Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa
File:                     21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa (raw, json)
Hash identifier:          1Iw/wI9kanBRehoOBAtOWAaHJTscsmH9LoyvZQDEkUQ=
Subject key identifier:   EC:C1:B3:8C:2D:42:0C:20:6D:A8:7A:CD:DC:77:D1:FF:89:2B:52:5A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58166BC316F92EFD158C780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:66:bc:31:6f:92:ef:d1:58:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=afb1c36d-bbff-4864-9abb-960ed15acf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:63:48:f6:06:f0:8c:1a:60:d3:b6:0f:45:
                    44:63:96:8d:52:44:a5:42:59:f4:0a:56:dd:71:01:
                    b0:7c:09:24:9d:a8:eb:0c:b9:5e:0b:74:6d:3d:0b:
                    34:ef:b2:14:31:94:29:93:68:ef:48:98:05:f3:04:
                    56:0d:c7:90:66:f9:8d:36:8b:13:ea:a2:2b:92:c4:
                    58:76:54:9a:ae:6c:f2:5c:fe:96:41:cc:8e:cc:87:
                    03:9a:7e:8e:cd:a5:51:d4:0f:cf:9b:4a:f0:a3:e3:
                    77:b2:46:d1:e3:bb:fa:04:15:5f:35:b5:b3:1c:ee:
                    40:1c:cc:ed:78:70:95:72:f4:32:ce:a2:8e:31:e8:
                    dd:4e:b6:e4:63:f6:1a:13:4c:69:bc:a9:6f:f6:87:
                    e3:19:7c:6c:c5:b0:58:4e:b2:14:fa:20:42:c1:95:
                    12:29:ad:39:91:cb:66:e1:8d:c5:13:d5:20:f2:34:
                    dc:69:37:21:37:bc:89:78:73:46:80:70:08:88:f4:
                    c6:73:b1:c6:a3:4e:e2:37:cc:d0:3a:a6:bf:0a:1d:
                    54:6c:96:f4:ea:54:84:8b:c9:7d:43:76:ad:08:40:
                    90:e4:62:01:ca:1a:e6:f1:89:04:14:50:e6:25:f1:
                    49:3c:1d:b8:b8:d0:45:12:4d:51:f0:c4:34:40:4e:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:B3:8C:2D:42:0C:20:6D:A8:7A:CD:DC:77:D1:FF:89:2B:52:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:ab:c2:e2:23:6d:ea:a0:3f:56:15:84:a2:43:db:ba:6c:
         1e:0e:c6:91:a3:77:a5:12:ec:0d:2e:2a:f8:41:5a:b2:ac:f1:
         c7:ad:33:0b:2d:33:90:47:8a:3c:23:5c:41:31:31:fe:fe:87:
         f3:51:d2:a5:5f:a9:46:7b:e5:2d:81:4e:91:7b:70:3d:e7:1a:
         ed:3e:59:8b:2f:80:f8:39:fa:86:c7:fa:b5:d5:04:a5:f4:42:
         f4:3d:3c:92:cd:6d:c2:36:b8:d6:86:86:7f:b1:8f:fe:27:45:
         74:11:89:dc:00:4b:d1:d9:57:37:29:5f:74:c2:0c:65:4e:01:
         d8:fc:b4:30:ac:ee:9e:10:66:57:c1:0e:ca:c0:b8:00:82:5d:
         c7:68:cc:09:06:15:46:64:09:88:72:a4:ae:16:05:4d:e0:20:
         3b:bc:19:45:77:6e:3b:c9:ba:eb:69:5f:a6:e0:cf:e3:b2:83:
         ea:89:4c:10:3d:42:d1:2f:7e:8d:ef:6d:de:30:72:43:8b:61:
         8a:57:ef:23:d0:8b:0e:68:a5:dd:34:74:8e:02:3f:df:68:11:
         45:f5:09:33:35:0b:e5:80:73:48:d5:71:8e:3b:1b:7b:3d:7e:
         1d:1e:13:78:d5:ce:17:a7:f1:11:19:16:ee:d2:ae:6c:37:77:
         39:91:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:24 2025 by rpki-client