Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2607dd9-349d-39af-84db-ca4ac305e00e.roa
File:                     e2607dd9-349d-39af-84db-ca4ac305e00e.roa (raw, json)
Hash identifier:          gQKRLuS0wdeVhk4AmSqbyHwRww32bETYotKELFODnmw=
Subject key identifier:   C3:F5:68:ED:D8:EB:59:B8:22:E9:05:89:A0:5F:9A:5C:04:6F:D2:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E3F20C7E04748C3FB580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2607dd9-349d-39af-84db-ca4ac305e00e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e3:f2:0c:7e:04:74:8c:3f:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5d21b8e7-5763-4ac0-b4f7-c1f2c3315612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b7:d9:9c:98:0d:02:f8:94:19:e2:2a:e8:99:
                    7c:e0:32:ac:fa:dd:e1:be:7c:45:40:63:6b:60:4c:
                    76:73:f6:5e:16:e7:fe:9e:2a:e3:00:34:f2:2e:c8:
                    de:51:87:ae:9b:58:41:bf:a5:30:81:45:09:5b:a7:
                    6b:01:ee:da:fe:3f:85:81:a0:19:6d:59:fb:dc:35:
                    70:03:99:cf:93:35:58:f7:38:b9:82:83:0a:f6:4e:
                    5e:2c:6b:6a:b1:b2:b9:30:d2:0a:e7:7e:ac:3f:5f:
                    69:02:a2:00:5d:1f:8d:ec:f7:73:63:fd:ca:23:a8:
                    24:61:6f:5c:71:e0:20:20:3c:e2:71:83:58:5f:d6:
                    3a:98:05:4d:b5:64:b7:5a:e7:41:69:03:14:1d:aa:
                    34:48:1a:53:18:54:33:51:32:ea:41:d0:e5:3f:4d:
                    33:0a:cd:25:a5:bb:9c:1c:ce:a5:f5:2f:f8:dc:f0:
                    92:da:73:66:71:a5:91:62:1e:1f:17:4d:e7:b7:b6:
                    70:8d:4a:89:b5:93:a1:e5:1a:a7:91:31:06:20:71:
                    e6:a0:32:d2:3c:f9:b6:36:cc:e8:45:91:cb:07:df:
                    fc:93:19:d6:b9:f9:28:be:7b:b0:c0:d6:ec:a9:02:
                    86:bd:11:52:17:e7:05:00:f8:f5:a0:30:1e:8b:dc:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:68:ED:D8:EB:59:B8:22:E9:05:89:A0:5F:9A:5C:04:6F:D2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2607dd9-349d-39af-84db-ca4ac305e00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:51:95:37:16:6c:53:46:22:c1:0d:86:42:13:e6:a2:fe:a8:
         f4:e2:97:0f:70:be:2a:0f:36:38:14:70:3e:66:30:48:e7:5b:
         e5:94:71:67:3a:1f:6d:b5:e5:3e:0d:76:65:5e:13:12:60:41:
         ed:14:b4:b8:47:40:b4:42:23:a8:4c:01:17:dc:e8:41:4f:fb:
         b7:17:4f:b8:12:26:4e:67:05:6a:26:b9:8e:97:c3:f5:5d:1f:
         b1:44:58:a9:26:74:dc:12:c7:c9:e0:fd:2b:0e:72:93:9e:a6:
         2c:01:5d:54:38:45:1c:40:73:18:28:2b:84:d9:58:0c:d4:7c:
         5a:63:1b:92:54:69:1d:1e:30:be:91:99:0a:ca:be:d8:df:45:
         c1:57:65:b5:73:f6:fc:f1:dd:6c:06:93:17:52:c5:16:32:48:
         b8:3b:f5:e7:a5:11:07:35:b4:49:b1:f4:f1:12:7f:86:4a:df:
         70:39:5a:dd:ca:04:f8:0b:31:da:6a:5a:0f:8d:d1:3a:dd:5a:
         53:8c:da:3b:8b:62:3f:02:4e:5d:2e:dd:3b:ab:1b:e3:54:79:
         7c:04:89:7d:95:90:b4:e5:96:c3:eb:d7:36:db:d8:90:cf:4d:
         f1:b0:3d:e5:26:dc:00:29:72:2c:cb:2d:26:f4:f1:fd:f1:0e:
         85:44:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:29 2025 by rpki-client