Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fef0e50d-c2fa-3820-b01b-2c3d1cfa93c2.roa
File:                     fef0e50d-c2fa-3820-b01b-2c3d1cfa93c2.roa (raw, json)
Hash identifier:          Ifsq2A7T+RyCMAqfRR4nw9oH2CwMzXRmDSWFTuGe6eA=
Subject key identifier:   5C:0E:1F:88:89:B6:99:B4:1D:3B:E1:87:56:C8:5E:4F:C5:FB:34:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAAACD5B97BEAD9BAA7780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fef0e50d-c2fa-3820-b01b-2c3d1cfa93c2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:aa:cd:5b:97:be:ad:9b:aa:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9727c7bf-2ddc-4895-b56e-c87ef74c6a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:60:8c:67:8c:7d:84:61:97:d4:26:47:12:
                    eb:3e:c5:00:5b:26:9d:c2:79:29:c7:6b:9d:de:ec:
                    1a:ac:ad:f9:16:35:81:3c:b6:ec:9b:f5:27:5f:45:
                    81:c2:90:68:b2:db:14:4d:46:27:34:b4:e2:86:b0:
                    b0:5e:1d:68:29:24:0f:bd:61:c8:e1:7b:1d:af:97:
                    89:4a:7d:62:78:67:ac:69:02:e6:b8:0f:85:b3:97:
                    60:55:28:90:22:55:17:fb:4e:e1:6d:0b:2d:2e:a5:
                    46:fd:bf:cd:9b:06:65:f4:05:a4:73:f7:92:16:49:
                    9e:40:ff:63:06:94:a9:32:73:55:b0:08:ef:1d:32:
                    a6:3c:bb:09:ba:26:4e:67:67:e4:d4:07:69:8d:80:
                    ad:1b:57:e6:b1:a9:01:7a:a4:0a:ea:35:8a:bc:80:
                    f8:d2:70:9b:62:65:bd:4b:d1:07:cd:61:01:ea:a1:
                    be:6d:8d:31:1b:ce:d0:7c:41:63:3b:98:b6:76:5b:
                    10:a8:4f:c9:0c:c5:e8:93:d8:67:38:eb:b8:aa:94:
                    d2:68:1b:f5:29:e4:a9:8b:32:57:b1:f8:e1:39:05:
                    e3:e3:4d:f1:62:dd:05:9c:87:af:42:61:17:e7:df:
                    b9:c0:a0:37:ef:75:f7:ad:8c:36:e3:b9:7a:17:01:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:1F:88:89:B6:99:B4:1D:3B:E1:87:56:C8:5E:4F:C5:FB:34:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fef0e50d-c2fa-3820-b01b-2c3d1cfa93c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:09:51:d1:43:52:db:66:a9:2e:ce:76:f2:6e:65:1d:0e:e4:
         7e:80:e2:e8:68:7a:5b:cb:73:d6:16:aa:4a:3e:7e:2a:55:c6:
         dd:4c:04:2c:f7:61:34:77:f8:8e:96:fa:73:72:b1:4e:3f:c6:
         e0:15:f1:9c:77:6e:bd:a9:bf:f8:55:bf:91:1a:a1:6d:e4:09:
         e2:bb:db:3f:79:55:9a:18:3b:76:9e:86:ca:3c:94:ee:40:b6:
         cf:a3:1d:52:b0:ba:63:8b:57:3f:d9:12:4a:a2:2c:18:fc:83:
         aa:6f:b4:99:f8:43:18:e8:da:14:a7:0a:df:59:fb:9f:80:33:
         1b:e1:04:0c:18:18:02:66:5e:22:56:f0:78:14:0c:ec:60:ed:
         7c:c7:ae:20:c1:a4:43:20:2c:37:36:e5:15:e9:0f:23:c5:90:
         70:09:08:ee:46:5e:75:fc:a6:35:9b:58:82:a6:8b:8b:35:9c:
         a6:f7:3a:7a:18:35:59:8c:88:cf:db:cf:e9:39:07:df:bb:12:
         35:ec:f9:bd:55:da:2f:2e:b9:1f:98:dc:43:ea:5f:e9:5d:73:
         f8:6e:1f:7b:d6:3d:0d:92:85:b5:9d:ee:e4:fd:4a:d9:eb:c0:
         15:fb:79:1e:c9:b8:e3:68:bf:d4:3b:62:b0:33:d3:05:0b:43:
         39:55:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:27:24 2025 by rpki-client