Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79c0550f-bfa5-3450-96e4-4fd66bfa2cac.roa
File:                     79c0550f-bfa5-3450-96e4-4fd66bfa2cac.roa (raw, json)
Hash identifier:          lV8RnduUW06MsJJ3n4MxZAwZNpI4VhT9USwJDW8Qn08=
Subject key identifier:   A1:81:A5:45:4E:45:F5:1B:C0:8C:CD:7A:42:5B:C7:6E:FD:5C:55:0F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB1D749FB9F6BF71EACE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79c0550f-bfa5-3450-96e4-4fd66bfa2cac.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b1:d7:49:fb:9f:6b:f7:1e:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6202475f-9c1a-4888-8847-423503ba2510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:1d:28:3c:03:4c:c0:10:e4:70:4d:7f:2a:
                    1a:08:1d:a9:1b:ce:d3:31:d6:46:12:dc:5c:e3:f8:
                    a3:6d:90:30:19:64:25:ca:79:d6:da:02:61:66:5e:
                    ca:14:1f:d1:be:18:33:63:df:1f:7e:76:a0:8e:8c:
                    2b:3f:60:5e:db:b5:a0:e6:c4:80:08:96:4e:f1:b9:
                    63:6c:13:54:ab:1c:e7:91:c1:20:64:83:42:7c:31:
                    ff:ee:0a:22:ab:2c:ea:94:f7:f4:03:c3:53:1f:63:
                    11:11:09:13:59:6c:4f:13:9d:0f:55:64:72:9d:49:
                    bd:8e:dd:b0:9b:c9:50:2d:9a:92:82:c2:94:76:03:
                    6c:26:01:c8:15:bc:8d:c2:74:bf:8f:a5:5e:57:31:
                    32:86:f8:e3:60:c8:e9:22:bd:cf:67:4b:9d:95:cd:
                    03:da:0e:c0:66:b3:73:9d:f8:4e:5d:f1:78:fb:2c:
                    5f:a6:e7:0b:a6:aa:db:b6:4b:91:ad:48:26:8c:62:
                    7a:5d:73:63:5f:15:c2:4c:10:00:5e:89:84:77:c1:
                    91:96:83:7f:c4:27:02:fb:d5:cd:4e:fa:11:81:8c:
                    c6:10:65:e5:fc:90:85:cb:92:55:98:95:4f:f2:09:
                    d9:83:61:6f:c2:6d:aa:4e:69:7e:11:0a:5f:c4:90:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:81:A5:45:4E:45:F5:1B:C0:8C:CD:7A:42:5B:C7:6E:FD:5C:55:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79c0550f-bfa5-3450-96e4-4fd66bfa2cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:1f:02:53:0b:e6:79:db:d8:f4:eb:0b:1a:93:c6:13:49:
         ae:41:fa:bc:a2:1f:ec:34:32:d6:6a:70:a7:21:c5:27:13:1b:
         74:17:e5:77:cc:1d:12:76:a3:39:e8:25:55:e8:08:94:9d:09:
         c7:30:60:1b:8c:82:e5:78:11:50:79:3c:67:c6:ad:d8:0d:f3:
         72:5e:fb:0f:a5:67:d1:51:71:1b:8d:8b:1a:ce:95:5d:ed:85:
         ed:ff:37:61:39:da:01:35:72:85:b2:5e:ee:91:c9:e1:20:f4:
         b7:73:cf:94:f7:48:31:4c:7a:9a:4c:cc:58:4c:25:33:a0:16:
         64:b5:40:dc:72:ec:1e:93:67:3b:82:fd:ee:da:bc:5c:00:89:
         61:31:3d:5c:3c:6b:cc:80:8b:f2:08:ed:b2:f1:6c:47:29:f1:
         63:a3:0d:12:d6:3a:37:d8:f8:cc:71:08:f6:ca:b7:d2:71:6d:
         35:ca:ea:30:31:c9:d4:03:6d:a4:4f:88:e5:99:15:f2:d9:7f:
         06:88:80:de:0b:f4:d8:2e:e0:43:c4:51:0f:8e:e6:7b:ea:36:
         1d:08:cb:5b:4d:66:bc:78:e7:3f:6b:bd:82:3d:cd:36:2b:41:
         93:70:4f:21:12:4e:db:62:71:ac:b2:28:f3:b6:a2:d1:21:71:
         8e:39:7e:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurHXSfufa/cerOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NjIwMjQ3NWYtOWMxYS00ODg4LTg4NDctNDIzNTAzYmEyNTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrIdKDwDTMAQ5HBNfyoaCB2pG87TMdZGEtxc
4/ijbZAwGWQlynnW2gJhZl7KFB/RvhgzY98ffnagjowrP2Be27Wg5sSACJZO8blj
bBNUqxznkcEgZINCfDH/7goiqyzqlPf0A8NTH2MREQkTWWxPE50PVWRynUm9jt2w
m8lQLZqSgsKUdgNsJgHIFbyNwnS/j6VeVzEyhvjjYMjpIr3PZ0udlc0D2g7AZrNz
nfhOXfF4+yxfpucLpqrbtkuRrUgmjGJ6XXNjXxXCTBAAXomEd8GRloN/xCcC+9XN
TvoRgYzGEGXl/JCFy5JVmJVP8gnZg2Fvwm2qTml+EQpfxJAKoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGBpUVORfUbwIzNekJbx279XFUPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzljMDU1MGYtYmZhNS0z
NDUwLTk2ZTQtNGZkNjZiZmEyY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD+HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPIHwJTC+Z529j06wsak8YTSa5B+ryiH+w0MtZqcKchxScTG3QX5XfM
HRJ2oznoJVXoCJSdCccwYBuMguV4EVB5PGfGrdgN83Je+w+lZ9FRcRuNixrOlV3t
he3/N2E52gE1coWyXu6RyeEg9Ldzz5T3SDFMeppMzFhMJTOgFmS1QNxy7B6TZzuC
/e7avFwAiWExPVw8a8yAi/II7bLxbEcp8WOjDRLWOjfY+MxxCPbKt9JxbTXK6jAx
ydQDbaRPiOWZFfLZfwaIgN4L9Ngu4EPEUQ+O5nvqNh0Iy1tNZrx45z9rvYI9zTYr
QZNwTyESTtticayyKPO2otEhcY45fok=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:47 2025 by rpki-client