Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76be86ff-254e-3dce-bc0d-7db4f6675c90.roa
File:                     76be86ff-254e-3dce-bc0d-7db4f6675c90.roa (raw, json)
Hash identifier:          9IC/3kmxEJzGky/Z0+cQE09agreCgznCohvfg0PtZIw=
Subject key identifier:   9A:30:4E:81:DF:38:6B:25:A0:DB:7D:0F:32:70:9B:71:14:F9:84:B3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5816758DD754156C3468C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76be86ff-254e-3dce-bc0d-7db4f6675c90.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:67:58:dd:75:41:56:c3:46:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7c8a8fe1-75a9-4404-9c8f-4c6e108aa99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:ad:65:a4:8c:36:18:58:14:98:10:04:66:
                    44:43:1d:91:ee:5b:17:15:7b:9b:47:bf:bb:70:c6:
                    f8:99:32:87:b9:c4:e2:aa:ed:49:0f:e8:b0:61:de:
                    6b:d3:29:bf:77:c6:f9:11:4e:62:98:be:02:46:f4:
                    da:91:c3:78:7c:9e:14:c5:c5:3e:cc:bf:e5:a6:f7:
                    4c:63:b5:e4:65:15:aa:ab:10:63:4f:4f:2b:c3:72:
                    d1:da:75:da:e6:ea:ba:4b:4a:31:6e:8f:85:0a:8f:
                    6b:95:eb:86:52:63:c5:7e:3a:fe:48:1b:43:40:1b:
                    31:50:08:aa:1d:c2:87:73:ae:dc:ed:84:06:54:4e:
                    09:a5:35:05:dc:58:a4:ac:19:69:ad:80:a4:72:fb:
                    4d:01:a2:ff:ce:3c:b9:89:12:7c:07:a6:bb:45:8f:
                    16:83:57:6d:cd:3f:3b:64:5f:83:a8:07:a7:aa:c5:
                    d5:90:76:a8:cd:a4:5e:50:d4:0a:03:56:16:d3:5e:
                    dd:89:9e:72:81:39:52:c0:5f:2e:79:8a:59:c7:7d:
                    5f:0e:6b:84:64:da:52:58:e4:61:73:59:29:58:f5:
                    e3:49:bf:84:db:52:14:d4:16:de:4b:1b:af:a3:28:
                    c2:9c:96:8b:e6:d6:9c:e1:87:a4:8f:08:a2:8e:4f:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:30:4E:81:DF:38:6B:25:A0:DB:7D:0F:32:70:9B:71:14:F9:84:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76be86ff-254e-3dce-bc0d-7db4f6675c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:f5:e5:cb:46:bb:00:94:26:e3:74:4d:7f:c7:1f:64:6d:
         1e:c4:bf:b2:53:c7:2e:b7:6e:36:28:71:db:48:07:75:a4:b8:
         de:d3:8d:a5:b8:e1:49:ec:ee:c3:89:12:b4:4f:98:d7:a1:b7:
         48:af:22:76:ef:39:fb:a8:bc:7b:f7:b8:18:95:d1:f6:c3:60:
         71:e7:d2:7e:9d:7a:e8:4a:44:8b:ac:aa:f6:0b:80:fd:21:2f:
         f7:08:50:20:13:80:ff:a1:39:92:02:95:5c:9b:c8:b3:ef:d8:
         de:61:39:f7:e6:43:3e:91:a2:fe:a2:87:ef:54:23:f1:c5:d7:
         84:28:1a:9d:32:59:8b:33:f5:80:39:31:5c:95:9b:1e:9f:31:
         28:86:6b:62:41:6c:e0:01:b8:ce:17:a5:4e:ca:f0:34:17:6b:
         fb:a8:1b:90:e9:24:2c:42:5f:ec:86:76:4b:5b:9d:58:5b:ad:
         a0:0e:f5:f6:80:c0:67:7e:83:ce:33:a6:28:76:1b:37:61:e1:
         6b:3d:f8:d5:90:f4:cb:f0:e5:6f:31:e0:ec:76:a8:03:bc:70:
         55:30:00:06:68:12:c5:ac:f7:ed:a1:64:89:a0:26:09:d8:b0:
         d9:bf:58:14:c9:eb:9a:db:b0:4d:8a:82:36:44:84:74:c2:d3:
         db:4c:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:04:15 2025 by rpki-client