Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37420fb9-0e09-3fc3-9af5-1cb336874783.roa
File:                     37420fb9-0e09-3fc3-9af5-1cb336874783.roa (raw, json)
Hash identifier:          jk/Y7U5zmolfYVhaW5PnnEyvG5Sjdz0LBzdaIL+yB94=
Subject key identifier:   51:1A:CF:8D:3F:AC:77:06:9A:34:3F:A8:F3:A1:86:D3:59:D9:62:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB4EA330F7A5042682CE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37420fb9-0e09-3fc3-9af5-1cb336874783.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:4e:a3:30:f7:a5:04:26:82:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a9d614fa-4157-49cc-9cb2-023cdb9d2061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:20:66:ca:39:4b:cc:87:ce:76:d9:b3:04:
                    51:84:b7:47:83:1e:b0:3b:67:c4:15:84:e1:f3:a6:
                    c0:f6:37:c4:01:ac:05:ad:f7:1d:be:57:76:c0:e3:
                    cf:33:8a:1b:fe:cc:9f:fb:ba:2f:72:c9:8b:00:2d:
                    24:22:db:d2:09:f5:de:29:a7:b4:33:fe:34:2e:36:
                    de:dd:af:af:57:4a:ed:27:b3:f1:3e:0c:49:a1:cd:
                    07:1c:3d:6a:38:f3:a0:05:df:59:1b:fe:3f:e4:7e:
                    40:d9:38:c7:42:34:b6:7e:b3:37:e3:c0:5a:08:8c:
                    48:cc:be:72:81:ad:c5:c3:27:6b:09:af:a2:3a:47:
                    e7:a0:0c:1e:ca:f4:dc:3b:42:f6:9a:4c:7f:28:04:
                    5e:07:76:71:5c:1f:74:b7:c8:d2:8c:27:16:18:81:
                    99:61:86:a8:d3:4f:3f:bf:13:e0:71:de:9c:d9:9e:
                    e4:b1:f6:31:da:30:f7:c2:be:a0:5d:c5:89:19:55:
                    a9:b0:d3:78:f8:6b:f3:30:79:d0:4e:68:eb:2a:48:
                    5e:8b:0c:8e:44:ad:1d:bc:fd:80:49:3f:9d:99:a6:
                    c8:65:f8:34:af:b3:f8:9e:8f:58:93:0c:8f:09:d6:
                    da:10:37:5b:d7:eb:5f:d0:d3:3f:d4:31:ef:d4:a9:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:CF:8D:3F:AC:77:06:9A:34:3F:A8:F3:A1:86:D3:59:D9:62:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37420fb9-0e09-3fc3-9af5-1cb336874783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:65:e5:8c:b3:48:8b:19:5f:87:fa:c5:7e:b7:cb:88:68:6c:
         27:ce:81:4b:99:a6:1f:ff:2b:fa:6e:cf:7a:f5:03:90:16:ef:
         32:80:c5:33:50:7d:86:05:98:e2:a1:12:da:49:ae:b4:79:b0:
         4f:0f:fe:98:f2:39:8b:cb:45:79:31:5d:58:2e:01:df:5f:5c:
         7d:1f:1f:82:5f:70:32:02:b3:bc:56:14:4a:eb:8b:7e:af:2f:
         21:69:a7:8a:7f:6f:11:91:0e:5c:d5:e1:73:1f:6b:65:53:e3:
         ed:4d:c8:1f:72:14:1e:5d:af:01:66:9c:c4:0d:7e:a2:b7:fe:
         a8:b3:de:1c:d3:08:1d:69:a9:9b:d4:04:37:47:cf:28:c9:22:
         25:9e:6b:36:db:d9:5e:9c:4b:91:7b:8c:39:c2:ff:7d:98:ea:
         53:59:4a:eb:cb:7c:02:aa:36:97:22:78:96:d8:16:64:f6:b0:
         e2:77:da:72:41:9e:16:b5:47:0c:06:9f:74:0e:31:56:ee:20:
         24:7a:dd:3a:5b:12:b3:54:77:10:45:a6:ca:1f:2d:44:3d:95:
         e3:3c:43:7d:7d:7f:d9:18:e1:69:19:48:d0:37:0c:0c:1a:45:
         cf:87:66:21:a5:d7:23:34:68:09:4a:20:fb:d2:f7:13:e6:9d:
         3e:40:77:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku06jMPelBCaCzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YTlkNjE0ZmEtNDE1Ny00OWNjLTljYjItMDIzY2RiOWQyMDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsogZso5S8yHznbZswRRhLdHgx6wO2fEFYTh
86bA9jfEAawFrfcdvld2wOPPM4ob/syf+7ovcsmLAC0kItvSCfXeKae0M/40Ljbe
3a+vV0rtJ7PxPgxJoc0HHD1qOPOgBd9ZG/4/5H5A2TjHQjS2frM348BaCIxIzL5y
ga3FwydrCa+iOkfnoAweyvTcO0L2mkx/KAReB3ZxXB90t8jSjCcWGIGZYYao008/
vxPgcd6c2Z7ksfYx2jD3wr6gXcWJGVWpsNN4+GvzMHnQTmjrKkheiwyORK0dvP2A
ST+dmabIZfg0r7P4no9YkwyPCdbaEDdb1+tf0NM/1DHv1KlIiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEaz40/rHcGmjQ/qPOhhtNZ2WLKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzc0MjBmYjktMGUwOS0z
ZmMzLTlhZjUtMWNiMzM2ODc0NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD64MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK5l5YyzSIsZX4f6xX63y4hobCfOgUuZph//K/puz3r1A5AW7zKAxTNQ
fYYFmOKhEtpJrrR5sE8P/pjyOYvLRXkxXVguAd9fXH0fH4JfcDICs7xWFErri36v
LyFpp4p/bxGRDlzV4XMfa2VT4+1NyB9yFB5drwFmnMQNfqK3/qiz3hzTCB1pqZvU
BDdHzyjJIiWeazbb2V6cS5F7jDnC/32Y6lNZSuvLfAKqNpcieJbYFmT2sOJ32nJB
nha1RwwGn3QOMVbuICR63TpbErNUdxBFpsofLUQ9leM8Q319f9kY4WkZSNA3DAwa
Rc+HZiGl1yM0aAlKIPvS9xPmnT5Adxo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:08 2025 by rpki-client