Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fcdfd08-2280-39d9-b940-18536203be3f.roa
File:                     1fcdfd08-2280-39d9-b940-18536203be3f.roa (raw, json)
Hash identifier:          sWNXkHsjU4tw5HpJf1iaWKn8nhm3PEXxyT7UenL3e+I=
Subject key identifier:   A6:BD:C1:89:77:5E:1E:3A:30:51:DD:6A:3B:17:D3:67:41:BA:DA:A0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAAAB69691E07DC24DDAC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fcdfd08-2280-39d9-b940-18536203be3f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:aa:b6:96:91:e0:7d:c2:4d:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2c68ed6f-43fb-40b5-80bc-f19143fa26b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:54:8e:85:6c:6d:4a:f0:4d:cc:ea:35:5b:
                    ad:ac:4e:d6:d7:3e:93:23:b8:e5:b8:60:c5:df:0c:
                    8f:94:73:7d:94:5e:0d:3d:87:34:c6:5e:90:66:fb:
                    91:a3:c5:3c:82:82:cc:e4:34:5a:4f:a5:20:4d:2a:
                    9f:b5:1f:94:2e:47:e1:5a:01:d9:dd:a7:2b:ea:dd:
                    61:7a:31:fd:ef:67:39:5b:4a:82:a8:df:c2:f0:c6:
                    67:d4:3f:df:57:8e:30:f3:95:90:d9:00:e2:e2:c9:
                    13:bb:02:7a:02:ea:a2:f6:3c:35:d4:e2:e6:a3:00:
                    99:fa:92:0e:8c:02:5d:38:23:f6:41:dd:7d:c9:d9:
                    76:91:92:f4:e3:f4:a0:50:e0:d5:74:2c:88:84:42:
                    f3:ba:d0:0d:5f:ac:ed:e0:c9:82:ed:98:6e:57:8f:
                    fc:3a:3e:1b:90:3a:20:24:8c:70:86:81:ee:0d:f6:
                    1e:ae:1f:da:1d:56:7b:23:62:1c:89:7e:b6:49:a9:
                    7c:69:35:e8:4d:d0:0a:9d:b7:f0:9f:37:91:ba:84:
                    82:e8:a7:32:c3:0f:67:5a:fa:dc:4a:9f:8e:7b:30:
                    a6:fe:88:8d:13:29:6f:c3:16:6e:2c:7a:84:28:bd:
                    6b:36:af:ff:55:dc:26:95:b4:0a:91:d8:b2:c2:f1:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:C1:89:77:5E:1E:3A:30:51:DD:6A:3B:17:D3:67:41:BA:DA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fcdfd08-2280-39d9-b940-18536203be3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a9:a9:48:dd:a6:8a:24:39:de:d9:9a:1c:00:4c:de:b0:4a:
         d8:68:f0:dd:ec:5d:be:5e:23:38:57:48:ba:7e:ae:37:c4:5d:
         9b:71:07:ca:d4:eb:28:52:cc:45:10:eb:81:db:83:4b:eb:3f:
         75:9e:2d:7d:97:97:a4:0f:ed:d2:49:4e:86:85:fe:69:e0:7c:
         3b:d2:31:7c:6a:19:12:57:c2:8e:e3:9e:04:05:ab:84:26:a2:
         97:1d:57:63:f8:24:d3:df:39:06:5e:9f:74:20:3b:9f:f6:95:
         6f:44:1e:33:75:c5:a5:9b:ec:1b:26:9b:e6:14:80:53:cb:8f:
         2d:46:a2:dc:0d:7a:e6:25:0d:6b:40:38:2c:5d:8c:d2:19:f7:
         d6:1f:3a:fb:25:29:7f:b5:08:0f:a4:6b:7d:32:65:93:20:ba:
         7b:2a:be:1d:6e:84:e3:1c:cb:db:1e:1e:8a:5f:5b:ec:48:fd:
         ad:51:6e:32:2c:78:69:05:fe:94:b7:56:39:03:2b:07:ac:cc:
         20:77:6b:af:6c:35:bc:c1:a9:53:c6:a8:a2:0a:9e:dd:df:7b:
         6a:a3:1c:5a:e7:83:9c:80:fc:69:26:56:5a:eb:ca:9e:ec:78:
         8e:a6:f9:df:4d:ec:5f:b1:aa:ee:49:5c:40:06:45:03:58:18:
         e2:6f:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:22:49 2025 by rpki-client