Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3241eb14-bba1-303d-bd87-e9915fe23e66.roa
File:                     3241eb14-bba1-303d-bd87-e9915fe23e66.roa (raw, json)
Hash identifier:          2k8S7OOhCp+9FG9qc9q0pao5GqCTC/5YYEBpQOpa+ic=
Subject key identifier:   9F:EC:87:B6:CC:C9:2A:AE:13:BD:67:75:90:3B:2B:B6:59:50:90:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAAF4BBAAADF2B938A9900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3241eb14-bba1-303d-bd87-e9915fe23e66.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:af:4b:ba:aa:df:2b:93:8a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=690fc804-257b-4548-9a65-c2b446fa22d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:34:c1:b9:44:9a:ce:36:e4:ca:19:67:37:
                    e0:ef:74:4a:78:a1:c6:da:44:bc:b5:76:6f:fe:5a:
                    0b:59:cd:73:3a:0c:f6:e9:e2:70:64:61:c5:09:6e:
                    1a:21:b0:af:ae:d8:d6:f1:f6:63:11:71:00:58:77:
                    78:04:68:1c:10:aa:57:5b:7d:82:64:27:ab:92:78:
                    31:a5:f2:a7:51:62:a2:13:57:f7:35:bf:09:f8:bb:
                    39:5f:aa:94:f6:39:81:93:5d:72:d4:2c:de:a1:3f:
                    9f:e7:2b:8b:21:14:39:0d:fc:e3:7e:4a:79:c6:4e:
                    b2:68:a6:f2:b6:c4:47:67:d4:2c:86:af:f7:fc:d1:
                    86:ce:26:ea:71:2a:4d:ff:5b:a3:4c:e2:d8:6f:bf:
                    5d:96:b8:25:a1:56:e0:75:c4:24:c8:64:59:5b:ca:
                    36:1f:8f:33:a7:41:a0:01:97:ec:43:30:64:5f:28:
                    2e:6b:f2:5e:3c:c8:d4:8d:bc:cf:8a:b9:6c:12:f8:
                    68:44:5d:f1:11:24:2c:dd:f5:22:76:51:83:a1:e7:
                    b9:1d:e8:b4:15:ff:19:40:e4:c9:2f:36:36:72:68:
                    6a:ba:cf:ac:57:92:ee:f4:5b:ed:c3:cc:ca:45:8c:
                    77:1d:69:29:87:8b:07:db:26:b8:5a:8c:1e:c3:c3:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EC:87:B6:CC:C9:2A:AE:13:BD:67:75:90:3B:2B:B6:59:50:90:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3241eb14-bba1-303d-bd87-e9915fe23e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:d0:2b:8a:e7:ad:d6:8c:e6:1a:b6:34:8e:81:d6:7a:f1:
         65:b1:54:72:6c:7f:98:e1:e9:b1:5f:92:08:ac:d2:61:24:fa:
         e3:8d:cd:cf:9c:25:4f:01:26:6e:a1:58:ae:a9:45:fa:53:18:
         f7:00:65:db:5d:9a:e8:a5:eb:96:28:71:46:cc:25:c8:b2:42:
         21:1d:d8:ca:35:1e:d4:c9:c6:97:65:4b:0b:f0:b1:d7:70:ad:
         92:6d:76:47:73:d4:d7:20:4e:e7:08:57:0a:c0:e4:dd:c5:2e:
         89:98:bb:2c:ba:4a:5f:ae:65:d4:d1:5d:57:af:a5:fc:7c:80:
         24:d2:f6:a5:d3:ff:3e:07:81:e9:e1:58:5d:d5:2d:d6:64:7c:
         7b:49:36:1c:5c:b5:c2:9d:28:c5:95:f1:ab:85:fd:d2:0c:41:
         c3:83:eb:17:76:4f:58:94:95:9e:90:8a:19:65:fd:45:51:48:
         26:a5:d6:d8:28:d2:59:ca:66:25:e0:b5:8c:2b:a0:53:a1:0a:
         50:50:7e:dd:e9:fb:66:82:15:fc:e3:ef:4d:1b:98:ec:1b:7f:
         c2:6e:1c:91:4b:40:dc:87:30:33:33:c1:19:5f:ae:3d:b7:23:
         ac:63:bf:6e:e3:68:87:eb:21:81:cd:bc:94:24:8c:41:19:7c:
         4b:92:a6:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuq9LuqrfK5OKmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NjkwZmM4MDQtMjU3Yi00NTQ4LTlhNjUtYzJiNDQ2ZmEyMmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifY0wblEms425MoZZzfg73RKeKHG2kS8tXZv
/loLWc1zOgz26eJwZGHFCW4aIbCvrtjW8fZjEXEAWHd4BGgcEKpXW32CZCerkngx
pfKnUWKiE1f3Nb8J+Ls5X6qU9jmBk11y1CzeoT+f5yuLIRQ5Dfzjfkp5xk6yaKby
tsRHZ9Qshq/3/NGGzibqcSpN/1ujTOLYb79dlrgloVbgdcQkyGRZW8o2H48zp0Gg
AZfsQzBkXygua/JePMjUjbzPirlsEvhoRF3xESQs3fUidlGDoee5Hei0Ff8ZQOTJ
LzY2cmhqus+sV5Lu9Fvtw8zKRYx3HWkph4sH2ya4Wowew8PXWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/sh7bMySquE71ndZA7K7ZZUJAFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzI0MWViMTQtYmJhMS0z
MDNkLWJkODctZTk5MTVmZTIzZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDN0CuK563WjOYatjSOgdZ68WWxVHJsf5jh6bFfkgis0mEk+uONzc+c
JU8BJm6hWK6pRfpTGPcAZdtdmuil65YocUbMJciyQiEd2Mo1HtTJxpdlSwvwsddw
rZJtdkdz1NcgTucIVwrA5N3FLomYuyy6Sl+uZdTRXVevpfx8gCTS9qXT/z4Hgenh
WF3VLdZkfHtJNhxctcKdKMWV8auF/dIMQcOD6xd2T1iUlZ6Qihll/UVRSCal1tgo
0lnKZiXgtYwroFOhClBQft3p+2aCFfzj700bmOwbf8JuHJFLQNyHMDMzwRlfrj23
I6xjv27jaIfrIYHNvJQkjEEZfEuSplg=
-----END CERTIFICATE-----
Generated at Sat May 10 22:22:14 2025 by rpki-client