Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59481d44-5b4e-3903-a5ec-61d8d5b13088.roa
File:                     59481d44-5b4e-3903-a5ec-61d8d5b13088.roa (raw, json)
Hash identifier:          ffyO823iAvDldUE5P21lAv4jsbQAuyYUYgwUo+4pRsU=
Subject key identifier:   A5:7E:45:EE:7B:3F:C4:61:22:12:EA:23:8F:39:43:F7:33:C1:1C:CF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB2F2D91445D739D25A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59481d44-5b4e-3903-a5ec-61d8d5b13088.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b2:f2:d9:14:45:d7:39:d2:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=69b5c940-32ce-4e96-a5e8-d3aa69dc2668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:87:02:c7:1a:0a:a6:4c:fb:2b:17:82:28:
                    62:25:c8:0b:a6:91:fc:3a:b5:85:b3:53:77:09:49:
                    c0:54:7d:ed:de:fb:d4:56:e1:b4:02:79:84:2d:fa:
                    52:6f:4a:50:ed:01:6c:a5:a4:e3:7a:22:2c:5d:0e:
                    de:ab:8d:4a:4d:fe:f3:d0:f1:5e:2a:f6:91:94:2e:
                    34:b1:21:45:37:10:3e:ef:72:92:04:6c:d6:b6:61:
                    16:fe:5f:8e:a3:b6:eb:d5:46:f7:5e:5c:cf:95:bf:
                    84:d3:8a:0d:0f:a0:c5:ee:19:da:4d:b2:3a:eb:d1:
                    49:0b:8a:23:3b:a4:61:16:05:5b:b2:1e:73:5e:a0:
                    8b:21:44:69:13:b7:d8:a4:f1:c5:1f:46:19:c3:f1:
                    0c:d4:b3:75:b3:9f:45:f9:b0:16:df:5c:84:41:95:
                    0e:5f:d1:2c:fe:9e:fa:b8:f6:dc:f9:2b:ea:91:57:
                    fa:50:84:23:5a:54:5a:09:69:ab:73:2c:02:d2:3f:
                    09:14:5f:7a:62:a1:6e:50:76:5f:ca:fd:45:8b:2f:
                    49:9e:bd:11:52:19:cd:6f:de:c6:4d:6f:d7:50:e2:
                    46:a6:da:f3:03:c7:8b:d0:c8:d0:0e:39:3f:3c:b5:
                    e8:9e:28:f1:57:8c:be:ee:ea:ad:83:aa:0a:0f:da:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:45:EE:7B:3F:C4:61:22:12:EA:23:8F:39:43:F7:33:C1:1C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59481d44-5b4e-3903-a5ec-61d8d5b13088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:29:02:e8:ab:3d:10:61:0a:19:71:77:d7:4d:49:fb:62:f6:
         6f:34:c7:81:0f:a2:f9:7f:ac:a6:41:c8:fd:6d:ee:48:51:5e:
         33:09:1a:38:0a:e0:d1:f0:eb:52:a9:4f:b9:df:4f:b3:18:67:
         d8:3e:d1:47:c7:d9:23:29:68:9b:83:c2:3e:ac:81:ef:ab:d3:
         4a:09:ee:5a:c7:53:a6:77:a5:81:9a:a3:2c:fd:32:74:42:3f:
         93:dc:a7:63:47:1b:4a:21:34:cf:dd:b4:c9:fd:02:d5:54:eb:
         0e:d4:6e:2f:1e:fc:35:b0:a9:8b:17:78:1a:09:77:04:81:70:
         a4:d8:68:56:bf:ed:ae:79:7f:45:d5:2b:5b:0f:44:23:74:99:
         95:2c:d2:62:25:24:95:00:6f:34:d4:95:fd:b3:ba:4a:08:c4:
         77:78:00:bf:d6:42:c8:8d:96:c5:4e:ef:72:62:92:67:06:85:
         c7:06:a9:84:07:23:33:3e:d8:0e:42:e1:3f:de:fe:7e:d6:f8:
         66:d0:77:35:4f:af:7f:00:50:fa:ff:49:d5:b1:bb:9f:a6:f4:
         7c:ac:18:68:bf:bb:c9:02:99:f0:fd:49:55:a8:32:a5:83:42:
         f5:f4:71:b3:c4:35:e7:94:e5:bb:01:1c:73:59:61:7c:40:88:
         37:77:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:08:02 2025 by rpki-client