Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d96082e2-4b8e-3430-a7f1-43ec85810198.roa
File:                     d96082e2-4b8e-3430-a7f1-43ec85810198.roa (raw, json)
Hash identifier:          6WODdhjucw0NOBGpvZhb6jutxFV/UJKfjVkT2+yHcW0=
Subject key identifier:   5A:12:B0:9F:95:A9:97:3F:19:B9:F9:03:CF:A2:11:F7:8A:47:A7:0F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB5029844EA90427136D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d96082e2-4b8e-3430-a7f1-43ec85810198.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:50:29:84:4e:a9:04:27:13:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d43002ea-4184-448a-b562-7b9faed1084d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:ce:28:72:07:10:f6:a2:4f:89:80:de:1b:
                    04:fd:11:cb:ef:1e:14:41:b0:22:dc:df:07:a4:e9:
                    50:f8:dc:19:29:31:1f:20:b2:4d:60:ab:b6:6d:2a:
                    fd:59:cf:b3:ef:55:5b:5d:6e:a0:6a:2d:c9:80:bd:
                    57:84:c2:30:61:a6:3a:8b:67:bf:35:e3:99:95:67:
                    81:35:4b:c6:79:c2:07:7f:8b:2f:f2:12:ba:f1:49:
                    94:d7:34:8c:e7:0c:85:79:92:a1:2c:54:a4:b3:a0:
                    b3:ca:e7:aa:4e:be:1f:20:66:8c:2f:7c:58:ed:af:
                    18:56:b4:88:db:69:11:17:7c:f7:fa:9c:08:bb:0c:
                    49:e7:c9:38:71:ef:6a:ca:dd:dc:5d:e1:58:2b:c7:
                    aa:ce:1c:1d:72:2a:f9:59:fb:66:65:b2:8f:ca:2e:
                    6b:b5:3c:69:16:bf:17:43:df:7c:ec:6d:74:84:db:
                    e5:6e:07:12:2b:4c:23:73:fe:2c:a5:a6:d6:2e:fd:
                    ff:8c:9c:1f:13:c7:0c:10:27:0d:1a:b5:b0:74:a6:
                    37:c6:2e:4c:51:8b:6e:a1:b2:0a:e9:44:3a:5f:28:
                    51:11:98:dc:ac:c3:d7:35:59:b1:b8:2b:47:c3:f9:
                    6b:9c:84:81:b7:8e:50:ab:05:f8:f2:af:3c:a4:6f:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:12:B0:9F:95:A9:97:3F:19:B9:F9:03:CF:A2:11:F7:8A:47:A7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d96082e2-4b8e-3430-a7f1-43ec85810198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:4f:a4:9a:d1:9a:49:83:78:50:3c:4e:29:28:0e:9d:15:
         fc:13:09:93:eb:7d:cf:e2:98:96:22:9c:bf:d7:28:fd:a0:ea:
         86:19:4d:de:ba:41:42:3b:0e:ec:61:e4:58:25:d5:ea:bc:ec:
         ed:38:bd:68:32:9c:26:92:ea:54:06:28:69:25:ed:8a:d1:7a:
         22:5b:5b:eb:b1:67:da:0a:f8:ea:db:2d:03:55:c3:15:b3:3f:
         f8:50:38:15:21:9a:99:1a:09:25:97:a0:e9:fe:c4:37:66:61:
         b4:83:3b:ec:e2:1b:d6:4c:23:3a:79:a4:ab:68:19:96:44:0a:
         7f:06:da:3e:9e:0e:5c:93:3b:d5:58:98:55:b5:28:b0:8c:c6:
         ef:d1:a8:fa:af:c4:fb:51:eb:3a:0f:2d:50:96:e5:5a:0a:67:
         1b:c5:23:3f:44:ad:63:0d:33:c0:5b:b1:69:82:cf:71:e3:72:
         dd:24:96:56:ed:ed:66:a7:3f:11:c5:64:93:78:b1:7f:b9:73:
         81:d1:99:ec:f8:5e:2f:ae:2b:68:3f:a1:93:e4:37:19:a6:ff:
         00:c6:39:21:90:c0:10:72:d6:92:9b:87:fa:ea:ce:7b:ef:ff:
         c9:76:44:ca:98:3d:d6:e6:ec:2c:15:1b:a4:8d:c8:8a:67:95:
         18:1d:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:42 2025 by rpki-client