Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26605cd0-fa6d-301f-90ff-f6abcfe11901.roa
File:                     26605cd0-fa6d-301f-90ff-f6abcfe11901.roa (raw, json)
Hash identifier:          Z2nuUseLnRbqWbTFlLIfhUTBtnpAMHU1u7yZtsWntwo=
Subject key identifier:   CC:B1:2A:1B:F6:D7:E4:24:3A:4D:2D:4B:A3:02:58:86:33:C0:27:A4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB4F428E93EF8984327780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26605cd0-fa6d-301f-90ff-f6abcfe11901.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:4f:42:8e:93:ef:89:84:32:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d37bbfba-ec1c-4d18-bbd8-0ee2fed27410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:fd:cc:01:74:72:65:25:cd:ad:54:24:b1:
                    1b:96:e0:d6:fc:97:fd:27:1d:3f:ba:69:3d:88:c1:
                    ab:0b:65:98:21:8a:78:b1:b8:66:45:fb:11:30:b5:
                    1d:25:9e:dc:84:f9:59:50:f4:a9:18:54:83:f8:ba:
                    cb:6c:b7:c8:d8:51:13:19:a6:ae:e7:f3:00:df:67:
                    ad:25:85:95:cb:94:46:22:31:bc:90:89:a6:37:f7:
                    70:1b:6f:5e:55:6f:46:6b:97:ee:02:bc:72:96:c2:
                    24:ff:31:00:a7:6a:36:cb:c1:20:62:f7:9b:b9:88:
                    5b:1f:8d:61:40:6d:9d:23:e3:cb:e0:3a:eb:b4:e7:
                    af:fc:a8:a2:3e:d7:e9:d6:47:22:e8:87:09:4e:f8:
                    bf:c6:4e:34:02:12:5a:68:ab:bd:a3:67:55:29:74:
                    9d:2a:26:04:bc:7f:a5:48:17:9a:f3:1c:37:85:89:
                    21:f1:0f:82:a1:0c:59:5f:01:a9:23:eb:a2:e8:04:
                    92:d5:aa:8f:5b:7e:ee:cb:09:f6:1f:86:81:21:33:
                    2e:02:b2:13:4a:a2:b4:8b:7e:44:72:fe:f8:6d:63:
                    5e:c4:50:cd:9b:34:31:fb:2b:bf:b5:77:3c:24:eb:
                    06:8c:77:ad:2a:d5:e3:60:2b:05:6f:79:e4:b5:10:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B1:2A:1B:F6:D7:E4:24:3A:4D:2D:4B:A3:02:58:86:33:C0:27:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26605cd0-fa6d-301f-90ff-f6abcfe11901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:94:76:77:dc:e1:e1:7b:c8:40:34:c2:cb:f6:d4:54:14:
         46:28:ca:ea:06:4c:18:a4:3b:1f:da:f5:7f:51:c2:22:bb:2b:
         a6:bb:6e:ec:65:d0:99:b1:9e:7d:1f:f6:a7:dc:3b:45:20:da:
         89:a8:df:53:93:51:07:27:f1:c0:5d:a5:5c:84:3e:fe:21:c0:
         4a:b5:ab:47:b8:49:d7:28:2c:bb:e7:f7:f3:8c:a0:0c:4a:d2:
         a2:e3:66:42:b2:d3:78:d6:52:72:c6:d5:01:31:69:50:f8:9c:
         9d:13:1a:44:48:04:0b:ab:93:32:4c:b1:ff:0a:b8:a1:69:00:
         59:e6:e8:24:af:6e:74:ce:b1:27:e5:4a:40:1c:5c:6c:12:c7:
         ff:dc:40:84:69:b3:55:d9:2d:3e:90:60:b8:f2:c8:ea:f5:a5:
         e5:a1:3b:c5:a6:83:16:93:ff:57:6a:97:82:c7:78:25:30:ac:
         26:06:00:ce:43:8c:92:49:52:6a:3d:38:81:18:dd:2e:67:1f:
         12:f4:1a:45:66:ef:05:40:bf:f4:a4:7a:fd:ed:ad:8f:3c:ee:
         50:ab:bd:53:f2:e0:15:74:95:f8:3e:f0:d4:34:bb:60:73:67:
         84:7a:7b:ec:cb:52:20:a3:20:be:4f:4a:27:25:82:e5:c7:e1:
         2b:5d:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:19 2025 by rpki-client