22:88:
                    41:2d:55:b6:fd:db:5d:cd:03:98:d0:87:ae:4f:62:
                    85:a8:b5:b4:7c:46:2f:94:d5:8a:13:c6:ff:ec:ec:
                    1c:f8:54:a1:1a:84:37:fd:c3:76:11:de:8e:ed:95:
                    8d:0e:f1:95:58:17:a0:37:37:23:b1:2b:74:e9:42:
                    14:62:16:b9:6e:06:71:eb:a6:50:7f:54:ca:fe:e3:
                    71:50:47:2a:b9:29:e7:02:9b:7d:7e:70:1c:08:a1:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6A:31:16:05:EC:76:2D:F2:69:D2:C8:8A:ED:D7:64:C0:4C:79:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfaeeac7-0a92-34aa-b05a-04d8cfb258e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:17:48:09:70:14:91:1e:8b:f2:be:a7:6c:ee:5c:e0:38:4f:
         1b:d8:85:d4:1f:4a:99:4d:b7:a7:bf:a8:bc:30:bc:37:75:b6:
         ad:a7:64:7f:0a:9c:7f:21:38:51:74:da:f6:d4:f0:fb:af:13:
         64:be:38:d0:25:49:7b:42:46:81:06:3c:80:5f:0b:f8:11:68:
         10:61:89:14:a2:49:ce:f2:54:a5:58:35:c4:ae:00:2a:83:95:
         2f:3f:6f:c2:fc:b5:a4:ff:9d:90:72:69:e4:ca:b1:fd:87:0e:
         7a:6f:62:c4:0e:a1:7e:f8:d0:e3:02:53:ea:23:1a:c2:03:56:
         83:b1:63:d9:4e:63:06:e4:67:72:b2:f1:10:d6:19:5b:b7:60:
         fa:5c:34:65:ab:cf:5c:73:b6:d9:a9:14:53:aa:1c:32:ca:41:
         76:d0:bf:68:a5:30:a3:50:15:80:dd:ef:45:02:3e:aa:09:74:
         1b:87:a2:17:e4:6d:fe:4c:6b:dd:20:41:e5:d4:fc:c7:e5:bf:
         0a:3e:68:42:e5:4c:f3:be:07:21:77:ef:c5:86:99:8e:d2:d1:
         bd:21:ec:bb:eb:95:2e:73:05:2d:80:80:c5:8b:d2:4b:24:c6:
         3c:e7:b5:ba:84:22:7a:00:03:de:da:c5:d0:e6:af:c6:9f:4b:
         13:fc:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:21 2025 by rpki-client