Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/529cfbc6-33c3-3263-b29c-193d36c16ae2.roa
File:                     529cfbc6-33c3-3263-b29c-193d36c16ae2.roa (raw, json)
Hash identifier:          UKElC0rhsnwD+9pXI6a3cuzo1uKn9rZlct9geP0lvG8=
Subject key identifier:   33:54:47:E3:AA:E9:7E:59:12:64:3A:DE:DA:0F:47:4B:D9:79:65:FF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841213928781E05373AC54A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/529cfbc6-33c3-3263-b29c-193d36c16ae2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.62.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:13:92:87:81:e0:53:73:ac:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=15ff3c00-7874-4691-b056-68e4309ca9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:90:58:27:9a:f2:f4:12:79:e3:13:6c:be:
                    de:a1:0b:ee:4e:04:00:aa:f7:7d:d5:e1:ab:c4:74:
                    95:03:7b:e7:67:39:26:97:d5:e8:9b:3e:5d:45:48:
                    6e:70:11:d8:2d:34:2d:62:54:b6:64:fe:ce:fc:cc:
                    51:7c:39:e3:68:f7:52:6c:be:9c:49:04:72:eb:98:
                    70:4d:82:8f:44:46:8c:29:61:89:95:81:ba:63:72:
                    3f:e7:3d:38:97:ff:85:2f:96:c3:f7:b0:6b:43:24:
                    31:10:95:15:82:12:53:57:44:85:8d:dd:54:67:cd:
                    4b:71:e2:34:37:f8:45:c5:be:48:d9:86:e8:46:8f:
                    d5:af:ae:da:bf:19:76:38:bc:30:58:f9:e2:fd:17:
                    73:28:fe:99:40:fd:e6:68:08:fa:ff:e5:fe:64:47:
                    89:12:99:4c:9d:29:63:36:6e:c2:fa:42:ba:b4:52:
                    d7:48:58:fd:45:c6:64:71:2d:68:d6:73:84:63:c5:
                    3e:a0:34:1c:79:fc:51:9b:e8:48:ea:ed:7a:52:de:
                    80:54:9e:42:0b:36:2e:f2:f8:05:9a:56:e8:f4:3d:
                    cd:2b:e4:b4:fd:34:99:8f:01:08:0b:9e:2d:f2:d7:
                    6b:64:ba:2c:b0:b9:c8:14:d7:f5:5e:d8:e4:92:f4:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:47:E3:AA:E9:7E:59:12:64:3A:DE:DA:0F:47:4B:D9:79:65:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/529cfbc6-33c3-3263-b29c-193d36c16ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:5c:28:ba:7e:ad:ac:ac:e3:c0:23:30:09:3b:a2:4b:ae:4b:
         14:2b:d5:1c:3e:fb:cf:45:7c:fd:1f:54:b6:37:1e:b3:1e:a4:
         ec:6d:4e:7a:31:92:82:7a:ed:9e:df:4b:ab:0a:49:f9:33:a0:
         db:5a:70:48:3e:f5:93:e1:e9:c5:d9:28:04:31:48:c4:a3:62:
         fd:ad:ec:46:06:11:9d:df:f5:0b:83:56:9f:52:60:35:ef:35:
         fb:98:10:6f:4b:f3:0c:66:88:a3:76:55:1c:cf:6e:bb:ac:cf:
         14:9d:3e:32:84:f0:83:f4:0c:88:4e:eb:22:cb:f3:ac:3a:6b:
         b4:e6:d6:63:16:0c:85:22:f9:a0:a1:36:4c:c8:a2:67:c8:10:
         74:72:f2:b0:a4:86:91:55:33:56:6e:b7:76:78:89:ee:a6:48:
         f8:f9:f2:da:7b:42:54:ad:92:f3:9e:94:ee:63:cc:9c:cb:30:
         67:ab:c1:f4:14:63:ee:e2:50:bf:a3:6a:16:15:9b:c0:91:fb:
         d3:de:c5:3d:6e:2e:de:bd:53:f8:a4:49:ab:10:4e:5a:89:c0:
         68:f1:68:d0:d8:e4:99:51:75:92:98:85:1e:95:40:4b:06:b4:
         ce:1b:54:d5:1c:29:72:76:2c:fc:b5:3b:65:67:67:21:50:3e:
         74:a9:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:56 2025 by rpki-client