Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dbea71-11dd-3a49-abd3-bd1161739f84.roa
File:                     76dbea71-11dd-3a49-abd3-bd1161739f84.roa (raw, json)
Hash identifier:          Ahm+4xPD0423tWK6cGTXgK8dmZCou+UpNaBWWwahjVg=
Subject key identifier:   4C:D0:74:6D:50:44:69:6B:0A:07:B9:D2:CD:FA:C3:76:91:D1:A9:0A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB538A2095745FB49268D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dbea71-11dd-3a49-abd3-bd1161739f84.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:53:8a:20:95:74:5f:b4:92:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0f60730b-8bea-4e87-b2ff-8616b5acbce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:d7:1b:2f:23:e6:71:38:c5:60:b9:0f:0e:
                    87:aa:ad:0e:4c:df:a3:cc:d3:23:fe:df:f7:a4:83:
                    3c:e2:99:0f:86:12:ed:62:c1:7f:9f:39:f5:2a:cc:
                    4b:62:2b:26:b1:7c:39:3a:2e:11:2f:41:3b:b4:4d:
                    8d:88:0f:c3:a6:ac:ea:23:ae:ea:c6:fb:3e:f5:01:
                    e3:30:20:27:db:ba:76:c3:9f:0d:df:f5:1d:5f:c9:
                    8f:e2:39:b0:ce:48:b5:79:51:c3:98:60:69:bb:08:
                    d6:44:69:fd:f3:8f:25:95:05:82:17:4b:b2:79:f2:
                    09:e0:c6:77:c0:2d:4a:3c:d9:84:6b:9e:a6:de:d4:
                    ac:6d:08:87:98:57:7b:71:e6:9c:a8:c8:34:46:78:
                    f9:4d:4f:c5:ba:d5:52:e8:12:bd:64:80:a9:53:2a:
                    f1:6d:82:4b:a0:7b:f3:7c:0e:fe:b0:ad:69:28:34:
                    cf:66:10:71:e9:84:0f:85:ac:ef:d5:a2:81:0b:3e:
                    3e:fd:d3:ce:3d:26:70:de:db:db:38:1c:76:4d:45:
                    e2:61:9a:90:ef:cb:9e:58:da:26:2b:d4:32:48:c1:
                    e2:68:cf:5d:33:b3:99:79:53:41:d7:d0:0c:43:c3:
                    ea:be:07:ba:52:20:ff:fb:bf:87:3a:3e:98:39:33:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D0:74:6D:50:44:69:6B:0A:07:B9:D2:CD:FA:C3:76:91:D1:A9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dbea71-11dd-3a49-abd3-bd1161739f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:a3:c3:21:8d:22:ff:81:dd:b9:4b:d0:1d:14:0f:a3:12:0b:
         87:b9:f4:3e:82:56:11:56:42:33:19:08:37:15:3d:6b:1a:1d:
         21:d9:45:78:a2:e1:93:f2:d3:a0:3c:4b:6c:94:0f:cb:82:65:
         d4:67:4c:42:14:35:79:3f:ac:3c:eb:99:eb:62:79:b9:93:37:
         5e:ad:ac:6f:93:9d:62:c0:f4:5d:a0:ba:7e:b8:b9:7b:7f:81:
         04:43:fd:f5:cb:e9:ce:5b:7a:fc:69:3f:a9:87:e5:ca:4c:e4:
         9a:64:71:a0:14:8a:1b:b3:49:e6:da:0d:05:29:1a:4a:dc:81:
         d2:24:ef:f2:cc:d6:6d:64:86:70:ef:f1:f7:52:ed:73:c5:5f:
         37:d2:03:2a:dc:40:80:ec:04:de:22:e2:b8:a5:49:09:61:27:
         2b:ab:f7:e2:1f:b9:2f:18:c0:17:05:90:95:33:b6:87:ae:83:
         6f:91:52:5f:fc:67:cd:a9:dd:c3:6d:48:b4:c4:8e:52:40:17:
         9e:bb:e2:2d:c0:4a:36:22:4b:df:a9:ec:65:a3:3c:96:73:43:
         a7:a2:94:db:ce:67:76:6c:40:a8:ba:39:49:35:c7:8c:d5:89:
         71:2f:c7:51:1b:93:c9:79:ec:4e:31:a1:71:35:76:ad:08:34:
         a7:67:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:01:18 2025 by rpki-client