Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b6dc5e7-79bf-35f7-89bd-328bae69004e.roa
File:                     4b6dc5e7-79bf-35f7-89bd-328bae69004e.roa (raw, json)
Hash identifier:          3VMh1rNqIW1/euO93CWUDw+XnpQ7KohyE2bQpv9WUyY=
Subject key identifier:   4E:EC:53:D5:35:53:A9:35:88:4E:97:3F:AF:F7:98:92:72:8E:AB:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB5349A6583B9DE9B16A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b6dc5e7-79bf-35f7-89bd-328bae69004e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:53:49:a6:58:3b:9d:e9:b1:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=02e17fec-2e35-4691-b7f2-fbed5739e75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:61:8b:11:e5:ca:99:f0:97:a7:af:8f:96:
                    d4:0a:e2:03:50:23:5b:77:f0:af:c7:e4:1a:8e:01:
                    60:12:a8:1b:52:a0:99:2f:5c:49:45:8a:c2:fe:50:
                    3b:dc:fa:fc:f3:0b:6e:12:27:90:94:fa:53:68:27:
                    16:29:49:bc:cc:2a:98:e8:8a:4c:23:48:0f:28:44:
                    ca:47:61:65:53:9b:78:e3:b9:94:89:81:18:5c:b0:
                    a6:b6:81:93:67:3b:f3:a1:74:86:e0:66:7a:2d:f4:
                    a0:d0:b7:58:25:6c:73:c1:ef:5c:49:53:ef:d4:d7:
                    8a:c1:7d:81:e7:96:95:2d:83:5a:7a:f5:78:0a:cf:
                    3e:78:e3:47:5a:79:65:1a:0d:86:3f:c9:a1:52:0e:
                    4b:01:b0:2f:2b:61:6b:ae:d0:cc:c2:a7:97:e8:da:
                    e2:55:28:03:2b:ef:5a:27:98:35:e5:67:d9:ea:45:
                    01:54:be:64:78:5d:d8:cd:32:68:95:d9:43:33:40:
                    94:29:10:79:7a:31:8e:e7:67:46:17:2d:57:b7:94:
                    91:79:06:d2:72:91:38:9c:8e:5d:d3:5b:cb:88:a8:
                    f5:f9:35:e2:ca:e2:a3:4a:27:53:8a:4e:84:d1:b0:
                    1e:01:1f:2d:28:ec:d2:0f:18:26:3b:30:ac:e9:49:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:53:D5:35:53:A9:35:88:4E:97:3F:AF:F7:98:92:72:8E:AB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b6dc5e7-79bf-35f7-89bd-328bae69004e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:49:e0:aa:ff:f4:7f:42:7b:59:d0:ab:9d:23:f6:8e:40:5e:
         34:d9:fb:8d:34:6d:e0:07:66:5b:47:bc:eb:08:9d:e6:52:ca:
         07:70:58:d3:63:b2:db:d3:81:cd:87:45:f4:db:02:7f:38:95:
         a0:f5:a2:c7:4c:99:ae:0c:f7:55:13:3e:82:85:24:8f:a6:5b:
         c7:68:8f:e5:85:a6:26:cc:e3:db:af:77:ff:40:c5:00:78:31:
         91:ff:ea:b2:e2:ee:f5:fe:ac:fc:1d:c8:b3:8e:c7:7a:d2:7f:
         a0:14:a2:47:d3:76:3a:f2:ec:d7:69:6f:e0:e6:ae:f2:0e:26:
         19:33:e7:10:7f:3e:86:68:1e:50:a7:ef:41:f8:c1:8f:9f:ae:
         a7:aa:e7:26:ae:54:c3:db:c3:7a:95:90:85:17:f6:63:f1:da:
         78:dc:0e:a1:e3:ba:e9:58:10:0f:67:4a:5d:57:3b:46:a4:31:
         0e:0e:ae:02:0b:38:1a:68:f7:c7:20:ee:e0:37:77:7e:a2:5b:
         13:f2:08:4d:58:08:16:46:6f:05:b7:3c:fa:04:3b:91:63:15:
         d6:95:4e:40:dc:40:7c:0b:ff:0a:1b:c8:df:0f:77:e2:9c:53:
         34:de:41:93:1e:8a:a3:55:17:00:77:c8:b8:76:90:09:b7:96:
         cd:e5:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:37:28 2025 by rpki-client