Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa
File:                     fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa (raw, json)
Hash identifier:          CbyFtopA/Za3SsnhB2cQCDefzIMfeNi0+U/qPNy0LiQ=
Subject key identifier:   5E:24:F6:59:23:8C:39:49:4C:15:2F:4D:E2:72:F4:51:51:97:55:89
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5815BCDD6E39234264B3F40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:5b:cd:d6:e3:92:34:26:4b:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7117f40f-1cb8-4dc2-a9c7-72aa42169fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:84:1d:e0:a8:a8:ba:8e:cb:46:74:26:e9:
                    90:d7:58:4c:af:6c:a9:9b:2a:d8:86:e7:05:6e:72:
                    e2:96:da:96:9b:f9:a4:c0:ad:e9:1b:cf:35:64:52:
                    9a:3c:cc:0e:29:26:c6:25:3d:d4:76:0c:de:24:35:
                    4d:06:5e:04:44:4d:b2:67:04:82:7e:92:87:68:4f:
                    3b:dd:33:05:eb:51:6f:dd:aa:ec:32:fd:af:fa:00:
                    04:4f:e7:ee:54:e2:31:90:1b:f1:f5:35:14:83:db:
                    3c:5f:c4:6b:0e:33:a3:57:de:91:e9:ce:89:ed:00:
                    fb:56:77:c8:92:59:c1:6b:78:8b:2b:96:47:5f:4e:
                    31:06:ef:22:ac:6e:06:c0:97:35:75:8f:88:8e:3c:
                    14:6f:0e:42:99:4f:e7:d7:64:51:1e:b3:7b:06:fc:
                    9d:d5:e4:16:2b:b1:bc:ef:b2:2b:0c:7d:78:65:56:
                    0a:e1:b9:2c:46:1a:f9:27:2b:d7:eb:a7:a0:6c:db:
                    59:a3:1c:a3:a2:7e:45:5b:eb:b4:16:5e:46:68:a7:
                    03:21:43:86:0b:08:73:87:c5:bc:94:d9:3a:05:8e:
                    7d:e1:c3:94:6c:09:20:af:b2:36:bc:38:4e:c6:e6:
                    4c:52:30:2d:02:2e:2a:06:8d:5c:55:0f:3f:32:f1:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:24:F6:59:23:8C:39:49:4C:15:2F:4D:E2:72:F4:51:51:97:55:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:16:56:f1:f2:06:1a:be:46:f9:4b:0d:dc:5d:62:53:b0:f9:
         6d:76:31:21:28:ab:ad:85:c9:74:d1:06:62:3b:cc:2d:22:1a:
         c8:46:18:ef:f4:17:ff:3d:13:0b:75:d2:9f:6f:b4:79:25:f3:
         2b:de:f6:41:c6:be:da:68:4b:79:a1:e6:b9:d6:1b:d4:ae:c9:
         a1:bd:91:0c:5d:53:59:7f:af:10:8e:bc:0b:54:7b:ba:5b:d1:
         dd:29:3e:e5:65:04:31:67:cb:0a:8f:69:cd:ab:cc:1f:0b:84:
         d7:86:19:2f:a1:42:f7:01:1b:96:28:95:2c:c4:c4:49:5e:1a:
         16:b8:e0:95:b2:54:ca:8f:fb:2f:92:b1:7b:6f:18:7e:5e:f4:
         30:08:e8:79:9f:4c:aa:99:72:d2:fc:f6:ba:79:8e:76:ae:90:
         75:44:13:ec:1c:d3:62:18:51:86:7d:26:cd:e2:a3:ce:bc:b4:
         9b:5b:98:9a:88:57:4c:eb:31:02:ef:0e:44:23:76:62:41:57:
         23:b5:ec:75:d0:40:28:57:30:af:57:dd:3e:08:ea:01:47:54:
         3c:1c:05:9f:de:e6:f9:ea:dd:c3:44:23:65:05:ee:b2:96:e7:
         08:1e:bb:76:6c:2b:5c:9e:80:5f:55:f3:42:55:c9:5b:c5:a2:
         4d:a1:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:40 2025 by rpki-client