Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b96361e-e9d0-3249-aef2-7d3f5769944a.roa
File:                     9b96361e-e9d0-3249-aef2-7d3f5769944a.roa (raw, json)
Hash identifier:          TyqvWhXnMswUsJ4N466cAezsnzJOWDs8tneR9odCMyc=
Subject key identifier:   9F:19:DA:DC:9D:31:89:90:00:81:10:F6:42:C5:1B:EB:30:F6:94:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581668A4D342743D7D6B300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b96361e-e9d0-3249-aef2-7d3f5769944a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:66:8a:4d:34:27:43:d7:d6:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=897a6c6b-e40e-4383-a15d-ee14c73064e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:22:84:87:65:23:5b:74:57:af:cd:00:f6:
                    e1:c2:1a:1b:59:cf:2c:de:2a:6a:c9:05:7e:db:ee:
                    d1:2e:82:1c:55:d6:88:ab:37:41:48:88:de:fd:ed:
                    30:c6:f9:bb:a5:c7:e5:26:87:fc:43:6a:9c:8b:4e:
                    cb:2f:fc:99:90:af:f1:48:62:39:29:36:b1:6f:1d:
                    0e:e6:ce:61:46:76:ce:bc:4e:76:75:d8:83:d5:1b:
                    f1:80:cd:14:24:11:9b:12:e8:5c:15:4c:95:29:85:
                    a2:ad:27:9b:df:63:01:aa:5e:b2:18:2b:45:8a:ca:
                    52:2b:8c:26:01:09:09:c4:f1:96:3f:8b:5f:01:bf:
                    59:b0:d6:8e:3a:da:0c:5f:d4:35:c8:23:25:cc:69:
                    48:33:6d:42:22:5f:9e:51:52:38:87:4a:c3:85:51:
                    f5:35:fd:fc:25:e2:92:b0:71:6a:b3:2f:6c:99:43:
                    f5:c3:2e:ce:63:5b:47:80:44:2f:77:96:be:29:4a:
                    a7:d9:56:04:3e:3d:3b:d9:dd:aa:85:80:14:8d:48:
                    e6:e3:46:a4:e3:03:97:a5:4e:90:18:81:e9:03:c7:
                    76:63:af:1c:6d:8c:fc:b7:64:c3:14:67:07:67:58:
                    6c:e7:e3:aa:df:75:39:2c:23:e3:8b:87:14:94:00:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:DA:DC:9D:31:89:90:00:81:10:F6:42:C5:1B:EB:30:F6:94:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b96361e-e9d0-3249-aef2-7d3f5769944a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:00:af:a9:a9:79:2b:e1:2e:3b:07:54:43:db:59:3a:26:
         c6:ba:61:22:47:dd:5a:cf:4b:33:a1:0e:cc:41:67:be:50:01:
         ea:df:f7:0d:ea:aa:9c:f2:62:d3:d3:3a:fb:ae:57:fb:43:a6:
         01:61:01:94:66:96:9e:d2:fb:bf:4f:32:4d:61:89:86:2c:1a:
         cd:87:f6:fc:b2:aa:cd:be:91:d0:8a:81:ec:81:30:55:26:da:
         31:b4:46:a1:a8:e9:5d:b6:18:c9:af:af:af:7c:b0:4f:1a:a1:
         ab:91:df:9b:e8:42:49:17:3e:17:2f:08:d5:33:fc:b6:56:5a:
         30:0f:fd:62:00:03:d2:b4:69:2f:1c:62:da:26:75:32:e3:14:
         27:75:60:14:50:69:73:76:91:dd:a1:13:fb:24:34:40:2b:a0:
         1f:71:07:91:61:ea:c5:b5:30:c7:05:ce:63:b3:16:a6:eb:21:
         6f:ff:1f:38:cb:1b:b2:e1:8d:5b:3e:ea:44:55:1e:24:8d:5a:
         be:fd:b3:df:39:2a:cf:ae:dd:38:62:29:4d:96:d4:57:09:97:
         92:78:0a:85:5d:f5:b4:b0:b9:17:fe:5e:25:ee:6b:b9:40:41:
         a6:52:f2:95:2c:3d:1c:b4:d1:14:71:50:94:cb:b7:8c:a2:20:
         73:61:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:56 2025 by rpki-client