Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2249404a-b6be-30f0-aa5f-40d764c76826.roa
File:                     2249404a-b6be-30f0-aa5f-40d764c76826.roa (raw, json)
Hash identifier:          NdQiOW0RLcHMzcZoVzQpoY8ocltofNOBoYazRlMqrMQ=
Subject key identifier:   53:BB:D5:01:C3:A7:25:F6:EB:F5:29:3B:8E:7A:E6:66:31:41:E4:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB51E3DEF310E1BACB4500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2249404a-b6be-30f0-aa5f-40d764c76826.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:51:e3:de:f3:10:e1:ba:cb:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=77222acd-5ccb-4873-a64e-3951fcfd1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:49:62:38:6c:e3:3b:d7:1a:4b:c9:48:a8:
                    6b:09:af:d3:c7:3e:58:b6:be:2e:9c:ec:bf:ae:f8:
                    83:fd:2a:45:c9:49:85:bd:0e:b8:6b:0e:52:27:ad:
                    98:f2:ba:e8:fc:06:98:ac:f7:9f:2f:26:9d:5e:cd:
                    19:79:6a:f8:6a:59:17:10:b3:a7:aa:19:c0:80:71:
                    7a:af:7b:a6:ba:6d:8a:02:d5:d0:e3:5f:19:3b:f2:
                    85:40:09:9f:2e:ea:51:47:2d:27:d1:54:5d:06:a2:
                    fb:a0:3e:5e:de:b8:e7:40:17:a2:12:21:10:e0:63:
                    49:19:77:52:00:20:38:58:2f:7c:ae:a7:6d:24:88:
                    43:f2:02:b3:c9:48:7d:fe:2e:88:1e:9b:a4:02:e0:
                    e9:d6:7c:0a:a2:c8:7b:32:96:71:6b:a6:3f:6c:c3:
                    24:59:d1:79:93:49:e6:ac:2d:1b:c1:42:17:27:03:
                    ea:2b:b3:ef:52:ef:9e:89:05:8d:33:70:b8:66:13:
                    17:82:80:24:da:4c:f1:77:aa:9c:e1:3a:43:fb:ba:
                    85:54:7c:ef:d0:4f:a1:d7:d9:13:c5:09:15:99:58:
                    a9:af:60:78:f2:db:1e:7a:36:78:8a:8f:6d:9f:97:
                    66:6f:5e:70:58:66:58:77:92:19:22:ab:c2:d1:0b:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BB:D5:01:C3:A7:25:F6:EB:F5:29:3B:8E:7A:E6:66:31:41:E4:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2249404a-b6be-30f0-aa5f-40d764c76826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:29:ed:ba:ae:5d:c2:c6:7e:5b:99:bd:40:60:fc:72:83:9c:
         44:b2:db:19:93:c9:05:7b:61:0d:ac:a4:b0:fb:c9:8a:4a:92:
         69:fe:f3:03:c0:4f:e2:29:b4:58:c9:d6:43:6e:65:4a:9f:ac:
         06:7a:e2:a0:bc:47:b3:50:66:41:34:45:83:b6:09:8d:bc:1d:
         df:ba:8d:f3:62:ab:47:bb:95:bc:1e:6b:47:dc:27:87:37:fb:
         5e:ef:c9:f3:1a:1c:8c:1a:86:fa:75:08:9d:0f:2d:b8:d7:b1:
         70:89:6c:be:34:a9:40:ef:6d:a9:c1:2d:b7:fb:2a:09:27:52:
         05:04:4b:cf:ab:e3:4f:64:31:82:7b:61:23:01:8f:3e:c1:c2:
         46:a9:5d:e3:33:08:b2:66:21:8e:79:97:7e:73:7f:88:5d:58:
         d8:75:59:72:da:ec:44:5a:00:ae:45:df:38:78:4a:c3:c7:38:
         b6:eb:38:66:80:e9:9d:34:ca:cd:eb:5a:d7:a4:74:11:ec:75:
         74:69:e3:ca:fa:23:ee:28:be:22:0c:c6:45:de:36:43:10:38:
         15:5e:de:bd:57:d6:75:20:58:73:95:db:df:23:59:43:6c:6e:
         a4:a7:f1:01:ae:f9:cc:85:e7:8c:5a:a1:7d:c0:44:a8:b9:ae:
         40:b0:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:05:45 2025 by rpki-client