Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0f06390-9daf-35dd-ae52-b6532af98e0f.roa
File:                     c0f06390-9daf-35dd-ae52-b6532af98e0f.roa (raw, json)
Hash identifier:          vm3PBrl5fpRK7ZIHUz/5l08siG1CT7zE+Wq55RnGv5Q=
Subject key identifier:   DE:EC:74:3F:89:EB:F3:A9:30:98:40:24:FE:5D:F2:8D:9C:43:D7:6F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8410FAF68B4696731E438D48
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0f06390-9daf-35dd-ae52-b6532af98e0f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        184.62.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:fa:f6:8b:46:96:73:1e:43:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5d66b9ef-d048-456a-98b2-4779a5265310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:79:ef:91:5f:93:40:fc:f7:d9:c8:d5:30:
                    83:79:0d:f4:67:95:4c:7a:1d:a3:3a:71:ce:61:2c:
                    fa:5d:62:05:a6:c6:b7:9e:f3:a2:7a:82:2a:6d:87:
                    97:5d:0e:f1:10:55:ac:0d:fc:73:83:d0:da:a0:cb:
                    ec:12:d6:b9:64:d0:8d:0c:8d:d0:3f:c3:cb:b6:9e:
                    6b:14:4c:e3:07:88:47:d3:0e:25:26:6a:35:5c:84:
                    cc:7b:bc:84:8b:e2:31:be:02:1a:d3:8e:46:cb:60:
                    1f:92:d5:2d:5f:ba:f9:2d:df:26:e4:1b:36:4c:46:
                    5d:c0:1e:23:88:60:90:23:f1:48:b8:24:fe:cd:8a:
                    be:cd:7a:a5:dd:45:92:7d:c4:ea:4d:d6:94:74:68:
                    0f:9f:9c:a9:a3:2c:fc:0e:66:81:8d:ac:3c:44:d2:
                    ed:d1:21:4b:d5:4e:93:cc:46:a4:f6:b9:19:69:35:
                    2d:4e:19:82:f6:8e:ed:00:f4:ca:30:a9:f2:ff:87:
                    cb:c4:d9:9e:5f:3d:a5:e0:c7:18:53:37:a0:20:54:
                    7f:22:2a:83:19:3a:a5:d4:dc:fe:dd:20:82:5d:8f:
                    47:74:5b:26:94:7e:97:ff:c2:e7:52:b9:32:0a:9c:
                    77:99:cf:78:b4:eb:59:1a:9b:79:b0:79:58:af:90:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EC:74:3F:89:EB:F3:A9:30:98:40:24:FE:5D:F2:8D:9C:43:D7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0f06390-9daf-35dd-ae52-b6532af98e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:94:ec:d5:56:28:e2:c7:d0:e8:83:31:1d:3f:b9:53:7b:8a:
         c7:4b:7a:23:79:22:90:05:2c:1f:e5:ca:1a:88:35:5b:ea:b5:
         da:cd:0c:4e:82:10:c6:50:3d:26:74:d9:9d:5e:99:d4:60:4e:
         ec:f6:38:18:7b:41:59:cc:39:07:fc:18:05:da:3f:5c:ff:de:
         c1:c2:e0:6b:cc:4d:ef:77:c8:c8:0b:d5:de:46:19:0c:24:d2:
         6d:79:6f:a4:3f:60:8b:91:47:a2:32:2d:33:cc:89:a6:94:d4:
         7a:37:6a:8d:59:90:4e:d9:a8:5e:72:cf:e6:c7:f1:dd:d8:d0:
         ea:0b:4d:74:ab:4d:4d:3e:04:47:64:55:92:e3:e7:d6:3f:f4:
         c1:4a:24:e8:30:fc:36:3a:1b:e2:5b:61:7f:d9:bf:e9:32:6f:
         74:e6:71:af:5f:44:40:e6:86:e5:7c:87:85:0e:a0:66:55:90:
         6f:c8:4c:46:d8:4a:1a:45:21:e5:e2:48:09:9c:32:9c:8e:04:
         e4:d5:16:21:f6:a0:91:4f:3d:7f:fc:27:01:c2:97:a2:73:d5:
         dc:a5:9f:ef:2c:61:7f:55:6d:ea:e1:c5:2c:b2:f8:ce:88:18:
         ab:c6:5f:b0:08:c3:3a:3c:3e:7f:ea:a8:3b:50:a1:c3:8e:d8:
         48:aa:a2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:29 2025 by rpki-client