Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e3750bd-879a-3e70-a50e-d153be4df837.roa
File:                     4e3750bd-879a-3e70-a50e-d153be4df837.roa (raw, json)
Hash identifier:          ecQ3otUooXMIm0btOFf6ojS4li4IqMQq+E3XpbEfLTE=
Subject key identifier:   16:30:2E:DC:A6:47:D3:D8:0E:77:FF:3E:B3:28:71:A1:01:36:34:CB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB5372D0FF61D032F7E6D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e3750bd-879a-3e70-a50e-d153be4df837.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:53:72:d0:ff:61:d0:32:f7:e6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c5066281-f1b8-4b58-9d2c-01f7d7596f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4e:46:a2:c0:4d:e3:25:cc:ac:fa:74:7a:61:
                    6e:ab:a4:18:4d:36:c0:72:50:76:d4:e9:69:c7:84:
                    d6:1e:32:ba:65:a0:ce:11:c6:01:7c:21:26:c7:5c:
                    47:1a:6d:6d:77:4e:6b:01:41:c2:2b:09:39:69:d9:
                    11:3a:fb:be:3d:95:b4:c5:db:74:1f:1e:72:73:cd:
                    22:eb:52:9c:11:6c:c4:ce:8e:3a:63:79:e0:75:a1:
                    e4:51:59:c9:57:f0:9d:48:29:0e:a1:ad:76:7e:f4:
                    89:91:7c:c9:00:7e:6b:52:d0:03:89:2e:86:27:fa:
                    50:3e:30:e3:bb:0a:20:0a:67:2b:ab:a1:c9:72:0a:
                    87:b6:63:3c:f2:71:f2:4d:e2:06:5c:45:41:31:11:
                    f3:21:d2:43:f8:c3:91:39:81:85:8d:86:56:e1:08:
                    e1:84:bb:ac:3b:2d:59:1d:f5:26:45:5e:93:18:d2:
                    5d:7c:19:a1:ad:e1:85:58:2b:ce:5d:a7:c8:88:19:
                    77:de:7f:83:83:44:a2:8c:16:23:a3:dd:5b:9b:30:
                    17:de:ea:a2:1e:1a:1f:c9:fb:1d:97:9d:65:97:99:
                    83:22:98:ef:c7:09:f9:db:90:18:c3:11:12:f0:78:
                    13:26:07:39:1b:50:3e:db:5e:24:42:31:67:8d:0a:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:2E:DC:A6:47:D3:D8:0E:77:FF:3E:B3:28:71:A1:01:36:34:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e3750bd-879a-3e70-a50e-d153be4df837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:10:e0:a7:21:c3:30:66:b1:cd:92:3c:1b:5f:42:f3:37:
         72:eb:e3:93:a0:2b:91:2c:a9:ee:40:20:e3:02:90:35:87:02:
         87:96:51:af:f5:51:97:fb:46:29:b0:f4:bb:b0:fb:e5:bb:fe:
         ba:31:94:13:84:60:16:7a:ae:2f:54:35:13:01:e7:70:9e:43:
         50:9e:ed:ea:05:17:27:1a:e3:7b:a8:74:63:98:3e:a0:25:2b:
         f8:87:41:4c:82:b4:4b:48:5f:7c:33:7e:27:2b:2b:39:1c:d8:
         92:4c:6e:f3:f5:eb:0d:cd:46:79:cb:98:11:83:73:6e:c3:bd:
         f9:99:ec:e4:34:d1:d9:bc:dc:ac:14:39:49:42:7d:37:da:1e:
         3b:49:27:92:80:e2:dc:8c:b0:b8:3d:16:45:a1:ac:5f:96:b1:
         b2:ea:27:c8:07:93:88:a8:a1:01:b6:ac:0d:14:b8:46:76:2a:
         99:bc:70:cc:26:bc:e5:04:d1:6d:d9:d5:80:5a:d3:c3:b4:40:
         9b:cf:cd:ad:5b:b9:d1:06:9c:21:2b:0f:0b:39:3a:da:42:07:
         65:34:e2:2b:68:ee:96:13:a3:58:73:48:44:46:29:c7:85:cc:
         86:d5:5a:ac:88:a2:94:ca:83:ac:5b:d8:79:35:fe:77:4a:14:
         6d:8d:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:50 2025 by rpki-client