Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bbd06dc-629a-389a-8444-60f1b9c11e29.roa
File:                     5bbd06dc-629a-389a-8444-60f1b9c11e29.roa (raw, json)
Hash identifier:          daXFP+lFT3mcj/7ROcZwkAOmy5G7Ald50tvZTMIUthY=
Subject key identifier:   03:FE:AB:2B:90:6C:93:1F:45:B4:4B:A8:CC:5C:50:C6:57:A0:B3:E0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB52C81A0F2D3ADCC98F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bbd06dc-629a-389a-8444-60f1b9c11e29.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:52:c8:1a:0f:2d:3a:dc:c9:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=64ba4640-5979-4d69-b4f6-d9fc4555772b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:9a:cf:9d:2d:26:55:1d:25:6a:c9:3e:24:
                    9a:6d:62:f4:0b:80:23:4d:b1:d6:6c:a8:00:95:fe:
                    01:b5:f5:fb:20:70:c6:08:07:31:d6:07:7d:08:ae:
                    34:f0:cf:d7:98:85:06:74:a4:85:e2:be:73:12:7c:
                    dd:12:4f:ca:56:b3:ae:ec:d8:b4:54:03:59:d6:75:
                    c7:b6:07:ea:8a:b8:66:6e:b6:46:2e:41:57:3e:23:
                    65:df:54:bd:9d:b8:39:89:86:cd:11:f0:49:5e:72:
                    7a:d8:96:78:ac:3e:62:62:5d:9f:40:6a:40:70:2e:
                    9b:be:04:43:6f:00:56:a2:f8:a9:36:e4:7c:68:a1:
                    d1:51:6d:00:84:3d:80:ec:e3:4a:a3:78:69:80:ef:
                    89:a3:0b:ee:a6:b1:3f:62:a0:ed:5f:78:5a:24:d3:
                    fc:4c:44:e3:9c:b2:e5:a6:9a:44:00:1f:10:57:04:
                    fe:c3:ee:b3:e7:28:12:8d:5f:85:a9:15:fb:ea:f0:
                    4b:cf:e2:d1:89:5f:db:eb:cc:d8:08:06:7c:6b:a0:
                    df:87:c4:d2:f4:cf:da:b6:d5:be:10:66:8a:4a:7e:
                    0c:64:56:89:43:66:13:88:d9:14:03:54:98:04:42:
                    3e:38:c9:98:66:f9:c3:87:31:73:e7:77:94:97:48:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:AB:2B:90:6C:93:1F:45:B4:4B:A8:CC:5C:50:C6:57:A0:B3:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bbd06dc-629a-389a-8444-60f1b9c11e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:72:67:8e:8f:f2:84:0c:16:5a:9e:f6:b1:b0:e9:b8:de:a4:
         90:1e:b1:89:c9:df:91:61:17:0d:51:ce:bd:83:fc:33:33:e2:
         c0:80:3b:c2:ed:94:7b:b6:f0:72:6c:af:34:95:23:88:6f:4c:
         0e:11:07:bb:f0:25:64:f5:61:81:93:30:85:2a:16:09:0f:49:
         0f:d7:0a:bc:46:18:3b:72:6d:ee:ad:84:d3:32:e9:4a:e3:1b:
         e2:d6:e7:1f:47:38:2a:1c:28:af:ba:e2:f8:0b:d6:e3:83:10:
         53:81:c4:c8:ea:19:41:8b:82:54:6a:bf:cc:fe:89:aa:a1:73:
         b0:dc:d8:63:7c:12:50:a8:64:81:69:b8:30:05:ad:29:30:7f:
         54:c2:82:54:6a:9a:77:4e:16:b8:61:31:2e:0b:2a:dd:34:db:
         49:b7:9b:77:12:0a:1d:2f:69:55:5f:39:7a:59:49:10:7a:e3:
         50:b3:69:86:9a:4a:df:44:5e:37:da:3f:44:cd:24:7f:32:ec:
         22:f7:2b:0b:0b:80:a0:70:04:7d:bc:d4:b3:cf:d4:9a:3d:b3:
         52:6d:c9:b0:49:ff:bc:17:9a:34:7a:88:e5:37:94:23:9f:ec:
         b0:73:ae:97:29:be:52:47:97:01:22:a7:73:8c:a5:6e:4b:c7:
         ff:ab:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:23:56 2025 by rpki-client