Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/878d8450-9b03-3c1b-ab1c-b93656ae55d8.roa
File:                     878d8450-9b03-3c1b-ab1c-b93656ae55d8.roa (raw, json)
Hash identifier:          rWCsdeTDRZNG9hriO3w0rF8HylcpGYTO8cRSj9VUNmc=
Subject key identifier:   D5:95:60:00:61:C2:DE:40:81:45:E2:63:BA:6F:8B:39:0B:CE:B3:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5815E05FCD862179B8C7400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/878d8450-9b03-3c1b-ab1c-b93656ae55d8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:5e:05:fc:d8:62:17:9b:8c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=844e63b3-f16b-41f1-9320-75652c08b64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:73:2c:b2:f5:0c:ee:f0:5a:78:31:8d:32:
                    6a:cc:0b:0a:ba:f9:bd:84:71:ea:5a:5d:fc:cb:ff:
                    61:f4:1d:24:a7:1b:7e:59:71:2b:8f:7a:6e:1c:22:
                    c7:42:ff:03:9f:46:4e:de:9f:21:66:06:04:fc:e5:
                    e7:89:61:16:90:d8:8e:b4:f4:01:66:b0:57:f1:f9:
                    49:bd:47:f9:45:b6:46:22:29:33:da:b8:39:cc:04:
                    d2:af:55:38:fc:15:46:c4:18:45:f8:01:6e:42:f0:
                    39:d7:0d:06:d2:af:18:a9:14:65:9f:95:58:c2:d8:
                    1b:66:61:1b:5d:7f:c3:34:05:24:de:1a:93:79:72:
                    d1:c9:48:16:33:8a:df:15:55:ec:aa:cc:f8:92:d4:
                    77:48:46:f6:82:8e:6f:c8:4b:cd:48:80:6f:57:55:
                    64:9b:4a:37:f8:ea:2d:a7:78:74:79:70:e1:f0:b7:
                    e4:36:91:c4:0c:ff:33:91:bc:73:36:40:41:b5:30:
                    36:72:d0:c0:18:51:dc:04:29:f0:b6:cd:27:08:ae:
                    41:4d:03:a4:af:40:76:70:d5:f8:1d:40:52:a9:35:
                    0a:7d:82:ee:c0:ba:7f:04:e5:0c:3e:19:38:c9:ab:
                    47:46:95:dd:00:1b:d2:db:7d:7e:44:c7:67:c6:0a:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:60:00:61:C2:DE:40:81:45:E2:63:BA:6F:8B:39:0B:CE:B3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/878d8450-9b03-3c1b-ab1c-b93656ae55d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:8f:e9:bf:e5:9f:a3:eb:8c:1d:2b:4f:d3:37:2d:f2:82:
         b6:bf:08:dc:7d:4d:b5:27:e4:99:fe:5d:09:b4:d1:fc:71:ac:
         ff:c1:32:0d:08:33:91:77:95:59:3d:2a:83:2f:f0:93:ba:30:
         19:fb:32:71:5a:c2:80:59:6a:32:8a:f8:fa:97:98:50:b7:e2:
         c9:7a:40:95:eb:eb:f5:0f:60:b3:fe:84:1a:45:64:8a:e7:30:
         5c:be:7c:3c:64:b1:e2:bb:4e:f8:58:e4:0f:8f:ad:a8:41:77:
         a8:79:18:38:c0:77:99:8c:c9:a1:53:6f:bf:a0:72:3f:81:c4:
         26:71:ab:4e:d0:6b:6b:59:5e:39:af:0c:89:f2:96:06:d1:c1:
         33:b4:22:d4:a0:5c:0d:8d:99:21:3c:dd:d5:ba:a1:90:45:1b:
         b6:e8:ee:b1:94:6d:9f:da:82:2e:9f:94:74:47:9f:42:f7:4a:
         98:f2:61:89:67:56:93:b5:f9:dd:3b:0a:89:ef:bb:4b:ae:95:
         6e:3e:f7:ed:43:88:bc:fa:54:9c:77:8a:64:00:e9:21:a6:74:
         f4:98:ae:34:19:81:21:12:f2:91:bb:1e:3e:69:99:ed:5e:f1:
         8c:20:cd:6a:a8:c9:92:77:6b:db:6f:e4:91:c6:be:10:1b:25:
         d7:8a:3a:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgV4F/NhiF5uMdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODQ0ZTYzYjMtZjE2Yi00MWYxLTkzMjAtNzU2NTJjMDhiNjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+hzLLL1DO7wWngxjTJqzAsKuvm9hHHqWl38
y/9h9B0kpxt+WXErj3puHCLHQv8Dn0ZO3p8hZgYE/OXniWEWkNiOtPQBZrBX8flJ
vUf5RbZGIikz2rg5zATSr1U4/BVGxBhF+AFuQvA51w0G0q8YqRRln5VYwtgbZmEb
XX/DNAUk3hqTeXLRyUgWM4rfFVXsqsz4ktR3SEb2go5vyEvNSIBvV1Vkm0o3+Oot
p3h0eXDh8LfkNpHEDP8zkbxzNkBBtTA2ctDAGFHcBCnwts0nCK5BTQOkr0B2cNX4
HUBSqTUKfYLuwLp/BOUMPhk4yatHRpXdABvS231+RMdnxgpEJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWVYABhwt5AgUXiY7pvizkLzrNzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODc4ZDg0NTAtOWIwMy0z
YzFiLWFiMWMtYjkzNjU2YWU1NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUNj+m/5Z+j64wdK0/TNy3ygra/CNx9TbUn5Jn+XQm00fxxrP/BMg0I
M5F3lVk9KoMv8JO6MBn7MnFawoBZajKK+PqXmFC34sl6QJXr6/UPYLP+hBpFZIrn
MFy+fDxkseK7TvhY5A+PrahBd6h5GDjAd5mMyaFTb7+gcj+BxCZxq07Qa2tZXjmv
DInylgbRwTO0ItSgXA2NmSE83dW6oZBFG7bo7rGUbZ/agi6flHRHn0L3SpjyYYln
VpO1+d07Convu0uulW4+9+1DiLz6VJx3imQA6SGmdPSYrjQZgSES8pG7Hj5pme1e
8YwgzWqoyZJ3a9tv5JHGvhAbJdeKOno=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:24 2025 by rpki-client