Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f17edc60-d8e0-336b-b365-bac8580dc7fe.roa
File:                     f17edc60-d8e0-336b-b365-bac8580dc7fe.roa (raw, json)
Hash identifier:          f202gItJKaWliy+HuQiMtOlYJGdtQ8Cu7vPq+JnUzFU=
Subject key identifier:   66:8F:FB:F4:A7:73:26:A4:EA:6B:7A:9A:3B:FB:3F:B9:B7:36:7D:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB3464C0250D956736AC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f17edc60-d8e0-336b-b365-bac8580dc7fe.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b3:46:4c:02:50:d9:56:73:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=500d9fa9-1de4-49da-9668-a09c3f4881ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:a0:1b:d6:02:9c:5f:2b:9a:f4:ce:53:1e:
                    e4:3d:5a:4c:29:6c:44:e6:a0:40:73:04:6e:1c:53:
                    c2:95:a1:96:e8:ab:5f:69:e9:fd:6a:a3:bb:1d:06:
                    e8:cc:a3:60:1a:dc:95:66:8e:f8:c2:e0:29:33:95:
                    82:79:22:ae:67:16:ed:4c:69:c8:c5:7c:d4:90:e1:
                    ed:b4:27:04:0b:93:8f:2b:45:2b:ca:fa:51:66:45:
                    61:f6:3c:13:07:f1:3c:33:87:4d:4a:31:60:f2:8d:
                    36:93:51:58:19:5d:10:4b:a8:81:22:af:5d:e1:cd:
                    d3:19:30:89:9d:82:29:55:a6:11:84:51:39:d7:5b:
                    8b:98:00:db:28:64:bc:ec:89:05:da:6a:c2:9b:63:
                    d8:ea:8f:62:02:a2:6f:03:c6:f2:42:6c:6f:1a:da:
                    7e:98:9c:b0:fd:1c:93:fb:24:31:11:b1:01:30:d3:
                    ea:d5:ad:80:e8:1c:13:5f:51:84:74:0a:a0:27:ca:
                    1d:d4:3e:b7:d2:41:90:6d:dd:c3:f4:6c:64:db:c1:
                    d9:1b:b1:20:25:89:88:3d:bc:a4:13:c9:ab:43:f3:
                    75:5c:e1:5b:3c:30:5c:0e:37:4a:63:7a:46:8e:f8:
                    a8:53:8c:10:9f:a7:de:2d:c7:1b:79:b9:55:5a:46:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8F:FB:F4:A7:73:26:A4:EA:6B:7A:9A:3B:FB:3F:B9:B7:36:7D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f17edc60-d8e0-336b-b365-bac8580dc7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:ab:24:42:da:7e:2a:b3:e8:ee:80:e9:7d:87:ba:15:91:58:
         15:4f:e1:02:b3:86:8e:f3:51:68:2e:be:8c:4e:d8:ec:f9:6d:
         31:f3:e8:7b:a4:6e:41:af:6a:42:ff:9a:6b:36:2a:a1:95:92:
         2c:32:84:72:65:b3:9d:30:b7:d9:6c:b8:cb:d7:80:17:e8:b8:
         5a:b5:74:7f:dc:3d:b8:8a:26:ec:5a:7f:de:da:56:90:e8:71:
         ed:f8:b8:c7:4a:97:b0:c6:e1:66:85:cb:d0:f2:e7:48:1d:4b:
         83:8a:4e:8f:17:54:d9:50:d7:8b:fb:c5:ea:5d:6b:1c:48:64:
         c7:94:b3:d3:3e:cb:54:4d:42:cf:2b:b5:00:d1:f2:67:74:dc:
         9b:19:34:02:df:31:22:9e:e2:f6:61:4f:57:8e:db:5f:fb:6f:
         14:28:50:1a:6c:06:ef:b0:c2:e1:2e:12:ca:72:5d:98:52:f2:
         75:6c:15:53:fa:2b:18:4f:1d:ea:39:a8:8c:81:c6:43:07:87:
         22:82:12:fa:28:00:d2:d4:cb:77:4b:d3:f7:81:b1:09:0b:b1:
         75:cb:c5:02:55:c5:69:ea:76:a5:94:ad:de:cd:3b:08:bd:f3:
         94:c4:37:9f:ce:d9:77:cf:59:93:f6:ba:43:40:9a:0b:f7:c9:
         85:7b:d5:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurNGTAJQ2VZzasAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NTAwZDlmYTktMWRlNC00OWRhLTk2NjgtYTA5YzNmNDg4MWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFegG9YCnF8rmvTOUx7kPVpMKWxE5qBAcwRu
HFPClaGW6Ktfaen9aqO7HQbozKNgGtyVZo74wuApM5WCeSKuZxbtTGnIxXzUkOHt
tCcEC5OPK0UryvpRZkVh9jwTB/E8M4dNSjFg8o02k1FYGV0QS6iBIq9d4c3TGTCJ
nYIpVaYRhFE511uLmADbKGS87IkF2mrCm2PY6o9iAqJvA8byQmxvGtp+mJyw/RyT
+yQxEbEBMNPq1a2A6BwTX1GEdAqgJ8od1D630kGQbd3D9Gxk28HZG7EgJYmIPbyk
E8mrQ/N1XOFbPDBcDjdKY3pGjvioU4wQn6feLccbeblVWkZeEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaP+/Sncyak6mt6mjv7P7m3Nn3vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjE3ZWRjNjAtZDhlMC0z
MzZiLWIzNjUtYmFjODU4MGRjN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMOrJELafiqz6O6A6X2HuhWRWBVP4QKzho7zUWguvoxO2Oz5bTHz6Huk
bkGvakL/mms2KqGVkiwyhHJls50wt9lsuMvXgBfouFq1dH/cPbiKJuxaf97aVpDo
ce34uMdKl7DG4WaFy9Dy50gdS4OKTo8XVNlQ14v7xepdaxxIZMeUs9M+y1RNQs8r
tQDR8md03JsZNALfMSKe4vZhT1eO21/7bxQoUBpsBu+wwuEuEspyXZhS8nVsFVP6
KxhPHeo5qIyBxkMHhyKCEvooANLUy3dL0/eBsQkLsXXLxQJVxWnqdqWUrd7NOwi9
85TEN5/O2XfPWZP2ukNAmgv3yYV71Vg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:20:33 2025 by rpki-client