Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98893dec-4f90-30fa-a7b1-f42c8174c008.roa
File:                     98893dec-4f90-30fa-a7b1-f42c8174c008.roa (raw, json)
Hash identifier:          fBfZ/z4+2Zo49K8uqJiyqG5AZOmygpkWf/+Zrd9XDv8=
Subject key identifier:   27:20:22:03:06:99:74:76:1A:2B:DF:D6:9F:05:3A:77:EE:83:8C:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA9B03AF80CF8C52AA900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98893dec-4f90-30fa-a7b1-f42c8174c008.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a9:b0:3a:f8:0c:f8:c5:2a:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a9580117-60bf-402f-a80f-fe6155407621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:86:24:d4:4d:1b:3a:f1:d9:b2:3b:8d:47:
                    37:6c:c9:25:06:ca:9a:da:f6:19:40:3b:2d:ce:5a:
                    26:0d:bc:5d:1c:f5:81:07:db:77:ce:9a:c2:79:8d:
                    f0:42:93:81:db:e5:40:ea:83:42:1b:6b:ea:61:c9:
                    c5:4f:ed:62:38:c0:ac:93:6c:65:bd:6e:86:50:97:
                    ee:d2:87:57:33:eb:f0:ed:bb:06:b2:d9:bd:ba:d9:
                    ca:c0:15:b5:f9:dc:a8:9a:34:b5:bb:dd:9e:1b:4c:
                    46:03:62:9b:69:b9:9e:03:63:2c:1b:f0:6c:f2:b6:
                    24:16:bb:7d:06:a6:01:4e:df:b5:d0:89:8e:86:bb:
                    31:52:ce:d7:c4:c8:86:2c:97:4a:80:d3:16:a7:7f:
                    b8:2e:90:2f:10:2c:af:3a:05:fd:36:e1:50:99:25:
                    78:e4:cd:9f:e8:48:34:53:b9:fd:39:b3:2e:7c:f9:
                    b6:18:a2:86:41:6f:ad:84:a9:80:3a:64:14:2c:48:
                    30:df:1f:99:f4:d1:fb:af:64:df:a2:cb:cf:4c:12:
                    9e:f4:76:56:d2:10:17:1b:36:ee:6e:59:6f:59:2b:
                    74:60:03:8a:bc:cd:8f:a8:ab:b8:4b:89:82:de:6b:
                    11:6b:b1:7e:86:2d:f4:8f:6a:61:49:af:95:46:e6:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:20:22:03:06:99:74:76:1A:2B:DF:D6:9F:05:3A:77:EE:83:8C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98893dec-4f90-30fa-a7b1-f42c8174c008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:24:59:da:55:42:bc:1d:47:9c:46:3e:9c:9e:a2:35:93:4d:
         73:42:3c:ee:b6:c4:a7:1e:24:c4:dc:a7:fb:f9:90:01:26:86:
         cd:bd:10:46:ad:12:5b:3c:04:ab:41:47:90:c1:79:d0:56:26:
         48:1c:60:f7:49:02:0a:12:0f:56:c6:90:21:12:c4:44:0a:f3:
         d5:09:f5:fa:9c:7b:60:6d:f7:4b:69:a1:1f:20:fe:ec:62:5c:
         a6:29:99:1f:6b:11:ea:58:98:07:ba:5c:f9:7d:08:d9:be:dc:
         6f:96:40:72:83:e7:26:37:39:fa:d1:24:55:58:e8:76:8f:93:
         81:51:2d:3e:cb:87:f8:e1:39:ad:c4:ee:45:93:a2:e9:66:51:
         9d:81:97:23:53:57:bd:7e:72:e3:8a:e1:2e:fd:dd:f4:c0:f6:
         ed:f4:0b:e9:9a:e8:44:cc:b7:7b:7c:ef:06:1e:ca:1c:13:81:
         41:ed:2b:76:79:88:75:3e:88:34:fa:55:15:39:64:6e:58:00:
         e1:68:e4:60:7f:b4:c7:87:fe:2a:98:fc:86:d3:fc:5b:c5:d4:
         65:83:2b:8b:fe:84:97:40:5c:7c:13:dd:b0:4c:13:79:61:29:
         75:db:9b:68:4a:37:e7:37:fe:2f:fe:a9:89:b9:cc:36:88:13:
         23:f0:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:21:45 2025 by rpki-client