Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fb1e540-db8e-39c0-9c26-d962deaaa264.roa
File:                     3fb1e540-db8e-39c0-9c26-d962deaaa264.roa (raw, json)
Hash identifier:          kdvAD6oQC7y4ipNCZmlvN7ib8ofhbj+EILHuTsfQXx0=
Subject key identifier:   F4:16:80:49:65:3B:0C:BD:F9:7C:AB:D6:1C:77:D2:3E:24:A5:7C:AB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5816739F508EC54C85D6A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fb1e540-db8e-39c0-9c26-d962deaaa264.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:67:39:f5:08:ec:54:c8:5d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a767e892-38a3-4452-962b-db4229878c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:36:82:a2:9b:a3:d5:3c:db:14:b5:99:a1:
                    14:fb:e7:2b:21:d3:9d:6d:ab:38:17:17:77:5a:ff:
                    8e:65:b9:1b:8d:88:27:b0:33:7d:c7:61:ba:44:1c:
                    ab:a3:47:76:ea:f8:1b:ea:4d:d1:66:30:79:1e:6e:
                    57:1f:6e:4b:fc:e7:94:ae:03:83:7b:89:01:2b:a5:
                    df:6c:ca:f5:d2:54:f0:12:2c:78:39:4b:84:65:23:
                    a9:f5:73:82:3a:d9:44:ec:fd:ea:16:28:94:a1:62:
                    30:95:8e:7b:83:cf:5f:39:8f:92:dc:40:66:7f:2c:
                    35:5c:f0:ef:12:b6:f7:00:6e:6c:fe:96:45:00:92:
                    86:a4:dc:49:69:83:3a:83:65:ae:3a:49:06:9c:1a:
                    d7:5c:19:82:a3:73:3e:01:a8:ab:51:b9:34:6a:67:
                    29:10:e9:7b:7a:28:e1:b6:91:33:aa:f9:82:16:48:
                    e7:1b:9d:c3:91:1d:a2:a0:8c:e5:f8:2d:42:df:db:
                    8c:a6:2f:d2:43:d6:47:55:94:81:e8:d1:ba:7b:2a:
                    c2:06:b5:74:cf:f0:06:bd:d7:d5:7e:0a:51:70:1d:
                    a6:75:6e:64:81:1d:4a:c5:f9:48:c9:27:c5:a4:39:
                    07:1a:94:c2:66:35:df:5c:eb:d9:a4:92:36:7a:7e:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:16:80:49:65:3B:0C:BD:F9:7C:AB:D6:1C:77:D2:3E:24:A5:7C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fb1e540-db8e-39c0-9c26-d962deaaa264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:06:cc:cf:64:5d:25:17:18:69:30:1b:d0:a7:e5:71:53:60:
         33:f4:03:e8:1a:f8:97:f5:88:73:b5:5b:64:ef:02:80:80:dd:
         57:35:f4:17:19:a0:1f:a9:e0:b7:f3:a1:96:06:13:b2:4b:41:
         e5:2b:1b:91:e9:23:a4:38:63:d0:bd:0f:a4:17:27:ec:fa:05:
         0c:99:a7:e5:d0:a8:15:71:c5:3a:11:e0:89:e7:7c:7d:ca:2c:
         df:21:c0:ad:18:1f:af:de:90:9d:2b:ca:29:90:40:f2:53:5e:
         d0:7e:5f:96:7b:c1:64:78:ea:33:05:46:0f:5e:66:9b:c4:2d:
         41:41:0e:01:c8:18:0b:1f:d9:a1:38:0a:c0:1d:64:ef:70:bd:
         67:05:af:5c:9b:dc:c7:10:6a:a4:fb:5c:ee:fb:bd:3e:91:91:
         7a:80:4a:85:e9:bf:15:2a:17:9d:74:fc:1e:75:e6:98:d4:d3:
         62:96:22:d0:50:ef:0f:53:d9:d8:86:97:f4:cf:eb:fd:4e:44:
         49:99:7f:80:8f:93:ab:c5:19:89:c8:68:a0:00:b3:f1:27:be:
         35:3c:04:dc:e5:a0:76:4e:97:48:06:3e:81:75:80:4f:f3:a7:
         7e:91:9e:eb:15:b4:76:47:f5:b6:f3:86:64:ee:4c:c6:6f:43:
         be:bd:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:53:48 2025 by rpki-client