Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/661e1109-e30d-3fb8-bd78-8b9676945a8d.roa
File:                     661e1109-e30d-3fb8-bd78-8b9676945a8d.roa (raw, json)
Hash identifier:          E6Jnp26nWBn2SSLtmIot1pKPMRD7QknYmNa6teiMqQ8=
Subject key identifier:   7D:7F:6E:95:30:7E:B9:E6:AE:BD:E4:BC:73:6C:8F:F5:D4:E2:90:A5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121D947F8AB468820DA8B8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/661e1109-e30d-3fb8-bd78-8b9676945a8d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:1d:94:7f:8a:b4:68:82:0d:a8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5d2022e6-6d05-4957-96aa-963e9556ee17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ad:d6:6b:04:56:25:46:bc:ec:f1:04:ed:5a:
                    b1:1b:ec:81:5a:c3:8c:26:be:81:23:38:46:66:6f:
                    c7:62:18:85:03:e1:a4:12:a3:e4:1f:79:cc:04:1b:
                    c6:9f:1f:85:ab:96:63:15:29:80:da:71:5d:60:27:
                    ad:b3:d7:eb:a6:ba:9d:c3:53:4b:95:b2:5b:b8:25:
                    e9:84:c5:64:bf:7f:0e:22:a5:92:10:f7:bb:ec:bd:
                    bf:89:9e:ec:bd:d6:6e:e2:8b:6e:ef:dc:bb:6c:d0:
                    68:2c:73:b5:af:c7:5d:87:e0:20:a5:01:20:4c:e9:
                    b2:77:74:0b:36:5e:c2:1a:4f:99:8a:b7:68:94:b3:
                    63:63:01:17:65:04:91:95:51:34:6e:5d:9b:14:e1:
                    41:b9:5c:16:0c:06:b0:81:78:04:f8:b8:90:2a:57:
                    8a:74:93:ea:53:4a:17:86:31:a6:bb:8a:c7:61:0f:
                    32:8f:b9:9e:08:de:df:a7:23:81:32:a8:59:b0:0e:
                    16:91:f6:2d:fa:d7:47:95:e3:ce:2d:6d:df:f3:21:
                    04:a3:e0:82:3a:bd:00:5d:0a:ab:c4:d9:63:cf:5b:
                    de:14:1f:28:9f:89:90:ab:a5:a8:fe:39:62:9f:8d:
                    23:d9:9e:22:4f:d2:45:60:09:2c:4d:77:b9:1f:71:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7F:6E:95:30:7E:B9:E6:AE:BD:E4:BC:73:6C:8F:F5:D4:E2:90:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/661e1109-e30d-3fb8-bd78-8b9676945a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a5:86:62:e8:fe:c0:ef:2d:5b:00:89:9d:df:bd:81:fe:75:
         8d:0b:c6:77:14:b7:58:45:e6:8c:ce:31:1d:c4:6c:75:85:46:
         8e:02:54:83:7d:48:84:be:65:36:b0:81:40:94:81:b6:0d:e7:
         bc:16:e3:4e:16:64:f3:76:a6:6a:d3:19:30:9e:a5:10:d8:5f:
         cd:fc:76:ac:d4:f7:30:8c:60:57:d5:72:97:28:a1:04:db:1d:
         e2:5d:23:83:39:78:07:69:7e:4b:c3:61:62:f0:72:80:d3:ac:
         96:03:0b:81:7a:5c:64:95:f2:6a:7d:e4:06:67:f3:e4:58:d3:
         40:ad:04:15:77:fb:8e:b0:5c:4d:b1:85:85:b3:40:92:2d:31:
         f7:7f:bf:9d:aa:24:3a:1f:a3:4b:9e:58:77:34:c6:32:fd:19:
         b3:7e:04:32:d0:df:cb:40:f9:e9:ea:52:7a:1f:e6:42:ec:dd:
         e7:c2:75:ce:aa:12:29:af:1d:c7:6e:5b:d4:0d:69:2b:02:0e:
         be:75:e3:04:a5:25:9c:60:5b:c0:ac:e6:a4:e5:e7:11:6c:72:
         56:0a:c0:d4:6d:db:81:ea:ec:72:01:9f:7b:fc:d9:ad:38:1c:
         49:01:ba:b6:1a:60:fe:a2:14:bc:81:06:23:bd:99:59:44:e7:
         8a:7e:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:12:37 2025 by rpki-client