Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa
File:                     527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa (raw, json)
Hash identifier:          fc4cr/UDdfr0BhDk4aGyzuVAEmWH6p4sVrCFjdfMHFs=
Subject key identifier:   1D:27:93:C3:5B:C7:97:F8:7E:28:28:01:FE:FC:3E:B4:18:0C:F9:A1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5816616D7F8294E9B741000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:66:16:d7:f8:29:4e:9b:74:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=4ec89eae-4688-4077-bc55-99a09e3c5327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:74:54:84:48:f9:8d:1d:bd:a6:b1:b9:03:
                    58:ca:7b:53:06:f3:3d:bd:c0:5d:94:df:e0:8c:f2:
                    7b:3b:27:6f:29:62:8c:cf:6e:32:7c:6e:4a:76:4a:
                    5f:ec:f6:d9:14:b4:c3:68:a1:e9:7f:81:9e:cb:a4:
                    cc:c7:3d:b9:61:e7:9b:9e:a1:b4:23:93:7b:b0:76:
                    a2:32:4f:49:e6:ad:94:9c:ba:2f:a0:ec:24:13:8c:
                    36:cf:46:e8:52:35:bf:10:4d:27:ed:e7:05:fc:d1:
                    94:83:f1:f0:58:94:0a:a7:23:7e:f1:94:70:8b:47:
                    0a:04:cf:a1:5c:4c:28:d1:a6:59:d9:50:90:39:65:
                    97:f0:8e:b5:fb:bd:8d:46:97:4a:16:81:13:59:49:
                    d6:f2:68:7d:c5:ff:db:5c:b0:08:12:7e:94:2d:95:
                    69:06:e3:dc:26:6e:2c:e6:ec:99:7d:58:89:e7:00:
                    75:f2:7d:4c:5e:31:f5:e0:ea:eb:72:0f:2e:93:80:
                    04:f8:7b:82:59:47:b5:3f:57:11:8a:cb:0b:67:95:
                    60:63:7a:12:87:d6:73:1c:d6:f3:31:1b:a4:b1:12:
                    d7:5c:ef:54:6f:45:e1:33:da:da:14:8b:57:b0:4d:
                    a6:be:a8:ff:3e:56:a9:bf:7c:00:c0:66:f6:84:a0:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:27:93:C3:5B:C7:97:F8:7E:28:28:01:FE:FC:3E:B4:18:0C:F9:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f0:f4:3b:57:5a:70:94:2d:e1:95:6f:13:50:c9:92:dc:cd:
         3c:20:ec:17:a7:bc:d8:88:bc:c3:37:cb:8f:4a:1f:8c:87:b1:
         c0:1f:f9:2e:a6:32:15:73:60:c9:a3:74:25:c6:d3:6f:71:ec:
         37:46:af:1c:9d:ac:8a:75:34:d1:bb:20:a7:e8:7a:ef:bf:48:
         d9:59:bb:16:4e:5b:08:73:56:c9:49:de:89:fc:2a:c6:96:2f:
         91:29:c5:a3:86:af:10:6a:6d:eb:06:76:66:90:93:7d:f2:4d:
         9e:22:00:e9:e3:ef:54:a5:2a:3e:66:f8:be:a0:d6:63:83:91:
         0f:c7:54:d1:56:b1:16:73:80:3b:5b:aa:ce:20:4e:a4:2d:56:
         eb:5f:d6:74:00:61:0f:58:2e:15:8d:dc:05:92:08:83:b2:64:
         09:4e:96:3c:5b:1a:35:0f:42:71:0b:09:72:3c:ac:55:99:a0:
         4a:0f:ac:22:91:8e:00:24:d9:cc:4d:1b:f3:d4:d8:35:a2:6c:
         99:6a:28:72:81:7f:8f:f5:b9:23:f8:6c:84:f2:ca:dd:21:84:
         0a:53:e1:52:8d:77:10:0d:01:25:b4:31:68:7e:f9:06:eb:e7:
         3b:ec:58:8c:d0:73:5b:ec:73:87:06:ab:16:a0:96:77:ef:78:
         63:5e:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:32 2025 by rpki-client