Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad5f5be9-5164-3617-a46e-17c00a26cf41.roa
File:                     ad5f5be9-5164-3617-a46e-17c00a26cf41.roa (raw, json)
Hash identifier:          q7ZdxpZzChc9vLlzZ6PN5zXMZU4P0TYRLk4u2QVCqrM=
Subject key identifier:   70:EF:73:16:C0:AE:7E:BE:B7:37:95:D9:03:C0:0B:1D:FF:44:BB:1A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581EF9D905F1FA625646D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad5f5be9-5164-3617-a46e-17c00a26cf41.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ef:9d:90:5f:1f:a6:25:64:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e3ae63b8-540d-4ab0-baed-44b6677d57ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:46:69:9b:25:ca:6e:d5:77:63:58:6a:c7:
                    d6:52:79:10:ca:6f:55:77:cb:86:cc:d2:e5:dc:bf:
                    cd:ba:6c:70:64:8e:b0:02:64:ac:4d:73:80:21:17:
                    ac:fa:3e:24:a5:d3:82:56:c3:80:a6:ef:b5:82:25:
                    24:35:1e:c0:e7:67:67:cc:1d:d6:65:4a:b6:c1:66:
                    80:cc:73:5c:47:82:18:1b:cd:cc:7f:b4:bc:d2:2f:
                    3c:08:f2:e0:79:7d:09:86:0b:1e:f0:88:ad:ee:c9:
                    65:fb:b8:8d:76:53:05:7e:12:97:2a:93:c9:1f:f2:
                    6f:29:5d:d5:cb:1a:55:e7:e0:74:fc:35:3a:1d:e6:
                    8f:ff:78:1b:3c:f0:03:2b:46:0c:5a:36:0a:15:e6:
                    16:37:f6:13:9b:4a:af:3d:b1:69:34:77:2d:29:36:
                    13:ed:55:ac:e5:3c:83:b0:0b:3d:de:41:1d:3f:27:
                    36:c4:2e:b7:62:61:77:38:03:bc:60:91:b9:dc:f0:
                    91:76:4a:20:cd:4c:76:21:24:48:6f:8c:23:4d:5f:
                    3d:83:4f:67:f1:f1:db:95:ee:ad:2e:50:35:0a:c0:
                    2e:be:0b:76:22:39:cf:bf:b1:4d:f2:7a:1a:85:27:
                    c5:14:80:33:67:84:f9:53:cd:ae:a7:1f:70:73:65:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EF:73:16:C0:AE:7E:BE:B7:37:95:D9:03:C0:0B:1D:FF:44:BB:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad5f5be9-5164-3617-a46e-17c00a26cf41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:aa:be:3d:15:e1:ef:db:1b:55:68:d8:ee:1f:6d:59:49:
         cd:9a:79:3a:23:4c:be:9d:d8:3c:af:f5:9c:aa:e4:78:26:97:
         7e:cc:af:f5:0b:d9:46:8a:e2:d2:15:82:7d:77:4d:7d:cb:41:
         61:55:e1:e4:7f:79:e9:c8:8a:23:61:98:31:90:a4:fb:f5:08:
         71:5f:bd:51:d3:15:19:4d:5f:1b:ed:85:04:51:65:5d:b7:df:
         08:cd:43:f8:3d:73:0a:0c:65:ea:1a:ca:a7:84:3a:b0:56:be:
         41:49:1a:b2:36:02:be:6e:3c:92:88:0d:4d:e4:99:d3:e9:6c:
         6d:4a:48:7f:29:9b:7a:da:23:3a:bb:3e:ac:70:1f:8a:c4:da:
         be:7e:e3:b3:27:19:5e:0b:78:aa:4c:74:3e:4f:f0:6f:94:50:
         cf:a7:e6:ae:bd:a1:78:ef:c7:cc:85:26:10:b8:81:a6:35:76:
         e1:8c:1d:e6:78:61:06:49:38:f4:eb:60:ad:4c:ae:41:00:79:
         a5:7e:7b:3b:1e:4a:4a:87:26:20:a8:71:fa:c7:a5:6a:86:f2:
         8d:69:55:3d:6a:45:a5:a3:52:aa:9d:76:20:b2:8e:7d:dc:69:
         58:1c:51:5e:5a:7a:d5:cb:c6:f9:8a:3e:32:2f:2c:13:1d:3e:
         b9:8f:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:33 2025 by rpki-client