Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e9d4fd3-a4cd-376b-bb6f-ac31885a3d59.roa
File:                     7e9d4fd3-a4cd-376b-bb6f-ac31885a3d59.roa (raw, json)
Hash identifier:          Ma/1njjdNtWBWeBfGiFPa0J5fVR5hPPTC1YMr4XVr/8=
Subject key identifier:   B6:13:9C:2E:49:F1:87:8F:30:74:8D:EA:04:D2:36:6E:1E:0D:F3:D1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581F1283EE9A06257533A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e9d4fd3-a4cd-376b-bb6f-ac31885a3d59.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:f1:28:3e:e9:a0:62:57:53:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5a419e4c-eec0-4791-bdd3-d142ef531824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:7d:c9:e7:4a:9a:88:ee:46:72:68:f0:ab:
                    62:06:b0:78:44:c8:11:5a:6d:65:0b:63:6d:76:e8:
                    80:41:d7:c6:c9:50:f2:de:42:63:8b:92:de:c1:7f:
                    a9:1f:c8:16:25:f5:5d:b2:ff:e6:27:1f:be:f4:0a:
                    67:cd:fe:65:da:a2:0d:04:a5:34:a0:cd:39:91:24:
                    6b:a8:c9:5e:11:26:cd:94:37:ff:1c:f6:54:60:ed:
                    8b:8e:a0:95:3a:13:15:78:63:44:68:d3:c1:f4:28:
                    f9:af:a9:e4:f6:fa:78:0b:f5:1f:6e:3d:05:f4:02:
                    c1:c4:72:60:6e:14:c5:69:7f:06:f6:3a:d7:1c:38:
                    b2:e7:f6:ac:e6:03:8a:43:5e:2d:a2:b5:f6:76:88:
                    14:72:4b:e5:93:35:f8:40:3e:e5:e3:95:0d:7a:63:
                    eb:8e:56:e9:1d:24:50:81:bf:01:13:d3:64:5d:a1:
                    6a:a6:29:73:2f:e5:a4:eb:fd:b1:1f:fd:5d:c0:9f:
                    df:a0:10:fd:5d:51:13:21:5a:ba:5f:41:85:33:39:
                    82:a8:82:63:bf:2c:02:1f:34:4f:de:69:f9:8a:9b:
                    bd:fa:5d:cc:a0:88:45:a8:a6:3c:ad:f1:71:0d:04:
                    c5:f4:cd:c7:3f:2d:84:8c:ec:d6:18:c7:9e:b7:13:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:13:9C:2E:49:F1:87:8F:30:74:8D:EA:04:D2:36:6E:1E:0D:F3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e9d4fd3-a4cd-376b-bb6f-ac31885a3d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:0c:b9:c9:27:f5:59:96:0b:28:f6:28:85:33:2e:89:ac:
         f2:30:74:4f:f6:f7:3a:90:7e:bf:e4:7e:92:fd:09:10:2e:62:
         f9:19:02:f8:28:70:75:6c:11:04:71:ec:b4:c7:28:dc:7a:5b:
         6f:84:c6:a7:85:f7:14:c4:79:cc:d8:e6:79:90:9b:34:f4:87:
         d7:f8:50:4b:de:ef:25:88:4f:a8:78:e1:76:13:c3:9a:7e:77:
         56:7e:01:e2:96:5f:73:4f:4a:48:74:31:f5:15:52:95:49:2e:
         29:81:b7:f4:01:a0:fb:df:31:0e:27:04:d2:ab:00:6c:73:44:
         95:f7:1b:86:c9:a8:ec:69:d3:7f:80:87:ef:60:7c:b6:99:8c:
         00:51:4c:18:06:ca:d7:8e:ba:64:8b:20:d7:58:9d:8c:7e:d0:
         5b:92:5d:56:9e:77:7d:e0:0b:84:b1:4e:3f:27:93:aa:23:75:
         60:36:54:f8:fc:9f:79:97:15:46:43:a3:83:2e:5e:fe:c7:53:
         c5:ed:1f:14:fc:7c:29:0c:6f:3c:50:01:c2:58:9e:b2:e0:e8:
         33:50:d5:88:ba:b9:b7:9c:e9:2c:f6:ab:cc:a4:06:e6:ec:c4:
         30:b7:05:18:15:af:13:19:72:58:9a:b3:f8:7a:ae:fd:fe:7f:
         29:ab:f3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:16 2025 by rpki-client