Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8094833-4322-3783-b9ec-1dae0fd40d44.roa
File:                     b8094833-4322-3783-b9ec-1dae0fd40d44.roa (raw, json)
Hash identifier:          G+gF3XfqgsIqlNdHPJLfxyVRE9S/pADz1w3pTV0FHhM=
Subject key identifier:   E1:8C:71:05:78:02:B4:50:4C:8B:88:AC:EA:E1:A2:96:39:DF:D3:66
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAAC7660E661D2EE523300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8094833-4322-3783-b9ec-1dae0fd40d44.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ac:76:60:e6:61:d2:ee:52:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=63c2f96f-6114-41b4-bf9b-5eb3703cf579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:ff:5d:86:7c:25:d6:1d:27:ef:28:a7:d9:
                    28:34:bd:20:74:43:a4:83:f0:be:9d:b2:54:d4:27:
                    29:92:9c:7b:6c:ce:44:ba:4d:05:c0:cd:f5:91:a3:
                    8a:4e:4e:b0:64:98:24:b8:5f:1a:e5:f5:9c:b8:07:
                    b9:b4:c2:2b:ea:c1:61:69:80:70:b1:00:83:8c:c3:
                    3e:6b:97:7a:7b:e3:b0:a8:1f:ff:28:df:b7:52:7d:
                    80:f7:b0:ca:a7:5d:00:08:2b:81:0e:e8:81:39:cb:
                    47:48:b2:c7:14:c9:ac:57:5b:bb:a6:63:2d:8d:90:
                    dd:b4:4b:15:97:99:53:67:34:3c:da:88:f6:3c:4b:
                    fc:30:76:ca:5b:55:a4:05:e4:0c:7e:78:a0:0c:ed:
                    ca:98:1e:5c:93:0e:3f:c3:6a:55:09:dd:18:8a:8b:
                    98:e5:69:e9:32:c4:b4:de:55:70:85:63:8f:7c:36:
                    5a:11:07:24:dd:b3:1f:6f:bb:4b:d5:b1:cf:c3:1b:
                    07:26:d3:70:94:75:08:56:c5:34:d7:74:fe:11:e4:
                    ff:2f:5d:a1:6b:50:57:d6:c1:e6:e2:89:89:1c:d1:
                    dc:2a:57:d2:d0:b1:67:96:f3:c3:a0:ed:f5:51:08:
                    e8:5e:47:33:80:c3:b9:5d:1e:a2:82:c7:53:e5:13:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:71:05:78:02:B4:50:4C:8B:88:AC:EA:E1:A2:96:39:DF:D3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8094833-4322-3783-b9ec-1dae0fd40d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:61:e3:4e:0b:ac:74:01:94:0f:06:e3:f4:b9:dc:2b:1d:
         63:2e:fc:15:bd:e9:15:b5:90:41:2f:8b:20:28:64:8e:b2:ec:
         59:19:17:1f:4c:69:87:bf:a4:f7:c8:76:53:cc:ed:48:44:cf:
         fb:d9:35:e8:08:40:7f:36:7c:2d:a4:06:b5:25:5d:f7:f0:4f:
         c2:51:03:9d:7d:28:19:ab:26:bf:d0:1e:e4:ab:8f:1f:f7:4c:
         32:b5:a3:c0:a3:3f:b7:90:7b:65:20:4a:0b:a5:09:bb:07:d3:
         b8:3a:c8:4c:50:a1:6f:33:78:8a:e8:b0:b0:a7:5a:bb:97:20:
         7e:46:30:3d:7e:87:78:65:12:02:46:a4:96:b4:3e:33:a5:07:
         60:71:da:96:d9:8c:61:e6:2f:31:8b:ea:94:87:c7:b3:96:17:
         a1:17:e7:ff:67:4a:48:e8:e3:f7:67:bb:7c:b9:62:9f:00:bc:
         63:29:72:1b:97:4d:de:44:a9:3d:e3:39:b4:49:6a:01:34:db:
         0f:e1:98:ff:97:17:1f:2a:d5:d0:3b:7f:33:d8:09:49:7e:a8:
         4a:52:14:fe:59:ad:43:10:59:f5:ef:1e:b4:ce:ca:a1:5b:8c:
         50:5a:0e:9e:75:aa:0b:91:65:73:fd:c9:a5:f4:d6:61:d3:3e:
         c7:5f:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:25:35 2025 by rpki-client