Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82dea014-4333-3a59-bf77-18de3a45ec0c.roa
File:                     82dea014-4333-3a59-bf77-18de3a45ec0c.roa (raw, json)
Hash identifier:          JCtZNcJO0xoTzNaHnRk/5RHOegMN0EgrgbSnLHivqDM=
Subject key identifier:   B6:20:78:1B:C1:C8:63:AB:FD:1A:0B:17:6A:27:39:06:62:7F:EF:8E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB0A614E1B4B05F7A69AF
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82dea014-4333-3a59-bf77-18de3a45ec0c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b0:a6:14:e1:b4:b0:5f:7a:69:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=bb8c82e2-ce1a-431c-ba27-d5b2ee1a8bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:f9:03:65:06:a3:1a:4c:da:eb:13:9e:77:
                    da:4d:e8:3e:f2:ef:fc:bb:d6:42:15:bc:ac:f0:12:
                    81:57:06:f4:44:3c:b3:d4:76:15:3b:57:55:c9:3f:
                    82:08:87:71:2b:87:74:ce:3f:db:7c:6e:1c:3d:ec:
                    b9:cf:e9:aa:7a:e1:01:53:3a:ad:3d:9c:37:91:8e:
                    b8:59:9c:83:28:bd:6a:cc:65:8f:89:ec:ff:6d:ec:
                    d7:63:02:5e:82:54:1a:c6:f0:dd:36:fd:31:be:aa:
                    b8:0e:c0:8a:32:a0:8f:92:be:d1:e9:09:bd:ae:7d:
                    c8:3d:e6:21:4f:a3:21:38:0f:f7:56:a1:1f:16:b7:
                    a8:d4:5d:b3:45:ba:a9:e9:29:b3:d0:5f:8c:5a:b7:
                    ff:83:fd:eb:99:a9:7d:bf:4b:41:08:67:ef:0a:06:
                    2c:77:e3:6a:3c:83:cd:27:4d:bc:ce:19:f1:d0:d1:
                    92:ac:c0:19:c7:2e:3c:d6:dd:89:8c:3a:de:26:2b:
                    04:dd:e9:fb:7f:7e:aa:a9:0b:c9:f3:7f:5e:0e:3f:
                    d0:0f:fc:58:b6:d3:e0:ed:bf:bb:59:d3:cf:1b:c9:
                    73:98:e0:c5:7a:21:4c:59:35:3e:e9:e0:e0:5b:bb:
                    a8:7b:5c:42:e8:e1:62:ed:3d:85:51:97:bd:e3:6c:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:20:78:1B:C1:C8:63:AB:FD:1A:0B:17:6A:27:39:06:62:7F:EF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82dea014-4333-3a59-bf77-18de3a45ec0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:34:48:64:46:d6:06:f4:46:7b:83:5b:a3:f3:db:81:1e:28:
         a7:69:58:f2:aa:4e:a4:0b:d9:ec:4b:f6:ca:6b:97:88:f6:b8:
         e4:56:3a:58:41:6c:1b:72:8a:01:54:eb:ad:69:b9:47:41:e5:
         b4:1a:da:1f:c6:0e:18:03:24:48:8b:07:27:73:40:37:67:55:
         9b:c8:ca:0a:47:9f:aa:fe:af:bb:ef:c6:a9:28:9f:21:61:6c:
         41:75:41:36:a7:b3:1d:ee:b8:8c:c5:a3:8f:40:d2:e4:40:f6:
         c9:0b:ed:a2:c4:7c:98:94:44:ae:dd:55:13:ee:49:26:64:6a:
         43:36:2e:7c:11:6b:3b:96:e2:53:2f:e5:c6:18:d9:92:ff:4f:
         8a:20:71:5d:23:2c:34:8b:19:26:72:9b:33:b2:4f:f2:ff:ae:
         14:2c:82:4a:b3:7b:fa:cc:80:82:36:af:e4:86:14:98:7d:20:
         58:41:7c:6e:54:62:f5:b5:b4:57:1a:8e:a1:40:61:8d:e1:ed:
         1a:a8:fd:c5:c1:2a:3c:6e:c8:81:d0:1b:bd:55:e2:84:c0:07:
         c7:98:42:70:73:51:dc:e6:4a:dc:6d:b9:c3:50:d4:1e:20:d5:
         30:d7:17:f5:5d:d7:81:47:2e:8d:88:13:00:b2:2b:d8:42:4c:
         27:53:68:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurCmFOG0sF96aa8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YmI4YzgyZTItY2UxYS00MzFjLWJhMjctZDViMmVlMWE4YmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nT5A2UGoxpM2usTnnfaTeg+8u/8u9ZCFbys
8BKBVwb0RDyz1HYVO1dVyT+CCIdxK4d0zj/bfG4cPey5z+mqeuEBUzqtPZw3kY64
WZyDKL1qzGWPiez/bezXYwJeglQaxvDdNv0xvqq4DsCKMqCPkr7R6Qm9rn3IPeYh
T6MhOA/3VqEfFreo1F2zRbqp6Smz0F+MWrf/g/3rmal9v0tBCGfvCgYsd+NqPIPN
J028zhnx0NGSrMAZxy481t2JjDreJisE3en7f36qqQvJ839eDj/QD/xYttPg7b+7
WdPPG8lzmODFeiFMWTU+6eDgW7uoe1xC6OFi7T2FUZe942yY+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYgeBvByGOr/RoLF2onOQZif++OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODJkZWEwMTQtNDMzMy0z
YTU5LWJmNzctMThkZTNhNDVlYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD9PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg0SGRG1gb0RnuDW6Pz24EeKKdpWPKqTqQL2exL9sprl4j2uORWOlhB
bBtyigFU661puUdB5bQa2h/GDhgDJEiLBydzQDdnVZvIygpHn6r+r7vvxqkonyFh
bEF1QTansx3uuIzFo49A0uRA9skL7aLEfJiURK7dVRPuSSZkakM2LnwRazuW4lMv
5cYY2ZL/T4ogcV0jLDSLGSZymzOyT/L/rhQsgkqze/rMgII2r+SGFJh9IFhBfG5U
YvW1tFcajqFAYY3h7Rqo/cXBKjxuyIHQG71V4oTAB8eYQnBzUdzmStxtucNQ1B4g
1TDXF/Vd14FHLo2IEwCyK9hCTCdTaPI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:36:06 2025 by rpki-client