Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db17252d-ab26-3e5e-b252-e9241e41e623.roa
File:                     db17252d-ab26-3e5e-b252-e9241e41e623.roa (raw, json)
Hash identifier:          T/EH9BarB/ytFdnCikMpGHpzs3TGu13stXWBM8adYgs=
Subject key identifier:   C4:02:B0:26:32:EF:D7:2E:1D:D9:3A:2D:AF:CD:14:15:50:4F:85:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAABCB15730CBB6F985C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db17252d-ab26-3e5e-b252-e9241e41e623.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ab:cb:15:73:0c:bb:6f:98:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1813be63-4ffc-454b-bda7-0caf0e819166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ce:87:3a:62:2c:5a:1d:1f:64:d3:92:a4:fa:
                    d8:03:89:90:e7:c7:e5:1f:11:6c:1c:f0:94:c9:78:
                    25:47:14:a0:43:40:ad:21:89:69:55:dc:81:96:66:
                    37:28:d8:14:6f:c9:72:76:65:d7:21:9d:88:28:8f:
                    f4:29:90:c2:ab:45:6d:de:a9:11:5d:1a:a4:23:f3:
                    d8:9e:c3:cf:e2:66:16:67:38:15:86:68:84:3f:e5:
                    ad:9a:fd:20:bc:f1:9d:37:a2:9c:d6:22:8f:d2:91:
                    07:b0:f4:dd:67:e4:68:f4:79:ae:f6:11:8a:7b:bb:
                    ff:50:56:0a:94:b1:25:98:a7:1d:4a:1a:2c:f9:0d:
                    63:90:a9:4f:cc:b2:6c:60:01:8f:2d:9b:49:50:ea:
                    dd:51:02:a4:bb:1b:b6:67:4f:c5:da:98:d1:07:dc:
                    f6:44:2f:60:16:36:ab:fa:5f:eb:81:15:88:98:56:
                    dc:8c:72:e1:bb:9d:3f:49:3a:b9:c1:32:96:e5:8e:
                    c7:f8:9a:b1:bc:3b:e8:82:43:73:c2:86:92:68:06:
                    c3:60:3c:64:8d:48:01:5f:dd:75:d5:3e:7a:49:17:
                    e7:54:17:85:93:2a:94:da:77:53:1c:ef:16:84:69:
                    52:6c:04:90:84:16:69:09:26:bd:fa:14:dc:9c:2d:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:B0:26:32:EF:D7:2E:1D:D9:3A:2D:AF:CD:14:15:50:4F:85:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db17252d-ab26-3e5e-b252-e9241e41e623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:21:d6:88:21:e4:ea:12:b3:29:50:0f:98:04:21:65:c5:ec:
         4a:ad:fe:2c:3c:df:f5:90:1f:7f:da:ae:99:d9:f4:d4:61:b0:
         1d:b3:32:bc:42:0e:9b:89:01:4d:8c:50:92:52:8d:53:43:52:
         d0:34:93:3b:57:28:2f:a7:bb:16:c6:c3:ff:2f:9d:d7:ac:f9:
         4b:6c:09:b9:90:ba:b4:84:c0:43:bf:e6:76:ef:a2:ee:d3:4e:
         a4:a4:cb:d8:88:f4:41:6a:a7:0c:e7:fc:fd:ba:22:9e:95:61:
         26:11:5a:9f:23:e8:1b:18:ec:53:de:56:e5:c1:43:fc:93:ba:
         ea:f6:86:d9:1e:bd:bf:22:71:03:60:18:a4:34:7f:88:0e:70:
         44:0f:67:2f:c2:52:17:e3:b2:49:48:a9:fa:1e:3b:10:de:9b:
         01:3c:cf:0a:e5:b9:42:fb:a9:93:1e:e8:80:83:b6:17:a0:18:
         5a:94:b5:e1:56:e3:67:7d:90:ae:77:87:a2:1b:c0:12:14:5e:
         f3:e0:46:af:c0:96:30:2d:87:49:e1:ba:ea:cf:31:6b:0c:1b:
         62:db:65:50:3b:42:74:b6:40:5c:7b:c0:ab:77:c8:a2:53:47:
         6e:58:2e:9b:89:b2:77:c7:f7:19:8b:26:10:16:ee:04:36:80:
         3b:34:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:13 2025 by rpki-client