Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd84419-23e2-33e9-bc73-7c3e5270c290.roa
File:                     8cd84419-23e2-33e9-bc73-7c3e5270c290.roa (raw, json)
Hash identifier:          sJkgfrUrRrp2QSdyjKQavKOJyKK+o9xm0vwIg/sr9yw=
Subject key identifier:   AC:11:2E:66:E7:5C:FA:9F:66:B1:22:3C:EF:3B:3E:EE:91:E7:19:F4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116763380C16167A32EE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd84419-23e2-33e9-bc73-7c3e5270c290.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:67:63:38:0c:16:16:7a:32:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=615cec7a-a24d-4275-89f8-ee8d6267a23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:7c:d3:f1:ca:09:bf:11:71:02:54:c2:ee:
                    c7:b5:ac:ea:ac:f9:d0:03:53:2b:40:53:6e:72:1a:
                    2b:dc:3d:72:d5:77:1e:d0:5b:de:90:89:b2:c2:48:
                    55:bf:a3:84:8c:98:c7:4e:80:1e:c1:de:60:61:61:
                    2d:68:ff:5e:24:19:e7:95:f4:3f:7b:e6:f5:00:6c:
                    a5:43:17:e7:3d:3c:79:35:d9:ee:ae:a1:03:2b:9d:
                    7c:06:b7:21:cf:7b:73:1b:6b:76:46:fe:f3:54:70:
                    1e:8f:0a:76:53:a7:66:79:5d:47:bd:f0:44:af:72:
                    f3:19:93:57:8a:0f:90:36:0a:99:b1:f0:ad:d9:a8:
                    0b:67:d1:aa:61:3f:69:3e:4e:95:c9:3c:3f:b8:72:
                    19:f8:84:d3:00:75:a5:6b:94:50:c5:bc:ed:ec:a2:
                    dc:6f:d9:ce:b4:0c:69:9b:86:05:bf:1b:d0:1b:00:
                    01:d2:0b:3e:e5:a0:17:33:b1:1a:f2:0a:48:ae:06:
                    ea:1d:e0:9b:83:7e:24:61:ca:78:77:17:43:be:fc:
                    d9:e3:ed:3d:8d:d7:25:14:db:c2:e9:0a:d5:54:b0:
                    9c:04:c2:7f:69:7b:d9:77:e7:28:69:4d:68:27:53:
                    50:55:4a:88:a6:67:43:bf:64:5d:b5:d9:8c:b4:54:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:11:2E:66:E7:5C:FA:9F:66:B1:22:3C:EF:3B:3E:EE:91:E7:19:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd84419-23e2-33e9-bc73-7c3e5270c290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:27:80:72:e7:92:61:ec:e4:19:8d:4a:32:8e:9c:88:74:74:
         21:c8:21:13:9d:59:2b:6b:89:bf:15:bf:69:07:56:ac:c5:36:
         3a:68:e4:7c:76:ad:4b:62:e6:97:4f:34:d3:c0:e3:21:af:fd:
         1e:71:3c:e2:49:18:e4:81:f4:d5:f3:a0:3a:7a:2d:85:92:31:
         8c:23:77:dd:5f:a7:44:77:a9:5d:4c:2f:fc:ee:de:66:b8:e4:
         fe:68:2c:39:fa:f2:a2:c2:74:95:ef:58:d0:5d:b8:88:98:17:
         c6:94:c2:4e:37:c6:6e:c9:81:90:60:04:fa:b5:ce:c0:61:3c:
         5b:cc:3a:85:40:b8:b3:a6:3f:08:38:22:76:4d:fa:34:35:35:
         d4:b9:14:1c:a3:e6:9f:92:42:8d:ad:97:0a:cb:44:72:0d:73:
         50:4e:2a:00:9a:4f:b1:53:cd:22:2f:9d:8e:6f:3f:40:40:4b:
         d5:48:e4:85:04:96:39:5b:5b:1f:35:17:06:dc:0f:f7:6c:bf:
         90:51:70:03:2b:a3:ca:5e:44:f5:9f:fd:26:76:2c:42:90:ca:
         74:35:b8:8c:2a:43:28:29:c1:0b:96:56:d9:af:22:fa:90:a7:
         8a:78:db:97:98:1c:79:f5:95:cf:b3:e9:12:93:4f:cd:7e:10:
         7a:03:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:09 2025 by rpki-client