Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ccfacae-ced0-3f36-a824-b596deaf938e.roa
File:                     5ccfacae-ced0-3f36-a824-b596deaf938e.roa (raw, json)
Hash identifier:          0QmrJ1GO6sysk8oGhNi22mjuEZBoCvCO4y+CXOgo+0U=
Subject key identifier:   7A:E3:7A:9B:FC:26:81:1C:D4:36:F2:F8:27:B0:DE:B8:41:18:E5:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581611438A73BAAE9891640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ccfacae-ced0-3f36-a824-b596deaf938e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:61:14:38:a7:3b:aa:e9:89:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8e0f2b79-eb2d-42ed-89ab-75ef30dfb73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:e1:20:9a:77:18:c5:fc:f4:f0:ef:90:e2:
                    dd:c7:06:16:46:98:51:45:4b:6e:bf:12:d6:5c:f4:
                    27:b2:fc:fb:80:08:95:ac:3d:17:8a:91:83:92:51:
                    f4:a4:4f:ef:ff:ff:39:64:0b:96:61:f1:dc:77:71:
                    ed:3a:f8:1d:2f:25:fb:6f:30:30:e9:b3:46:38:d3:
                    c8:5d:bf:00:7f:76:10:c4:9c:c6:83:84:8a:39:d5:
                    d3:63:c7:c5:e5:ff:5f:09:6d:24:12:5c:72:34:e6:
                    b9:a2:09:7d:2d:7b:ed:4f:65:8a:f0:35:c4:70:aa:
                    a0:cb:5e:99:d4:c0:30:5c:af:53:00:a2:b7:20:99:
                    0e:6d:ee:7b:24:62:b4:2d:3a:95:36:5b:94:72:8e:
                    07:df:d4:dc:0c:2d:57:e4:c4:d3:df:2d:e0:a5:16:
                    70:70:cd:e2:36:cb:f9:13:a9:50:64:70:64:3a:2e:
                    2a:ac:be:c9:fe:8f:4c:5b:d9:59:ff:1d:76:40:e5:
                    be:8d:f3:26:d6:0e:c1:ba:27:32:f9:8d:10:e8:e5:
                    dd:27:b7:5f:35:4b:75:cb:bb:6a:9a:a9:e1:96:23:
                    ad:f4:eb:5e:c5:f9:48:13:d1:19:f3:71:b3:f4:41:
                    39:ff:ac:2c:b9:ac:89:eb:3d:c8:1e:39:09:13:08:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E3:7A:9B:FC:26:81:1C:D4:36:F2:F8:27:B0:DE:B8:41:18:E5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ccfacae-ced0-3f36-a824-b596deaf938e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:50:a1:07:79:78:43:1d:89:e6:fc:95:a6:32:8a:32:55:88:
         08:61:dc:d1:94:72:19:c4:21:e1:4c:4e:06:43:49:99:ff:72:
         47:30:43:8e:78:1b:c3:d1:e7:16:8c:85:4a:e9:37:3c:bf:a0:
         c7:12:c2:48:36:36:a6:46:9e:25:26:81:ba:ee:4e:f0:d3:12:
         8a:15:4c:5a:78:88:cb:a4:7d:a2:6a:ce:81:20:50:99:88:0e:
         19:9d:44:a8:0a:d8:72:d3:a8:cb:2a:0a:65:10:82:62:de:c4:
         a2:f9:ae:e8:33:e5:37:04:ba:a1:6f:18:e9:ad:61:82:08:72:
         a3:5d:c0:20:d3:ca:34:46:09:4b:03:3f:2f:14:7b:e5:47:13:
         f7:cf:da:4d:e4:0d:c0:88:4f:12:ca:c6:65:af:b9:0f:b7:66:
         d2:25:a3:4e:ba:be:91:9c:e6:97:50:a1:a7:b0:05:44:e2:9c:
         33:6b:04:b7:6c:be:76:37:94:95:4b:05:a3:ba:b4:e1:e0:19:
         59:28:84:75:0f:75:8f:cd:f8:30:4a:39:be:aa:6c:ab:97:2b:
         c9:86:aa:09:30:18:81:7c:cd:b1:5d:12:0f:9b:02:99:12:75:
         2c:73:51:29:2b:65:d8:7d:fc:59:c3:c0:b2:fe:14:aa:74:00:
         15:b0:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:26 2025 by rpki-client