Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48d59721-2f0e-3b2a-a22b-8e27ef8734bb.roa
File:                     48d59721-2f0e-3b2a-a22b-8e27ef8734bb.roa (raw, json)
Hash identifier:          7mxMiFRdYXgRAskeTgyQBCatqyDHOtubgrLv5XsUvuw=
Subject key identifier:   20:B5:56:0F:66:40:CA:A6:7B:CD:8E:43:ED:C0:06:75:75:F6:AC:4E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB1CB64278525907E6800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48d59721-2f0e-3b2a-a22b-8e27ef8734bb.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b1:cb:64:27:85:25:90:7e:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d42f63ef-1fac-41e5-8deb-1d3b2f56f79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:ed:bc:a2:fc:d7:14:d8:37:cf:67:fe:2a:
                    94:b5:19:2e:6d:e2:e4:78:ec:91:2d:b3:30:15:6f:
                    89:4d:d1:fe:42:26:65:fd:24:3a:ad:bd:fc:dc:cb:
                    31:5e:77:07:4c:21:d8:c9:d5:00:01:ed:fa:e4:ac:
                    d6:21:98:73:39:dd:cd:5b:b0:48:46:02:b5:8c:cd:
                    43:a0:8a:55:e2:8d:ab:c4:3a:bc:16:43:63:a4:d2:
                    71:37:58:7e:ea:f7:3d:a5:df:9e:78:8f:90:3f:5d:
                    16:b4:b3:75:29:5c:24:e0:d0:75:cd:0c:52:c2:80:
                    d4:1a:78:0a:4e:50:dc:a1:04:47:1c:02:3c:7f:37:
                    9f:d2:3c:5c:7e:a5:cd:b9:69:24:05:d9:9b:3c:9c:
                    63:35:17:c4:cc:b0:bf:85:17:b0:b8:cb:05:a4:61:
                    bb:2e:d4:81:df:06:e4:36:94:cd:42:14:74:1b:30:
                    3e:62:59:7b:c7:16:c4:44:ed:1b:67:53:06:d4:3b:
                    a6:33:5b:7c:57:9f:92:2a:f5:13:8c:68:fb:eb:12:
                    8b:ae:9c:27:fb:ce:da:92:0a:12:a9:62:32:cb:df:
                    92:2e:bc:35:9b:cb:e8:88:18:e5:2a:7d:ce:4d:d6:
                    8c:a7:c6:84:51:f7:4c:6d:73:90:33:72:64:dd:39:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B5:56:0F:66:40:CA:A6:7B:CD:8E:43:ED:C0:06:75:75:F6:AC:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48d59721-2f0e-3b2a-a22b-8e27ef8734bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f5:36:e9:ef:2f:b2:bc:17:59:ca:92:a8:02:9e:73:cd:34:
         b0:84:b6:97:8d:0b:69:40:f0:49:60:bc:af:12:41:aa:82:74:
         bd:6e:08:fa:68:f1:f5:53:5a:f3:83:d1:28:94:fd:a5:f9:b2:
         5d:b6:ab:db:55:98:80:17:67:02:38:b1:fc:e1:c9:80:c6:35:
         53:44:fd:27:6e:f6:3f:78:4d:23:ec:dd:ca:06:04:0c:0a:d6:
         7f:26:9f:b9:31:b1:5c:b4:b1:1b:e8:37:13:43:03:15:c1:8c:
         17:53:cc:39:6a:75:70:a0:57:60:cb:4f:4d:17:e4:a7:c8:5f:
         58:b1:83:42:25:ea:02:1f:bd:5f:af:d6:71:d7:59:12:af:2a:
         84:38:e5:2b:b3:2c:14:49:81:e4:0b:d0:c3:2d:66:be:4e:9e:
         fb:f5:36:e5:d1:70:a3:a7:f7:e6:02:b3:e6:2c:b3:88:f2:31:
         30:d3:b9:a2:83:86:a2:99:d4:85:aa:0a:64:d8:39:1b:4c:41:
         42:94:ec:d8:15:bc:66:05:ad:52:5b:c7:7f:22:84:a7:94:60:
         54:6e:88:79:80:6d:70:48:b3:fe:4c:96:bb:d3:2e:01:26:70:
         d4:85:cc:23:3f:8d:15:1a:d1:2b:9c:d9:a4:f5:45:04:f8:7f:
         27:f5:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:32 2025 by rpki-client