Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aadd3ed-d7e5-341c-b169-a20312fbe70a.roa
File:                     4aadd3ed-d7e5-341c-b169-a20312fbe70a.roa (raw, json)
Hash identifier:          AYafHc5GjStd1bmudUF5ZZqSq2x5ad9xOpWhRynQIRY=
Subject key identifier:   EC:C8:23:1E:63:59:ED:B9:F8:59:49:FB:C8:6B:48:9C:D8:29:5E:D9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121910C4CD7AA1C3D65600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aadd3ed-d7e5-341c-b169-a20312fbe70a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:19:10:c4:cd:7a:a1:c3:d6:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aa20b881-a1b8-4070-80d3-a2ec76fe8a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:d8:b6:31:5c:ed:fd:6c:65:88:a5:dd:2f:
                    21:f5:1d:69:a3:ae:72:08:f4:73:8c:1b:58:97:17:
                    7a:e0:69:ef:bb:9f:67:a7:92:0f:7c:ab:84:dc:ce:
                    e5:65:70:f8:0b:2a:41:b4:f6:6a:36:b0:6c:ff:43:
                    c3:70:d3:e8:85:06:95:8f:02:b1:68:95:20:5d:f1:
                    55:9f:b4:cf:b8:29:55:7d:14:eb:98:5e:ba:fe:be:
                    35:c7:b3:2c:93:c1:78:4f:0f:21:fe:d8:17:df:e1:
                    35:20:ed:68:5f:53:17:41:6c:77:e8:f4:67:d5:33:
                    a6:6a:d5:03:f1:57:7b:b0:4e:4c:4d:d0:60:3f:35:
                    dd:4f:3d:d6:b4:28:c3:e2:5c:8f:41:86:42:0b:d2:
                    f8:5b:57:3d:83:52:46:84:b8:20:42:38:b3:ab:e3:
                    95:f8:78:f2:72:5c:cc:d5:b2:27:fd:27:1c:ac:66:
                    23:37:4c:f6:50:c5:42:89:fd:b3:14:3d:7e:fc:82:
                    62:c8:e8:29:45:33:ff:4a:19:57:55:6d:f1:da:ad:
                    d6:7a:3d:3e:6f:8a:f8:1d:33:5a:d5:c2:38:b3:31:
                    68:31:35:14:4c:e4:b1:ec:43:98:d7:2b:4b:43:52:
                    3a:9f:3d:43:64:06:c9:d1:e1:e9:67:ac:18:4e:28:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C8:23:1E:63:59:ED:B9:F8:59:49:FB:C8:6B:48:9C:D8:29:5E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aadd3ed-d7e5-341c-b169-a20312fbe70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:d7:aa:48:e1:e2:2a:03:e5:76:d1:47:e2:32:02:cc:d4:
         b7:30:2e:c7:b9:18:92:ff:c8:af:e9:65:ba:17:c2:39:3e:8d:
         8f:3b:01:d5:2a:0e:ee:40:18:58:ce:31:19:83:24:6f:d5:78:
         b7:22:f4:7f:c4:7f:bc:8a:3b:bf:a5:53:66:ba:ec:27:a5:fb:
         94:f0:6b:da:25:be:5b:5c:e7:6c:56:f7:a0:5f:7f:4c:8f:86:
         f0:bf:d4:1d:4c:08:46:42:16:11:06:ec:16:a8:d9:b2:00:ce:
         c7:38:d3:e5:ca:0a:29:90:16:e6:27:9a:10:06:ff:0d:61:2c:
         8d:37:a6:38:24:c0:93:9b:5f:a3:b8:23:bd:1d:08:63:09:6b:
         ab:01:9e:ba:d1:02:81:45:a2:ec:da:4f:6e:a3:95:95:25:5c:
         e9:9a:52:91:88:4d:87:99:5f:bf:68:c7:c7:3d:fc:bf:34:84:
         b9:07:f8:d8:b8:50:27:c9:b0:92:0b:e7:c6:0e:56:55:39:9c:
         ba:0e:0c:a2:66:ca:4c:cb:27:75:8c:44:99:f3:78:73:71:f1:
         eb:4f:de:3a:fa:c8:9a:87:f2:d7:58:14:68:51:bf:52:8d:75:
         b1:09:b2:44:56:2f:fc:f9:33:ca:52:f0:c8:bf:d6:2f:b9:bd:
         60:68:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:27 2025 by rpki-client