Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc26e992-9a06-3ce2-8077-7deb6448bd46.roa
File:                     fc26e992-9a06-3ce2-8077-7deb6448bd46.roa (raw, json)
Hash identifier:          D/6IO84a0mtW4EjDEd7nVUAGeBqZ93mKE5eNFtmOM7Q=
Subject key identifier:   16:12:61:ED:6F:DC:CA:2C:24:D2:7B:E4:4B:02:FC:47:04:26:CB:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAACBC550C86496E01B100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc26e992-9a06-3ce2-8077-7deb6448bd46.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ac:bc:55:0c:86:49:6e:01:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=efccbbfa-6ace-48e1-85cd-0c81f581ca70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:51:50:2d:54:68:59:32:0e:c7:8a:d2:74:
                    2a:7d:b6:56:63:c5:c9:61:04:3a:80:18:12:dc:16:
                    56:a1:59:0c:17:0e:d0:02:87:c6:4e:5f:57:26:83:
                    70:1f:7a:50:b7:46:66:d6:7c:ed:99:39:8a:d4:0a:
                    37:b4:17:41:45:ed:c7:7a:4a:75:57:2d:d0:b0:a2:
                    35:04:d6:5f:49:ab:23:0b:41:ed:88:37:91:19:7a:
                    d1:39:0a:be:97:0c:c3:e8:e5:b4:0e:eb:7e:42:9c:
                    ef:b4:87:81:ae:af:d3:3e:5d:b1:a9:a5:9e:6a:e6:
                    87:ae:19:ef:c1:b2:d4:29:bb:8e:ac:81:97:34:c6:
                    19:c7:50:3f:54:bd:0e:ec:bb:c9:82:07:bc:14:4f:
                    dd:bb:9b:92:4c:13:56:c1:f7:2d:65:f6:c3:e4:3a:
                    d0:ca:da:9b:e3:7b:e5:03:85:bc:09:e7:0f:32:7d:
                    66:0a:ed:91:87:70:5e:8b:93:01:9d:02:44:fd:87:
                    06:2b:94:af:33:77:47:e0:f4:a9:d9:80:6b:da:7b:
                    bd:b9:e6:0f:9d:57:c1:a5:dd:40:47:6a:f9:3b:f8:
                    bf:5c:fe:d5:de:7d:88:d3:38:3c:7a:ea:76:dc:da:
                    d3:d7:0d:af:ff:c0:1c:fb:0b:e9:b9:fc:ae:89:95:
                    a7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:61:ED:6F:DC:CA:2C:24:D2:7B:E4:4B:02:FC:47:04:26:CB:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc26e992-9a06-3ce2-8077-7deb6448bd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:0e:69:3d:02:24:08:c1:af:8f:e1:c6:cb:d6:b5:ca:75:
         01:53:af:16:36:0d:99:78:ff:aa:ad:99:6c:84:d0:46:e0:30:
         97:e4:72:59:dd:60:3c:59:64:8b:ec:3d:94:71:e2:70:33:b9:
         21:0b:f3:3d:35:78:23:f6:83:4e:9c:30:69:dd:fb:e2:8d:4a:
         2a:b1:36:89:ac:e1:2a:5c:10:d5:78:b9:7e:5a:84:ea:89:8e:
         a4:a4:a8:62:3a:8e:09:42:13:27:82:10:5c:31:66:c6:06:03:
         6b:6e:d5:99:b8:e3:f2:3b:42:a6:1d:03:53:d6:1f:d2:8f:73:
         de:0e:20:b7:9a:f9:e2:5a:ec:e2:c1:b2:29:6e:6d:e1:06:1f:
         55:74:a4:42:38:59:23:cd:92:17:75:60:4e:0a:51:7c:fa:1f:
         a0:91:67:05:d1:34:f7:71:f3:26:8b:32:fb:0b:06:58:c6:06:
         15:2c:00:f0:b0:57:99:5a:1d:56:4a:7f:50:7a:40:68:94:e7:
         42:99:0d:f7:49:eb:30:e5:cc:68:d5:19:69:0b:73:94:e9:86:
         05:f8:24:db:fa:5d:5a:f7:86:d9:a2:ba:88:75:81:dc:8c:2d:
         2a:39:a5:02:30:60:91:df:01:42:65:a4:3b:99:81:56:8f:2d:
         07:0a:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:45:58 2025 by rpki-client