Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3de95b29-a8ce-3c8e-8cf1-96bb1c267873.roa
File:                     3de95b29-a8ce-3c8e-8cf1-96bb1c267873.roa (raw, json)
Hash identifier:          UGT389d99r5ZslM4ZFm+wRi4cwTIup1mo50GgoMkhbQ=
Subject key identifier:   B8:99:61:A0:DF:C4:D4:CD:0E:55:91:06:A1:16:6C:91:31:87:9A:5A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB3794C42E4C45A540900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3de95b29-a8ce-3c8e-8cf1-96bb1c267873.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b3:79:4c:42:e4:c4:5a:54:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a4168d60-c823-4f72-9f51-ffe4682d41b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:b2:00:4d:37:dd:56:91:e5:e8:c3:ee:9b:
                    fe:dc:c8:26:c9:0a:1b:23:6c:71:07:a5:94:8a:2c:
                    7f:b8:31:43:b1:45:5c:9b:93:a6:02:51:49:cd:fb:
                    8d:25:d1:1a:f0:24:42:95:0e:1e:f5:fa:0b:24:f1:
                    90:92:d5:75:07:cd:aa:c9:9f:91:d1:83:47:3e:c6:
                    53:2e:07:0f:53:76:59:3f:36:d3:48:1d:9e:41:3b:
                    c1:0d:e2:b1:2a:d3:e4:9c:12:a1:99:da:69:83:d9:
                    a7:39:62:07:46:bc:d3:92:4f:a5:70:25:e1:73:b6:
                    fd:7b:c2:65:1d:1a:1b:93:8f:c3:d2:c2:fd:f7:0e:
                    f7:13:ad:df:9a:78:d1:7e:5c:a7:67:5b:d9:8c:f8:
                    67:6a:38:49:cd:bc:cb:86:63:cf:01:f9:07:03:f8:
                    f6:83:21:f2:a1:fc:8f:76:51:d1:a4:ca:3e:96:f8:
                    d0:8e:d1:95:2a:33:d9:25:1d:b5:3e:7c:b4:c5:c7:
                    59:95:0c:e4:6e:ed:3d:80:5c:26:5b:69:ad:07:2c:
                    a5:2c:bc:77:3c:d7:f0:c5:97:f0:31:02:8d:8c:2f:
                    c4:73:ba:07:3c:56:d6:76:b3:dc:c9:c7:13:0d:34:
                    31:13:17:dc:e9:80:48:2c:29:8a:eb:4f:ee:a1:a5:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:99:61:A0:DF:C4:D4:CD:0E:55:91:06:A1:16:6C:91:31:87:9A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3de95b29-a8ce-3c8e-8cf1-96bb1c267873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:05:fd:31:49:2a:5e:61:15:b7:92:d6:96:a3:17:88:16:c0:
         75:c1:88:a3:b9:34:f2:a2:13:28:d1:19:99:bd:f2:24:54:25:
         d0:08:79:f1:27:29:de:35:41:c3:a3:5b:37:d6:04:39:3f:d8:
         49:bc:49:ff:2a:8a:d4:3b:2d:b3:ae:61:9d:32:4c:8b:06:06:
         14:20:45:b9:56:5d:31:92:03:e2:0b:20:79:ca:b6:cc:ae:e7:
         cd:be:c4:4c:61:c5:d1:18:c2:0f:90:38:f1:fe:ea:87:93:d6:
         03:44:03:c7:d1:09:23:14:86:e6:9a:e3:55:04:33:cf:1c:ef:
         db:ef:b6:4c:84:b5:9f:67:05:67:dd:98:c4:60:c7:b2:e9:d5:
         9d:12:4e:46:96:36:c9:fc:3c:29:a2:e1:29:d8:de:32:bb:71:
         26:e5:d8:68:38:65:2e:23:97:8c:e3:ea:37:b3:d7:b3:8b:21:
         52:a6:67:cf:d6:11:c1:18:4c:2f:00:4f:a4:1a:1c:aa:2f:e1:
         c2:7c:f6:1e:76:83:19:60:a2:6a:8c:a2:fd:f6:bc:e4:8e:5c:
         75:a8:54:85:93:93:1c:7a:d5:5e:b5:32:0d:0e:09:ea:c0:4c:
         1a:b2:81:ab:a7:a0:84:03:44:2a:0b:30:4d:04:17:f8:c3:80:
         ef:af:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:56 2025 by rpki-client