Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9189460-df98-323b-a30c-8eef306a65fe.roa
File:                     e9189460-df98-323b-a30c-8eef306a65fe.roa (raw, json)
Hash identifier:          wMXWMFFpMgINHBCRxY32m8/cq3/7c/0whhjAoVKm3Cg=
Subject key identifier:   E8:90:4D:D1:83:45:19:17:0E:C3:48:52:82:51:A8:DE:FF:60:72:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58153C7D6E98F051C997800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9189460-df98-323b-a30c-8eef306a65fe.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:53:c7:d6:e9:8f:05:1c:99:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9ab43a0b-5151-48df-8688-5e1a3ff37f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:65:8f:69:34:0b:c6:36:b9:b4:71:37:6b:
                    c1:2b:de:9a:27:de:af:0d:a5:70:51:20:64:83:fa:
                    fc:a7:e6:8b:50:fa:bb:46:71:b6:fb:ac:4c:6d:48:
                    25:d3:d5:c6:df:52:bf:f6:b2:e5:f2:3a:fe:d1:a5:
                    41:8a:ed:ac:1f:25:59:83:4f:9d:82:72:41:c7:7b:
                    e2:5f:cc:b9:cb:6d:0b:e8:f8:05:5b:0b:ab:5a:eb:
                    6f:bc:f2:23:46:73:78:a5:43:1d:a0:9e:36:22:17:
                    1a:f4:d5:ae:63:86:1b:b4:d7:e8:8f:90:02:72:73:
                    91:22:0e:4d:a0:19:33:8a:e2:05:32:8c:a8:50:68:
                    37:e7:5e:b4:16:54:c6:81:12:c9:fd:76:1d:19:cc:
                    a9:a7:e6:36:b7:e8:06:a9:2f:0b:69:ce:9c:25:30:
                    54:3e:1a:ee:b9:ea:74:41:d7:06:f8:78:31:7f:ec:
                    06:9d:f1:e1:72:36:83:d3:b7:72:25:aa:ca:1c:35:
                    23:61:94:ef:8f:f0:67:f6:88:06:0f:99:67:6b:d7:
                    04:a3:08:0a:a9:1f:5a:e3:47:f9:30:40:24:18:15:
                    5b:9c:a3:a3:77:99:aa:3c:5f:49:dc:dc:9c:21:60:
                    38:6c:f6:e1:c9:2b:9f:04:19:17:c4:6d:db:c6:38:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:4D:D1:83:45:19:17:0E:C3:48:52:82:51:A8:DE:FF:60:72:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9189460-df98-323b-a30c-8eef306a65fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:23:08:a3:e7:4e:bf:3c:63:a4:5e:a4:cd:01:ed:c0:bc:
         20:3a:60:92:92:02:33:38:4e:67:12:28:f8:d3:01:7c:a6:25:
         e5:11:68:ae:4f:2d:6a:cc:6e:2a:6f:f7:39:53:c9:4b:68:93:
         63:db:de:52:52:08:97:f3:79:6c:68:0a:59:ad:67:85:ac:9e:
         e7:fb:2e:58:5b:e3:fe:24:0c:f8:62:ae:7c:46:14:da:d0:0f:
         55:3e:86:1e:18:52:f1:7c:0d:8a:fd:b2:cd:3b:92:e2:f6:4f:
         28:8d:5e:41:f6:22:6d:fa:32:f3:d2:de:f5:9a:2c:75:47:7c:
         77:23:1f:0c:c6:d1:34:5d:12:31:42:ef:44:b5:d5:fc:b4:df:
         c0:ac:77:5c:08:8b:c3:9a:15:94:cf:4b:30:62:d9:99:fe:1a:
         fd:26:b0:3f:bb:88:35:00:d9:99:19:a0:ad:60:bf:f1:3b:4f:
         1c:8b:47:71:1d:1d:32:65:e7:87:bc:b6:08:be:92:88:b0:3a:
         39:66:fe:fb:c8:07:5c:a5:37:c2:b7:27:da:b8:fb:66:af:a7:
         76:a0:9a:26:f7:6f:b1:2c:c0:86:e8:aa:b3:34:6a:3f:86:c0:
         a8:d7:9d:84:02:28:6d:a4:74:c6:e8:11:b1:96:2f:fe:a5:36:
         52:75:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:13:47 2025 by rpki-client