Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dcca031-0312-3129-a1a3-7816cf1ecff8.roa
File:                     0dcca031-0312-3129-a1a3-7816cf1ecff8.roa (raw, json)
Hash identifier:          G3yiEQY6oHi+QfTCdwfUycl6Wqw5BHwHRdYGEQ/prWE=
Subject key identifier:   21:E7:34:14:0F:79:6F:33:2E:68:E4:1F:2A:57:20:3C:85:AE:8B:91
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB501E1D8A8D1B534E2CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dcca031-0312-3129-a1a3-7816cf1ecff8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:50:1e:1d:8a:8d:1b:53:4e:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1187f7a7-dbb3-4fd1-a841-e6d29f4ec12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:3b:6b:e3:e1:5d:ee:7e:36:78:dd:2b:c3:
                    9a:fe:36:62:e7:12:44:b3:d7:f5:20:40:02:71:89:
                    db:fe:ea:e8:d1:a4:53:0f:c3:3d:6a:51:c4:36:ae:
                    da:5d:17:98:99:54:f4:e6:05:f1:9f:f7:f4:8c:ec:
                    35:52:c4:4e:cf:9a:ab:c3:c5:64:16:10:19:71:a4:
                    ee:7a:fd:a8:c1:24:87:11:4c:07:ca:b0:73:99:7e:
                    36:65:00:ca:07:24:ee:49:8e:3d:b6:6d:78:1e:db:
                    3b:33:d0:ed:12:a4:be:66:00:0e:c4:46:4e:aa:81:
                    53:f3:a0:29:4b:d0:91:c3:f9:4b:28:46:20:92:78:
                    40:4e:99:50:fb:58:6e:9f:74:fe:f8:c1:04:b3:f4:
                    22:87:27:70:e1:e5:f2:db:c4:99:47:fa:59:bd:69:
                    92:56:48:ad:f6:e8:97:2a:54:bd:4b:ba:cd:4d:26:
                    c3:93:b4:31:c2:7a:57:a7:d9:a3:c5:72:26:1e:26:
                    26:69:29:cd:96:f9:d5:8a:34:9d:53:61:bc:93:c2:
                    d9:cc:56:71:33:af:ed:69:aa:ee:9b:bb:bf:a7:72:
                    09:d1:ac:1f:a2:9d:f1:ef:4d:d4:18:9a:24:bd:0e:
                    3f:aa:86:ca:df:8d:a3:2d:9b:5b:08:e1:92:86:27:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:34:14:0F:79:6F:33:2E:68:E4:1F:2A:57:20:3C:85:AE:8B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dcca031-0312-3129-a1a3-7816cf1ecff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:af:fe:69:92:6f:f1:8c:f3:5f:ec:c6:bb:6e:bf:84:f4:90:
         fc:d0:a7:8a:f3:6a:e0:cf:5b:91:35:11:39:9f:37:b6:22:a9:
         41:24:a4:36:de:77:2c:25:fc:00:44:34:7a:56:6c:df:0b:07:
         86:d9:58:26:72:6a:6e:93:4e:9c:e3:3b:d7:b5:18:f1:41:c0:
         37:f1:67:9d:85:91:cc:69:52:a5:f9:34:8e:55:e9:ec:57:8c:
         2f:57:5b:28:3e:49:2f:9f:8e:9b:25:40:e0:0e:95:f5:8b:68:
         2b:81:ed:66:9e:e6:b0:41:e4:41:8a:7d:82:0e:f3:4e:44:0b:
         84:bb:17:b0:e0:60:29:99:e4:3e:88:bf:67:9f:99:75:ac:08:
         63:8c:ce:2a:52:18:07:8a:a5:ed:ba:3b:89:a0:d6:92:37:a7:
         21:96:11:c4:d7:c6:36:2d:9a:b2:90:4f:90:f3:05:be:f7:29:
         0d:73:45:67:c7:80:1a:cf:8b:d0:f6:0d:4b:a7:b7:1c:4b:d5:
         2d:a1:e3:4b:db:f8:0b:c1:d2:16:92:c1:22:37:b4:43:d8:64:
         21:f5:83:ee:c1:e2:f1:7e:a6:2d:b7:70:84:30:ec:42:60:68:
         33:43:a1:79:69:77:d8:d8:c8:03:a5:5f:66:60:9d:12:55:53:
         bc:08:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:45:23 2025 by rpki-client