Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a86abc0-664b-3c4d-9d90-af474c981d7b.roa
File:                     0a86abc0-664b-3c4d-9d90-af474c981d7b.roa (raw, json)
Hash identifier:          +vzXGgZWQNuCLL6LhcMjnwXfJB/Ps+zH9EVfvPjhMZ8=
Subject key identifier:   A0:55:75:E7:44:42:0A:46:F8:E1:7B:96:83:B9:2A:1B:5B:98:4E:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412169F31BDC251CEDC6700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a86abc0-664b-3c4d-9d90-af474c981d7b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.62.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:16:9f:31:bd:c2:51:ce:dc:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=cb3479d9-758b-4a8c-b22b-4b50b349c2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:36:37:f6:5a:2f:cc:cc:6e:bc:02:c5:e7:
                    70:a6:78:3f:2d:6a:9c:49:d2:98:d5:be:81:93:0c:
                    ab:7d:c7:ba:4c:56:0c:f0:02:9d:02:09:4d:fc:3a:
                    4d:27:56:4b:57:da:26:0f:95:86:62:f8:00:56:d7:
                    34:a5:14:bf:0b:7d:a1:ec:97:98:b8:c2:a7:62:ae:
                    74:9d:10:02:62:0b:9e:7c:4f:71:d3:3b:d4:ac:a8:
                    8e:d8:9b:7c:59:16:15:d8:80:e6:f6:03:3b:1d:e0:
                    be:a1:bc:5e:0d:1a:42:a1:de:8d:4c:74:fe:4a:42:
                    eb:04:9b:10:8c:98:0b:4d:21:41:b5:7a:59:ca:21:
                    65:88:59:7b:2c:85:0f:ed:0b:38:70:1f:53:4b:37:
                    26:af:b7:4d:91:49:3c:68:a7:f0:79:54:47:ae:94:
                    a0:1a:80:5c:84:0e:88:8a:76:f6:e2:08:de:c5:0c:
                    22:72:46:53:6c:0c:2b:cd:65:2f:3e:7e:10:46:f5:
                    8e:7d:a8:dd:59:c8:b3:07:77:dc:f2:e2:aa:c1:b1:
                    37:c6:c4:b8:f9:dd:6a:9a:fc:db:d1:4b:fb:39:29:
                    96:7b:e3:8b:36:9f:15:4c:53:4f:80:dc:fa:0b:06:
                    b4:73:71:d3:c3:f2:b5:ea:ad:f2:bc:81:36:c2:6d:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:55:75:E7:44:42:0A:46:F8:E1:7B:96:83:B9:2A:1B:5B:98:4E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a86abc0-664b-3c4d-9d90-af474c981d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f1:c0:03:5d:2b:e8:27:f8:2d:84:ea:a6:bf:7a:92:13:27:
         20:f8:f4:68:33:92:50:fd:41:ca:ee:4a:9d:9f:12:3c:4b:7c:
         3f:25:65:80:6f:3a:ac:38:b5:50:70:b1:ee:f5:30:05:f4:78:
         db:77:25:59:71:21:44:f3:32:ac:a5:2c:1f:d2:96:83:37:1f:
         77:81:f1:88:16:6a:fc:50:3d:5a:47:48:9d:1c:f9:07:0c:8b:
         2c:a3:da:b9:c4:0c:b0:e5:c0:7a:d7:f2:12:fc:db:42:90:03:
         94:da:ab:79:56:e9:19:ec:af:47:6c:e5:0b:4c:be:24:6c:2e:
         64:1e:46:1c:46:3f:af:6f:7e:d1:67:65:47:f0:8a:87:7a:c6:
         ed:ee:c6:02:9e:05:7a:93:33:78:66:99:fb:7f:d2:ff:99:41:
         70:84:30:b1:2a:db:29:9c:87:38:90:2e:4f:d8:34:fe:b3:0b:
         46:f8:32:8c:ec:31:03:c1:13:09:00:c7:89:aa:7b:a6:18:61:
         b1:4b:0c:a2:ef:5f:ff:69:2d:39:2f:2f:74:e0:a8:bf:7b:1e:
         cf:f2:6b:87:27:43:1f:12:d9:57:d4:15:83:c0:0f:ff:55:68:
         84:ee:9b:1e:88:26:81:6a:33:dd:7f:61:99:dc:cf:15:e9:b8:
         44:47:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:06:16 2025 by rpki-client