Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/58046d37-22b6-3785-84f1-f9b6a0ffa954.roa
File:                     58046d37-22b6-3785-84f1-f9b6a0ffa954.roa (raw, json)
Hash identifier:          sgF7ql2VwWl6dFx3cZ/EsD64S+GNjkzJuiKXx+N2Hnc=
Subject key identifier:   AC:47:38:3E:D9:C0:D3:8C:ED:C7:88:47:BF:01:2A:12:C5:CD:CB:33
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB4FCD52F4D4866B35E500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/58046d37-22b6-3785-84f1-f9b6a0ffa954.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:4f:cd:52:f4:d4:86:6b:35:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=4bf33236-8b0b-4d2c-87c3-be1422ca1ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ea:a3:d9:ba:40:fa:8e:2c:2e:bb:9d:2e:d8:
                    d3:59:0a:d5:80:f8:f8:93:39:81:a6:5d:1e:e2:dc:
                    3d:87:71:d0:8d:ef:e5:39:71:24:21:ce:62:be:fd:
                    84:42:9f:d2:2e:bf:2b:d7:93:7b:47:d1:4e:3c:19:
                    34:01:bc:e6:b4:41:be:40:4b:c7:08:8b:b3:dc:57:
                    e2:b8:45:87:ee:e4:48:41:fe:24:9e:5c:d7:a9:67:
                    b1:f5:14:e0:5e:b3:8b:46:4b:f8:3d:00:2c:e4:1a:
                    ed:47:d1:e4:71:30:10:db:30:81:59:4e:4b:ee:db:
                    5b:77:59:24:3f:77:46:39:f4:3b:68:2c:bb:de:bf:
                    a3:18:3f:eb:ce:c7:e1:31:7d:0f:23:4c:17:ea:bf:
                    58:89:a0:78:0b:21:99:20:e3:c7:57:0c:ca:f1:1e:
                    9e:14:f0:51:e7:4d:7a:7d:68:48:3d:0c:08:08:a9:
                    6f:83:a8:98:e3:77:75:71:a5:fc:a1:fb:2b:04:6a:
                    a5:bf:e0:56:82:6e:e1:e1:29:f7:b1:2f:a6:40:b6:
                    01:3d:1e:4d:91:01:ed:d5:9e:82:fa:1b:45:88:25:
                    70:03:7e:83:ba:d0:5c:fb:bc:a9:ee:b6:8e:10:12:
                    34:55:0b:15:98:cf:73:01:64:87:dd:53:47:cf:01:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:47:38:3E:D9:C0:D3:8C:ED:C7:88:47:BF:01:2A:12:C5:CD:CB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/58046d37-22b6-3785-84f1-f9b6a0ffa954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:d7:ba:04:66:f6:81:0d:2e:70:b7:42:3f:f9:0c:7f:0d:
         f3:45:ae:ca:9f:dc:8e:9e:2e:40:c3:9e:8a:52:53:43:ba:bd:
         64:58:71:31:f8:ee:b3:70:dd:41:53:16:b2:03:c6:2b:7e:2a:
         7f:32:39:1d:41:7e:b4:85:96:5d:40:6d:c0:45:0b:60:8c:6b:
         a8:a2:59:1d:41:f8:ec:96:8b:f5:58:a3:87:c7:3f:6b:21:52:
         65:7b:60:d6:98:7b:a7:a2:fd:af:5c:74:60:61:0c:5a:35:4a:
         82:5f:2f:c9:78:a3:8c:ff:3a:a3:0f:24:c1:78:81:20:96:ce:
         1b:e0:9a:ec:d0:d3:24:ed:89:58:71:15:41:33:3b:32:15:60:
         a0:07:33:ae:59:17:7a:78:bc:3b:4f:36:79:43:fc:82:b6:e8:
         e5:8e:27:0b:d1:df:00:29:26:a0:4e:ae:31:ea:85:8c:eb:37:
         a1:dc:a7:cd:d9:12:24:30:c3:b0:cb:45:26:69:ec:5d:6e:39:
         c0:60:72:76:ff:45:d5:e0:7f:d7:cc:43:e6:dc:d4:9e:f5:70:
         c0:47:05:96:5a:45:6b:23:6f:85:25:b0:b0:b4:00:88:4f:13:
         bc:73:d1:ad:d4:bf:d0:13:c9:f0:80:c7:12:b6:58:9e:55:f0:
         8b:15:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:14:54 2025 by rpki-client