Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/011fadf1-5cbe-3f83-8a65-69ce5d84e864.roa
File:                     011fadf1-5cbe-3f83-8a65-69ce5d84e864.roa (raw, json)
Hash identifier:          bhS66k8hr/bKeTaGxdJwcwVf/j6QfPQsZw4Sh7jIM1k=
Subject key identifier:   38:11:29:B0:D6:A5:C4:C4:11:4B:F0:CF:EC:A7:66:62:CA:E5:36:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA52357AEA87239EFD32C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/011fadf1-5cbe-3f83-8a65-69ce5d84e864.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     40306
IP address blocks:        184.62.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:52:35:7a:ea:87:23:9e:fd:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a9f33d5a-9e99-46e6-9f90-b6bc348d2ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:76:2e:6a:e5:e0:6c:16:de:88:15:d2:44:
                    2b:75:6b:c2:38:2d:40:c0:87:a0:cb:af:f4:f1:14:
                    25:27:ce:b2:19:d3:ac:e5:b8:d5:06:05:3d:d4:3b:
                    e8:28:7b:cf:f6:10:8c:6f:9a:8d:b2:6f:bd:48:92:
                    68:5b:f6:99:04:19:35:0c:da:bb:59:79:63:e6:e1:
                    1c:cf:33:24:e1:5e:6f:d0:de:3b:06:ea:db:f7:fd:
                    5e:41:44:72:b2:e8:46:3a:1c:e6:7a:29:1e:da:9b:
                    5f:26:8e:67:23:00:0b:9a:e1:55:ad:d2:6b:22:81:
                    fe:26:95:6b:77:e3:7c:a9:79:9e:0e:bc:9f:10:44:
                    eb:b4:27:43:66:be:61:1a:79:e5:66:04:f6:ba:a9:
                    cf:3d:1a:73:e7:fe:f4:7e:ff:d7:fb:0e:c1:99:05:
                    ca:fe:f7:c8:b1:b8:b9:bc:b5:a6:33:1b:2d:0c:f7:
                    00:4e:c8:c3:b1:66:1e:af:dc:22:b5:d1:8c:47:68:
                    39:08:e9:4f:12:b0:be:05:2b:e2:1d:78:1b:3e:d6:
                    b5:65:9f:97:bf:3a:49:a4:91:6a:8f:4d:02:2e:6a:
                    dc:04:1a:2c:67:9b:4e:a1:e3:bd:d2:00:7d:4a:a3:
                    cd:e4:e0:f1:55:5e:10:80:18:e5:cc:f4:00:53:f4:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:11:29:B0:D6:A5:C4:C4:11:4B:F0:CF:EC:A7:66:62:CA:E5:36:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/011fadf1-5cbe-3f83-8a65-69ce5d84e864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:2b:67:14:e9:51:84:15:da:77:14:e1:f6:99:4b:43:b6:a8:
         13:0d:a2:ae:6e:dd:25:0f:29:b6:41:ad:7c:a2:0b:57:a1:a9:
         57:dd:43:24:41:5b:5d:51:3a:a9:d0:b2:c3:71:20:3f:7b:8d:
         8d:89:7c:76:23:9f:40:46:b3:e0:ac:c1:d0:66:e2:81:02:3a:
         26:e0:d8:6a:e4:8c:78:16:b0:4b:cf:4f:56:d6:01:6f:60:c1:
         01:0e:b1:33:60:b7:bf:51:60:ac:0b:ce:2d:ce:10:be:c0:ab:
         05:34:ac:1b:9d:bc:c2:9b:d9:ff:8c:25:03:3e:56:34:8b:97:
         29:cd:15:65:01:70:c7:85:8a:25:47:a5:ba:b2:db:a0:17:f2:
         89:8a:87:0e:0e:ee:98:cc:d1:45:e6:8d:34:50:f2:4f:4b:03:
         db:59:83:72:be:6f:aa:d7:0c:85:3f:b7:8c:bf:1f:19:5b:68:
         dd:fe:23:4c:5f:f4:c7:9e:5d:14:90:5d:9f:fc:ec:0c:a9:9c:
         76:65:e3:f4:00:36:0e:67:84:c7:5c:0e:00:92:64:52:3c:62:
         76:ec:11:d1:ab:20:fa:c0:77:13:15:34:26:e2:f1:8b:29:cd:
         6c:35:0d:1f:55:61:84:ac:a8:5a:f7:2e:d5:f2:f9:8b:e6:ba:
         87:a2:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:13 2025 by rpki-client