Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0f5165a-ccd0-34b4-945b-653c7be6394d.roa
File:                     a0f5165a-ccd0-34b4-945b-653c7be6394d.roa (raw, json)
Hash identifier:          kFcEZOfSq5db9q1PDJwhDSbEV7BDrOfuzlf5jBgHM0o=
Subject key identifier:   9E:5C:B5:60:B5:AB:F2:5F:69:00:56:20:1B:03:34:7F:C1:03:56:04
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411985218206B3284EC6180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0f5165a-ccd0-34b4-945b-653c7be6394d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        184.63.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:98:52:18:20:6b:32:84:ec:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=51690a09-aaf9-42de-a514-87bf783d8016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:57:71:32:bb:a5:a0:b2:c7:ed:1d:da:db:
                    70:a8:32:85:34:a9:08:27:75:96:08:d5:8f:d0:06:
                    0c:96:9a:11:e1:5c:07:73:ca:8c:3d:4b:40:f7:69:
                    85:2a:4e:67:f0:ce:96:f4:23:91:53:6f:25:c8:4d:
                    6d:7b:9a:d4:17:ab:5f:3a:01:ad:e2:9b:76:c8:18:
                    b3:00:59:52:9c:0a:68:d9:8a:40:39:28:49:5e:c6:
                    93:fb:ae:48:45:d5:2d:d3:33:a7:68:06:99:3e:a4:
                    b9:01:42:d7:6a:9d:44:8c:51:e2:93:28:dd:6b:6d:
                    f1:93:e5:89:6b:2a:31:4b:9a:b9:77:e4:01:86:cd:
                    78:a4:fb:48:79:f7:87:ce:ff:eb:62:7b:98:b9:4f:
                    f2:be:2e:5f:1f:ea:6a:92:1b:62:37:0d:60:64:29:
                    40:e8:52:16:25:59:cb:38:78:0e:69:2d:bd:0e:7e:
                    85:b8:c9:00:ba:0d:5a:40:ef:62:40:e0:1d:8c:65:
                    f9:7c:40:f7:20:e3:83:64:29:a3:f9:00:db:4c:7f:
                    92:89:a3:23:9a:cd:12:09:3d:9e:10:ab:7a:34:ee:
                    d7:11:e7:9e:60:e9:50:35:20:15:bd:3d:c3:f0:d2:
                    f6:d0:8c:26:cc:88:b5:a8:37:18:f9:fe:be:9b:14:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:B5:60:B5:AB:F2:5F:69:00:56:20:1B:03:34:7F:C1:03:56:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0f5165a-ccd0-34b4-945b-653c7be6394d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:30:bc:17:6f:20:3f:fe:4d:cb:df:b6:88:c4:be:84:ac:
         17:8a:cf:49:74:c4:9d:7a:73:e9:55:ec:c5:fe:0e:71:3b:81:
         7c:7e:b8:5c:9e:52:07:92:b9:d8:e0:d9:5a:7d:32:26:94:6b:
         94:d2:21:d0:be:ba:ee:8e:de:df:dc:de:27:75:70:ef:eb:da:
         35:06:57:f4:d1:72:e9:dc:c4:59:fe:9d:27:18:83:8a:17:80:
         98:59:41:24:1f:37:0e:37:17:57:04:df:41:f2:98:cf:5d:62:
         39:d6:f6:d1:41:b7:18:b8:75:10:bc:56:e8:e4:92:ab:69:b4:
         32:fb:97:80:fe:b5:ff:7b:3e:01:c3:9e:c5:10:26:70:a0:13:
         32:da:b3:32:4d:06:0d:09:45:4e:23:aa:e6:bc:8a:38:3f:55:
         4f:ea:51:61:91:0c:7b:db:6d:9a:1c:07:69:e7:9b:58:d1:24:
         c3:a5:99:34:88:84:bc:06:6d:c6:83:9a:e6:cf:ae:60:a9:50:
         cb:8e:82:5c:a9:76:36:ef:cd:f1:5e:40:b7:0d:6d:87:20:1d:
         93:33:dd:2a:90:fc:14:ce:06:06:9e:1d:67:6c:3e:2e:67:2b:
         c0:7a:fe:eb:4e:8a:b9:37:ab:27:2b:94:42:c5:6b:6e:7a:99:
         c1:da:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:23 2025 by rpki-client