Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2917d-343e-3c21-a0db-5eccd8a650bc.roa
File:                     a6f2917d-343e-3c21-a0db-5eccd8a650bc.roa (raw, json)
Hash identifier:          Ub6mwD8vF1rOCyql/EzZVR8D+bk43Ou3e6ND7eTUv2U=
Subject key identifier:   21:D4:C9:20:4D:78:D3:2E:1F:04:7B:9C:96:F2:0D:EF:86:F7:F8:77
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB50578F3B40DDABDBA8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2917d-343e-3c21-a0db-5eccd8a650bc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:50:57:8f:3b:40:dd:ab:db:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a1a500da-196a-4893-85c2-dd14d60e5840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:1f:f6:6c:75:fc:35:fc:a2:8f:dc:03:54:
                    db:76:71:e5:0d:7e:68:0f:2d:5b:df:4a:c7:3b:77:
                    a9:e1:3c:7e:3f:88:f5:74:c3:c3:55:34:23:bb:73:
                    6e:d0:2f:8f:3d:56:43:cf:0f:f6:fd:ab:8b:3b:26:
                    f4:b5:8d:26:41:5c:c9:8b:e3:ab:6c:cb:9a:b6:f4:
                    a6:8c:61:c0:d6:e8:df:73:1d:cf:a3:7a:00:a1:1d:
                    a4:87:8f:10:ca:f4:9a:65:4b:22:cc:89:c4:73:f9:
                    28:c5:5d:c8:8b:6e:57:81:c5:f3:0e:63:d5:a3:68:
                    64:2b:c4:5a:5c:82:75:c7:84:a4:d3:97:43:2d:12:
                    b1:3d:bf:ea:21:5f:59:7f:7f:1a:c5:f5:20:a5:58:
                    14:f8:15:75:69:cd:0d:9b:f1:7f:43:5a:05:c5:c7:
                    a5:75:df:a2:31:c3:f2:5f:cc:8e:87:e9:2b:21:14:
                    b1:b3:14:c7:9e:ff:41:e5:8d:19:ff:87:d8:8c:30:
                    13:4f:c4:ad:74:40:df:b6:1d:b7:ba:47:a9:a7:0a:
                    d3:05:34:8e:e7:9d:c7:4f:7f:e1:36:e5:32:8d:19:
                    a5:f5:a0:11:95:d4:77:5b:a0:dd:f6:b6:6f:4b:d2:
                    56:fb:fb:ef:07:de:dc:7e:5e:47:78:6d:4b:06:96:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:C9:20:4D:78:D3:2E:1F:04:7B:9C:96:F2:0D:EF:86:F7:F8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2917d-343e-3c21-a0db-5eccd8a650bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c7:97:ee:6b:c0:d2:6b:14:e4:cb:93:25:15:22:cd:fe:27:
         69:55:07:ac:85:c4:30:08:23:e3:32:19:7f:b7:64:14:54:3b:
         b0:d8:54:76:20:42:cf:30:a1:bd:1b:6b:fb:09:06:b7:49:91:
         ce:04:e6:8b:99:70:68:1d:fa:65:2d:5d:60:32:bb:b0:dc:c4:
         97:49:b1:2c:bb:6c:38:25:36:cd:25:b1:87:3a:26:e9:61:e3:
         2e:11:d1:d9:68:08:d3:66:12:d6:f7:07:fa:6a:3b:a2:28:c0:
         1f:f1:64:ca:27:ec:ae:25:44:0e:22:be:b5:e0:1b:ae:bf:3f:
         cd:5d:07:43:f2:54:55:31:f7:00:43:79:11:85:d9:b5:4b:3c:
         7a:c5:ec:17:8c:5a:f1:29:5c:e5:d0:39:6b:62:25:f1:76:4f:
         82:2f:eb:cc:88:5a:2c:da:70:e4:47:58:ca:7b:d5:ee:46:d5:
         de:43:09:7e:f5:e2:a9:57:92:18:9d:ce:47:b3:69:14:c2:77:
         73:c9:bc:79:56:c7:58:33:f0:19:3d:f0:64:b9:35:77:6b:49:
         c2:5a:99:ea:49:9a:e7:57:51:10:90:1c:b5:97:0d:4c:f0:1b:
         34:c7:28:21:e8:c9:a3:02:f4:00:26:65:93:83:a7:18:18:2e:
         94:51:67:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1BXjztA3avbqMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YTFhNTAwZGEtMTk2YS00ODkzLTg1YzItZGQxNGQ2MGU1ODQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4of9mx1/DX8oo/cA1TbdnHlDX5oDy1b30rH
O3ep4Tx+P4j1dMPDVTQju3Nu0C+PPVZDzw/2/auLOyb0tY0mQVzJi+OrbMuatvSm
jGHA1ujfcx3Po3oAoR2kh48QyvSaZUsizInEc/koxV3Ii25XgcXzDmPVo2hkK8Ra
XIJ1x4Sk05dDLRKxPb/qIV9Zf38axfUgpVgU+BV1ac0Nm/F/Q1oFxceldd+iMcPy
X8yOh+krIRSxsxTHnv9B5Y0Z/4fYjDATT8StdEDfth23ukeppwrTBTSO553HT3/h
NuUyjRml9aARldR3W6Dd9rZvS9JW+/vvB97cfl5HeG1LBpYrWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHUySBNeNMuHwR7nJbyDe+G9/h3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmMjkxN2QtMzQzZS0z
YzIxLWEwZGItNWVjY2Q4YTY1MGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPHl+5rwNJrFOTLkyUVIs3+J2lVB6yFxDAII+MyGX+3ZBRUO7DYVHYg
Qs8wob0ba/sJBrdJkc4E5ouZcGgd+mUtXWAyu7DcxJdJsSy7bDglNs0lsYc6Julh
4y4R0dloCNNmEtb3B/pqO6IowB/xZMon7K4lRA4ivrXgG66/P81dB0PyVFUx9wBD
eRGF2bVLPHrF7BeMWvEpXOXQOWtiJfF2T4Iv68yIWizacORHWMp71e5G1d5DCX71
4qlXkhidzkezaRTCd3PJvHlWx1gz8Bk98GS5NXdrScJamepJmudXURCQHLWXDUzw
GzTHKCHoyaMC9AAmZZODpxgYLpRRZwQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:26 2025 by rpki-client