Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa
File:                     be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa (raw, json)
Hash identifier:          3oujOB9G05w3FDxr8y2PinP5YN8DX9UXQSWOwSuZq8Y=
Subject key identifier:   3C:4D:82:18:2A:06:43:49:DD:3F:57:73:1B:A3:12:7B:A0:23:42:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA84B8431ADDED6DAB8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a8:4b:84:31:ad:de:d6:da:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5c1ccde3-3991-4094-8d4e-abe22b8275da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:5a:8b:eb:d2:7a:04:7a:f7:6c:5c:63:b1:
                    12:48:47:cd:e3:03:71:9b:49:d6:ee:f2:42:15:32:
                    b5:e3:0d:fa:1a:ed:3d:69:a1:af:ed:aa:1c:c1:47:
                    8d:00:4a:86:2b:f2:2b:b1:f2:ef:e1:cc:5b:fe:09:
                    4a:66:b9:e1:53:b1:b0:71:92:b9:c1:6c:91:59:89:
                    b9:48:fa:7d:39:22:42:41:b4:6d:8e:b4:c7:36:bf:
                    9a:3a:20:8c:bd:bc:70:00:04:9b:2e:ee:58:6c:de:
                    8f:5e:a2:dd:f0:59:3e:66:c7:6b:71:76:96:7b:25:
                    82:8a:86:53:0a:21:71:9d:39:e2:fc:56:5f:f8:e7:
                    00:59:0f:d6:45:6b:36:05:ca:d1:23:1e:25:e3:77:
                    ac:ef:c4:21:18:50:a8:27:96:06:6d:1f:19:2e:cf:
                    ed:f7:b2:81:8b:92:2d:10:ef:61:f4:fe:f2:42:ef:
                    1a:76:39:12:0f:bf:d6:a5:af:24:5a:f7:ce:2c:37:
                    98:77:b9:f5:d8:c4:e9:66:55:15:0d:a9:1c:b0:25:
                    5f:4b:2f:cf:77:d6:ba:9d:55:90:f9:97:5c:ce:99:
                    b3:8c:b7:c4:63:a9:2d:db:b3:46:51:83:2a:9e:6c:
                    22:43:25:a6:7d:5d:e9:3c:54:0c:08:59:11:69:67:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4D:82:18:2A:06:43:49:DD:3F:57:73:1B:A3:12:7B:A0:23:42:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:44:8a:08:8d:96:36:f2:a8:2c:7b:d7:73:c2:d9:dc:59:
         3a:19:cb:05:41:18:e9:ca:b3:99:ef:23:79:b0:fb:df:85:11:
         f6:14:61:e3:36:00:75:1e:36:6c:2b:69:ba:3a:43:dd:68:a7:
         b9:0c:54:ba:63:db:43:c1:c4:80:7c:e7:11:ca:df:a0:0d:4e:
         e9:ed:c3:8a:e1:7b:07:15:2f:54:29:2b:c3:50:41:76:e1:f3:
         6d:f0:91:3d:21:c1:6f:b8:ff:a4:42:da:a0:f8:26:84:31:49:
         85:6c:19:43:3b:2b:35:41:a6:b1:11:94:8b:0b:a7:4a:c1:6d:
         04:8b:44:21:46:49:f3:bd:3b:ae:b4:83:1c:b7:9c:17:17:58:
         ec:9f:c4:5b:52:ce:c6:d5:29:26:b6:09:bc:4d:6e:40:e9:22:
         52:bb:7d:ad:03:17:61:89:39:ea:4c:da:08:89:ef:9d:8f:87:
         92:05:31:17:a2:4b:14:62:9d:0d:32:98:b2:b9:06:4b:24:82:
         42:39:bc:e1:ea:31:d8:b8:fa:b9:49:aa:93:ff:57:a6:f7:7d:
         b0:a3:43:7a:11:9d:98:7f:42:31:93:c1:cb:6e:86:ba:87:df:
         d9:6d:a3:26:21:da:aa:f5:77:13:a6:f4:b5:ca:b4:5c:f1:96:
         9d:30:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:27 2025 by rpki-client