Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa
File:                     9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa (raw, json)
Hash identifier:          IMz9quW4nnuc2Wuy0Dqa56GtF4/bZ3VqYzVPHAzO/Zs=
Subject key identifier:   80:58:1B:6A:1A:2C:9A:D6:90:CE:56:0C:D5:8B:C5:AE:41:17:05:B4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58169D17465E91FBB3A00C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:69:d1:74:65:e9:1f:bb:3a:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=21b59b58-e242-4aff-ba93-39d241d52809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:63:6d:9a:82:9c:c6:e4:a4:b6:eb:6d:26:64:
                    9f:8d:3d:7d:6a:ab:7a:2a:24:51:50:54:60:a9:0e:
                    dc:44:9b:96:ef:de:59:75:8a:b0:3f:9e:9f:ba:17:
                    26:ce:28:af:43:18:5b:fa:ae:2b:52:49:a9:55:65:
                    00:49:f9:6a:14:6d:90:b4:bf:1d:bc:df:55:02:c7:
                    b7:45:75:4b:a7:c1:7b:07:de:99:4a:44:02:1c:3b:
                    50:06:07:8e:7a:ab:f9:bf:9e:c6:38:cb:e8:ab:10:
                    b0:70:63:12:1d:69:fb:f6:4c:a0:7a:d2:59:e9:a6:
                    26:f8:6e:f8:17:74:52:d3:02:ca:f4:03:99:e0:b7:
                    63:a4:2b:4f:eb:2c:42:e3:dd:e6:11:af:4a:34:f6:
                    69:18:76:d2:7e:84:a0:78:8c:cb:9d:2e:22:9c:0f:
                    1b:c4:fd:e3:8c:e9:f7:df:92:58:e4:a4:12:a5:8d:
                    45:c2:12:a8:86:30:40:1e:e9:d4:de:66:c6:aa:df:
                    0b:4d:37:b1:39:00:47:81:7e:b4:87:37:e9:4a:36:
                    9f:0c:65:c9:dd:e5:44:8d:f8:3e:5e:19:4f:95:50:
                    da:94:1b:70:f9:8a:77:92:3b:fe:72:ea:3f:1c:56:
                    19:a6:14:83:fb:da:a1:6f:ff:f5:e3:55:15:44:9e:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:1B:6A:1A:2C:9A:D6:90:CE:56:0C:D5:8B:C5:AE:41:17:05:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:91:06:44:e0:1f:8a:fe:f0:a0:39:ad:7a:51:06:91:f6:
         3e:91:90:e0:56:11:63:59:5a:95:be:4a:57:a9:34:bd:be:07:
         9a:81:f6:8d:79:8e:4c:24:27:62:dc:0c:9c:da:28:96:76:15:
         8c:05:89:b5:b4:7b:b3:45:a6:08:84:42:1b:8e:7a:a2:dd:ba:
         bf:d4:19:06:ba:0b:47:17:f5:dd:27:31:65:ff:79:de:5e:f7:
         f9:b7:2b:10:c2:79:b1:19:06:85:bb:1e:57:8c:25:64:27:03:
         52:74:47:9a:81:7f:46:07:79:52:c0:4d:bd:20:c7:e2:cf:4f:
         56:37:5e:c3:f9:ab:3a:1f:fd:3a:ab:64:05:05:89:6d:51:b0:
         bb:77:f4:0b:e1:c1:87:e0:3b:9c:e0:f1:11:f4:fe:bf:08:30:
         73:62:e8:da:b9:cf:4a:be:b4:ee:94:30:19:1a:c2:2d:5e:7d:
         bb:fb:b5:7c:07:63:ce:54:38:42:fd:81:26:81:e3:e5:3d:82:
         ab:38:f1:8b:f7:b8:74:a6:28:8b:0b:50:e5:69:99:49:6d:9d:
         e1:e8:6e:a5:e8:aa:7e:5c:2f:0a:1a:99:be:4f:7b:2a:45:9a:
         71:59:e6:3e:20:a5:7c:5d:ae:f1:cc:59:69:68:0e:d8:fb:e7:
         b1:34:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:47:35 2025 by rpki-client