Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7ae4aae6-d623-34b9-b423-b8a2cfb38755.roa
File:                     7ae4aae6-d623-34b9-b423-b8a2cfb38755.roa (raw, json)
Hash identifier:          /g730GimuWfdo5m/CvunO+5SzWFgNEsbUhF1C4Jc7Z0=
Subject key identifier:   EF:3B:F8:CD:B4:37:E3:17:FB:D7:2D:E0:09:98:11:53:22:A7:D9:04
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581EF6C3AB6891461464CF0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7ae4aae6-d623-34b9-b423-b8a2cfb38755.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ef:6c:3a:b6:89:14:61:46:4c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=95f08e39-3d42-4a19-bcf0-7fe8919a707f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:a8:03:36:55:d6:75:77:ac:a1:74:e9:82:
                    34:48:e0:b3:f3:56:d8:01:1e:f6:e8:fe:78:0f:dd:
                    90:42:71:9d:d2:2e:70:f6:96:ed:cf:a7:71:29:c9:
                    a3:6b:71:aa:0a:cb:f7:5b:69:6c:d5:fe:ec:df:0c:
                    1b:0e:29:5d:4a:09:51:8b:bb:ea:25:be:f2:5d:66:
                    1b:07:ff:11:5a:0b:96:57:70:12:3b:22:33:a5:58:
                    6e:88:5b:24:c9:cd:9f:08:26:7c:a2:40:ba:30:e1:
                    5a:a7:93:42:e3:12:a6:6d:04:fc:a3:52:15:4f:fc:
                    65:b1:25:52:5f:8c:53:b5:20:fe:74:87:84:9c:7a:
                    46:80:94:00:0d:32:f3:c6:af:0d:6c:e9:36:e5:f1:
                    5e:10:51:23:ff:a2:f2:3d:4d:71:f1:ab:a2:da:dd:
                    11:29:2c:db:f6:9a:48:1e:62:25:8b:59:cc:90:f5:
                    00:7b:01:44:cb:2f:a5:77:05:eb:c5:32:21:d4:01:
                    01:44:47:15:0e:c2:08:2a:88:a4:8c:ee:66:25:59:
                    62:f8:9c:e0:fe:79:c0:3c:64:07:64:ab:2c:f8:60:
                    22:78:5e:b3:9e:3d:88:7a:e9:e6:12:9f:88:3d:97:
                    c3:1a:a2:bf:08:0d:ea:1b:ec:3e:7f:f0:d7:73:bb:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3B:F8:CD:B4:37:E3:17:FB:D7:2D:E0:09:98:11:53:22:A7:D9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7ae4aae6-d623-34b9-b423-b8a2cfb38755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:17:7b:18:22:15:bc:fa:e3:29:c6:9d:68:0b:94:a1:a1:3c:
         5d:f6:34:ca:b1:22:54:af:7b:a2:c7:a9:96:57:f7:d3:80:84:
         17:3f:28:de:c1:db:9e:1f:9e:a1:1a:86:27:54:f9:c3:cc:0f:
         ef:41:37:66:ff:97:cd:74:9a:ac:74:d0:6f:c8:1f:5e:c9:96:
         f6:d6:a5:2c:54:ca:5f:e2:b8:a8:e7:3a:05:03:02:07:c7:40:
         03:2c:d5:b9:90:b1:83:5c:4e:cd:04:6a:6d:54:e2:cd:e1:52:
         a9:04:9b:dc:86:f1:d7:dd:fe:af:d7:70:67:67:9a:31:dd:f1:
         91:8b:8c:84:de:8d:ec:45:f6:3e:81:ca:30:ae:6b:41:ff:62:
         68:6f:c2:5e:dd:e8:90:69:b2:21:a5:76:af:a2:98:92:58:c3:
         d5:f2:da:3b:ed:ff:83:e9:2d:e8:e6:14:d8:5c:cf:ee:21:1f:
         b3:a6:28:cf:86:16:f5:0a:4a:49:42:46:4e:51:24:44:ec:56:
         fb:41:21:44:4a:f7:37:3a:bd:cb:a4:ae:ff:be:49:52:da:26:
         0d:cd:93:b4:31:53:d6:3d:09:3c:5e:77:6e:86:37:96:03:bb:
         d7:ef:28:7d:29:b7:7a:f6:7f:b2:e3:19:c7:0c:1e:ba:d3:fc:
         19:32:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:27 2025 by rpki-client