Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c484cf3d-2d67-3475-b613-475cbe7ea855.roa
File:                     c484cf3d-2d67-3475-b613-475cbe7ea855.roa (raw, json)
Hash identifier:          ikrMLTzVWxMT6P4b7iW/J6Rii1XIKFqC6VPiP4TnuDM=
Subject key identifier:   02:E1:E9:AF:12:2B:E8:06:C6:82:21:19:89:93:37:49:3A:FA:3A:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121B332FB67E5194BC1BA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c484cf3d-2d67-3475-b613-475cbe7ea855.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:1b:33:2f:b6:7e:51:94:bc:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8b7e20a6-4e2a-44d4-aa6c-997d8ad1ff77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:e2:29:80:5f:55:2e:34:e2:38:da:6f:f2:
                    b0:d9:4a:75:3d:aa:04:4f:69:ca:3c:63:87:87:52:
                    98:0e:3a:18:54:1c:17:c6:15:ba:bb:0a:f4:9b:36:
                    0d:8a:c4:6e:0d:b9:ea:02:c7:95:0b:18:81:9f:d4:
                    89:8c:da:aa:69:92:9b:4b:bb:a8:6e:7c:3f:dd:6e:
                    72:7d:1f:a6:fc:2f:74:83:c1:3f:fa:76:1c:4a:3e:
                    cd:1a:74:d9:7e:25:ae:7d:0c:b1:09:3a:ed:ef:2c:
                    e4:1c:06:a9:da:bc:f9:c7:07:db:0c:16:25:dc:87:
                    fd:31:45:9b:f0:25:b2:84:d7:c6:25:8d:81:c0:cf:
                    a8:1f:30:32:f4:e7:4a:3e:c4:0f:9c:3c:50:4f:da:
                    38:91:8e:d7:0b:40:78:9b:76:03:c4:76:f5:95:29:
                    56:43:f1:cf:d2:23:4c:54:e9:69:5d:c8:28:a4:44:
                    36:40:ba:63:bb:c3:44:f6:ce:37:bc:ab:53:91:f1:
                    aa:54:a4:fa:2d:c7:30:1b:e4:b9:ed:82:ca:4c:83:
                    18:71:9d:c5:64:78:d7:77:05:fc:11:41:f3:e2:9b:
                    fd:34:82:50:a6:ec:5a:84:a7:fc:b6:b7:61:d4:e8:
                    dc:c5:a7:c6:b9:1e:58:cc:57:f1:93:7f:98:ee:93:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:E9:AF:12:2B:E8:06:C6:82:21:19:89:93:37:49:3A:FA:3A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c484cf3d-2d67-3475-b613-475cbe7ea855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:1f:27:07:dd:47:23:d5:33:87:73:e4:0c:36:f4:5c:eb:cb:
         ca:ae:9b:c4:12:d7:70:86:b3:c8:90:70:ae:91:d2:2c:4f:c1:
         39:6c:43:d0:05:71:48:3d:aa:83:96:37:32:72:27:58:3c:46:
         d2:83:33:8d:a7:61:ab:8c:86:0a:7f:b6:5e:08:18:af:4f:9c:
         92:87:4c:c8:df:9e:0d:da:de:a6:c8:a4:81:b1:12:88:dd:1f:
         fd:3b:ce:d6:f6:1e:64:c9:12:ae:3c:d3:94:0e:c7:71:87:0f:
         53:1c:16:0f:f1:16:2a:49:b1:48:e6:1f:5f:49:ff:21:6b:ed:
         0e:94:bf:7e:22:22:7c:b2:71:22:c9:70:4b:4d:8f:0e:b0:88:
         1e:43:80:48:ca:bf:b2:52:99:f4:7d:cf:b8:ba:b0:e4:29:e5:
         78:58:87:27:bd:a1:38:bc:76:10:07:3c:f7:1e:4c:f2:6c:2f:
         75:96:35:98:08:9b:02:e1:71:80:b0:b4:b0:65:b9:15:19:59:
         de:44:4d:8a:7b:b0:82:7c:c3:b1:3e:7a:84:37:71:41:e2:a5:
         31:a0:57:10:97:14:fc:34:b5:2f:9c:69:1c:1c:8d:aa:2b:97:
         e9:be:56:5a:4b:51:93:02:2b:7d:6d:23:0e:e6:53:4f:3c:3e:
         2a:0b:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:06:19 2025 by rpki-client