Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/503acf1a-b74d-33d9-afd1-0a45f222dd98.roa
File:                     503acf1a-b74d-33d9-afd1-0a45f222dd98.roa (raw, json)
Hash identifier:          IiyeLaVHSd3memqU67MbxYUZ2hKM4nGWcjeloGvN//w=
Subject key identifier:   AD:42:A6:54:62:C6:BE:7B:B9:2D:F8:40:F5:F0:5E:C3:6E:AB:5B:CC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116C36A84CD12DE7F201A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/503acf1a-b74d-33d9-afd1-0a45f222dd98.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:6c:36:a8:4c:d1:2d:e7:f2:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a0a38717-431c-44f8-acff-3a4ffb531aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:dd:d8:0d:1d:21:02:db:3c:70:c2:f9:1e:
                    28:f2:3a:35:1e:b1:21:14:9f:cb:a8:e7:92:fa:5b:
                    e6:b5:71:72:6b:1a:a8:3b:ad:01:35:d9:29:6a:1a:
                    e0:bf:c4:f1:c6:0c:21:ce:83:2c:bb:83:f1:19:d5:
                    e0:ab:81:03:57:f0:c6:de:e9:68:98:96:9a:2d:b8:
                    92:ca:8d:0a:9b:95:fc:b8:7d:be:22:85:be:e3:54:
                    eb:14:b2:17:f7:b1:b4:62:18:d2:9c:2e:2a:0a:cc:
                    ce:14:38:28:3e:47:7c:ab:ac:9a:1f:d6:52:d7:1e:
                    11:9d:7d:98:1f:34:d3:5b:24:d4:b4:44:85:2c:1f:
                    e6:a5:8e:32:c9:ca:ea:02:4d:6b:86:c3:d3:ee:17:
                    e4:f8:6e:2f:af:a9:33:33:b7:95:a4:e3:bf:6a:6c:
                    40:ba:64:97:d8:f9:a9:40:ff:6c:3d:cd:aa:f6:25:
                    ed:f4:d9:b1:3e:5f:ef:ee:ea:f5:87:f3:55:f1:16:
                    42:84:1d:92:52:f8:03:9e:53:44:80:37:17:b5:c1:
                    66:a1:83:70:2a:76:09:a8:5d:51:e7:da:50:06:40:
                    36:cf:1e:59:56:86:b6:8e:95:c7:44:7a:2b:91:8f:
                    9e:30:d2:33:b7:23:d4:aa:a8:61:dd:1d:fd:29:5b:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:A6:54:62:C6:BE:7B:B9:2D:F8:40:F5:F0:5E:C3:6E:AB:5B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/503acf1a-b74d-33d9-afd1-0a45f222dd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:1c:a6:09:de:b9:89:05:cc:e7:90:79:23:0c:9d:72:9c:
         59:9b:7c:5c:a2:f9:d2:82:78:3e:dd:d2:b5:8a:7b:40:23:b2:
         1c:b2:30:d1:ff:00:4d:be:a4:f0:50:d1:41:8f:65:e0:1b:64:
         87:8f:be:4d:28:f6:bd:8f:c2:7f:74:0c:1b:6c:a5:0e:11:6f:
         58:8d:a5:20:1e:48:ed:6f:49:45:f5:30:e4:8a:71:28:49:4d:
         3f:79:90:27:4f:6f:de:94:5d:3e:85:5e:69:97:ed:e0:57:c9:
         df:b3:e6:c0:40:87:84:ab:60:1d:a8:49:37:09:63:fa:1a:7d:
         33:ba:38:b0:2c:13:e5:b7:44:de:86:9e:0c:b5:9b:dd:95:b1:
         63:82:92:9f:42:b8:64:cd:c7:e8:fe:81:b7:6e:f3:19:b9:d0:
         1c:22:34:67:86:e2:0a:f1:c0:c1:6e:14:88:d3:0f:58:28:46:
         c9:0f:99:f0:de:34:47:e6:90:e0:2f:ea:c2:d1:51:62:99:d7:
         59:4a:c2:4c:42:b5:bc:b4:f3:01:09:2e:43:38:64:ec:92:a7:
         97:c4:b7:57:fc:9c:2a:d9:1a:5d:46:48:31:f5:22:88:7f:53:
         82:a5:e6:e5:04:c4:40:20:4f:38:75:ba:db:55:a5:30:71:47:
         6a:9e:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:01 2025 by rpki-client