Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27a04d23-7087-3a52-8200-45e779b1c505.roa
File:                     27a04d23-7087-3a52-8200-45e779b1c505.roa (raw, json)
Hash identifier:          TOy2ue+2XPChchl9hg6cRzhg/lON5XM8gIJmA6F4iq0=
Subject key identifier:   03:BB:40:A9:6F:68:A1:F3:85:61:6B:23:66:EA:07:73:9F:BC:F6:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121B4B9DA4F9F49B39F300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27a04d23-7087-3a52-8200-45e779b1c505.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:1b:4b:9d:a4:f9:f4:9b:39:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=dcae6db7-c5a0-40fe-9422-67c106c4f129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:42:a7:f9:e2:c0:19:39:fe:d2:a2:87:ed:
                    aa:82:57:59:73:2d:9d:b5:56:f1:52:1e:97:5f:a3:
                    e7:fe:bd:20:00:dc:8d:be:18:28:d8:7b:dd:17:2c:
                    4b:3f:03:e1:e6:60:5d:7c:5a:68:b2:01:d2:28:e1:
                    04:1d:49:4e:38:0e:39:06:65:33:3b:b3:59:d9:1b:
                    b6:a7:c7:97:da:69:09:60:12:e8:5f:a3:c3:32:0a:
                    fe:e6:0c:e0:17:cc:31:fd:e8:f0:c0:6e:e3:35:0b:
                    30:72:14:ce:f0:19:6a:05:3c:12:4e:d3:fc:76:15:
                    76:64:ab:02:9f:94:73:6f:10:d9:1b:42:96:ea:e6:
                    a5:3b:1e:a1:bb:47:c2:c6:c5:3a:c5:06:56:a2:e4:
                    e2:84:7f:b2:12:3b:f1:f6:87:10:bb:a1:d9:09:1c:
                    63:93:f3:96:77:31:d0:1d:7f:73:25:f3:6b:2a:8e:
                    26:37:dd:04:71:f9:3e:f9:a3:4e:b6:bd:aa:76:8d:
                    51:25:91:45:e7:6d:eb:8d:30:18:59:3b:51:57:ef:
                    59:fc:61:2e:f3:5d:f0:cb:5d:89:c3:b2:b2:a0:25:
                    b4:33:0e:2e:b6:11:e9:5b:7e:e7:16:a4:88:9d:ed:
                    ed:66:66:fc:a3:f3:fb:e1:7f:09:82:10:92:93:1f:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BB:40:A9:6F:68:A1:F3:85:61:6B:23:66:EA:07:73:9F:BC:F6:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27a04d23-7087-3a52-8200-45e779b1c505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:da:93:3f:d2:6b:fa:1a:fb:28:96:30:86:7a:af:54:28:
         06:56:47:0a:67:ca:06:1a:ab:fe:8d:0c:69:4b:b1:dc:ef:aa:
         19:67:f4:3e:b2:db:47:f3:b2:83:2c:d9:67:a1:18:14:b4:94:
         8e:3d:ba:dd:af:60:b8:7e:7f:7d:99:18:9d:1c:47:d9:5d:27:
         63:3f:3e:0e:aa:28:46:86:ea:bd:65:e7:0f:13:2b:0d:20:cf:
         bd:93:15:6f:fc:da:79:1f:fd:64:f6:ca:e8:9f:0d:d5:80:59:
         7e:30:20:4a:b4:93:d2:1d:ec:ff:00:7f:b2:2e:e6:40:de:38:
         6e:9a:82:71:91:4f:53:5f:a2:04:50:ee:99:78:b2:05:38:1d:
         8c:37:cb:d1:56:ac:b1:50:bd:ce:87:16:83:fe:9c:a3:2e:d8:
         16:87:ef:9d:47:54:5b:65:f1:63:13:e8:da:8c:f6:a6:14:cc:
         57:20:65:a1:d6:eb:a7:6f:4b:ea:c9:59:6b:3f:ff:da:4f:20:
         c1:82:e5:17:ee:b6:70:56:94:01:d7:f8:77:93:38:81:6d:e7:
         ee:3a:f7:5c:21:6f:db:db:75:67:8d:db:e1:3b:b3:e8:a0:f3:
         04:9f:3d:c7:fc:c0:0e:c8:e5:b7:a9:ef:51:3f:f6:78:dc:9e:
         e6:4f:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:18:05 2025 by rpki-client