Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76be86ff-254e-3dce-bc0d-7db4f6675c90.roa
File:                     76be86ff-254e-3dce-bc0d-7db4f6675c90.roa (raw, json)
Hash identifier:          u02gr+zUvCHRKC/+TO60YuD8Osc5QJuqfQFXo56BgC4=
Subject key identifier:   60:A7:8A:FC:0C:D3:DB:16:01:7E:13:50:92:AA:60:E7:88:2D:69:51
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841169D6F79034CEF7F6A780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76be86ff-254e-3dce-bc0d-7db4f6675c90.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:69:d6:f7:90:34:ce:f7:f6:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e868efde-c4e0-4c8d-b40d-5567683e421e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:27:ca:df:6b:78:72:3d:44:10:10:d6:6c:
                    03:ac:25:90:e1:98:b5:a8:89:a0:82:77:3f:92:61:
                    1d:8c:74:32:5e:21:2b:22:35:4a:a6:9c:df:b9:d1:
                    12:64:dc:59:77:bc:b6:79:ae:56:cc:26:93:89:13:
                    63:fc:20:74:82:87:84:e7:da:c5:91:b4:6a:fa:44:
                    d0:3f:82:da:40:b8:9c:31:b0:e1:0d:dd:cc:59:ec:
                    39:09:38:c0:81:8f:67:7e:ae:96:30:45:4c:d7:f7:
                    f6:d3:c5:98:70:a6:91:19:18:d5:de:1b:19:ff:a7:
                    b1:5c:00:2e:8b:d3:d6:95:2d:31:c0:bb:8d:2e:56:
                    7b:36:97:f2:75:7b:3d:b5:6e:a3:99:68:69:de:a0:
                    7b:20:ed:06:1a:4e:97:af:6f:12:9b:58:ad:87:6c:
                    9e:e5:00:f1:ec:80:08:3f:7c:da:c8:96:48:c9:03:
                    b9:10:2f:4e:43:ec:6c:9e:9c:e0:3b:61:e3:6e:3f:
                    56:8a:2f:3a:22:bd:6c:bf:fe:5c:24:ab:c1:d9:32:
                    85:35:3b:b7:9b:ce:ba:fd:a2:89:42:e1:27:67:db:
                    d7:11:03:85:34:25:ac:c3:24:d1:eb:39:ad:63:a8:
                    ae:ba:94:89:f8:2e:d3:2c:fa:bf:4d:a7:1f:4a:e5:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A7:8A:FC:0C:D3:DB:16:01:7E:13:50:92:AA:60:E7:88:2D:69:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76be86ff-254e-3dce-bc0d-7db4f6675c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:c0:1e:e6:2a:c3:92:5b:63:78:8b:b0:5c:7a:58:d5:2b:
         e5:fc:74:04:d1:11:a8:0e:7f:7f:e1:ad:bd:4c:3e:5a:4a:cf:
         c8:4d:a8:e7:35:38:3a:08:fe:25:8d:b6:29:1a:29:07:a5:8a:
         27:4b:7a:f1:0c:70:73:ae:d3:30:d6:8f:dd:74:42:8e:b9:c5:
         ca:49:42:7b:4e:dc:67:da:9c:07:7b:eb:a0:93:99:1b:7e:cd:
         0d:bc:98:68:fd:17:ff:c3:cf:4b:b4:85:a4:22:b9:0b:a8:5e:
         dd:4e:f8:83:1f:42:e9:98:76:26:84:60:a8:9b:71:5e:35:16:
         b8:46:00:fa:81:ae:de:cb:85:92:21:b0:9d:19:6a:dc:74:37:
         ca:5d:d5:ca:97:47:c5:ac:3c:06:ce:fd:27:7a:4e:cb:64:a0:
         b9:54:0d:ee:f1:41:b1:e8:ab:4a:be:2d:9c:17:b7:eb:61:7f:
         28:92:15:2e:58:66:44:44:e6:52:35:7b:17:41:03:42:55:79:
         6f:c6:bc:84:87:eb:2c:1d:34:f5:20:2d:51:74:ec:58:db:c9:
         bc:42:20:2a:a2:42:56:d7:71:f1:b6:b7:89:6e:1e:5b:cf:56:
         81:07:12:34:70:c3:3f:3e:af:66:84:af:20:ca:2f:85:3c:51:
         0b:b7:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:23 2025 by rpki-client