Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa
File:                     be681068-e4e1-3d7b-a576-f250d1138324.roa (raw, json)
Hash identifier:          RXfzExQOW4jKt/yIHjjC1FKmg49SNwfG/XCrjYMRRjc=
Subject key identifier:   56:C0:B4:9F:EC:14:70:BC:31:B4:E5:E4:93:7F:2D:E1:19:EB:6C:A4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581F40159C41F8E8F9955C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:f4:01:59:c4:1f:8e:8f:99:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8b6dd447-e2a0-40e7-ad7f-d799cf47020e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:ce:71:c7:16:02:d0:3a:f7:b8:2d:f0:00:
                    af:60:bf:4f:71:98:a5:2d:04:68:d4:89:a3:e5:c5:
                    30:44:fd:0e:9a:93:0a:01:5f:a0:16:ec:dc:01:96:
                    52:fd:87:d2:6a:ba:b2:7f:29:78:b6:3f:64:3c:47:
                    73:41:70:56:1a:56:72:24:bb:0c:67:d9:a7:33:01:
                    52:15:04:0e:60:53:c3:ca:1d:66:0c:37:18:93:bd:
                    c3:7a:06:21:45:d1:e5:f2:b0:28:39:16:58:76:f0:
                    91:bc:2a:75:63:63:4e:86:8e:bc:da:cc:b4:12:66:
                    90:69:65:f6:3f:b8:19:b8:0b:34:d9:a9:6f:b6:1c:
                    56:99:85:a7:9f:02:c1:9b:91:92:0b:5f:ce:a8:db:
                    c0:ce:9e:5c:02:8d:03:9b:0e:dd:56:df:42:fe:d4:
                    72:7c:43:59:a6:fa:bd:4d:18:32:a4:2f:2a:51:7a:
                    6f:b2:39:74:6a:cd:f7:ba:e6:85:0e:ae:ff:ad:eb:
                    dc:a9:f6:16:1f:7e:a3:dd:ef:2c:f3:dd:88:38:0c:
                    38:d1:e0:b0:4c:87:86:3a:50:87:82:03:40:12:d9:
                    f2:55:52:67:ee:49:27:9b:aa:90:5d:19:70:90:ca:
                    43:19:21:ba:fc:72:0c:9e:bb:1e:b4:ab:02:b1:ec:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C0:B4:9F:EC:14:70:BC:31:B4:E5:E4:93:7F:2D:E1:19:EB:6C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:e1:00:13:94:c7:66:d9:91:9e:13:b3:30:b8:7a:33:c0:
         07:da:01:61:7e:57:c2:57:36:45:a7:f4:4b:6c:c0:8b:ae:f7:
         81:1b:68:e4:5a:c5:36:4f:06:d6:c0:82:b0:bd:51:67:9f:ed:
         e4:f5:8e:89:ca:53:06:89:03:20:f2:16:7a:bf:24:dd:13:5d:
         dd:dc:05:76:c3:89:b4:98:d4:05:de:9d:26:90:cf:61:ce:33:
         44:10:73:cb:40:9d:08:23:79:24:5a:5e:d1:5d:e3:01:61:21:
         82:ec:1f:22:ba:8d:fb:3b:59:91:12:1d:dd:8e:28:60:74:3f:
         30:ea:13:e3:83:25:d1:4b:db:e4:2f:5a:99:4c:b7:24:04:e0:
         74:3b:cd:9d:30:e6:0c:16:4f:aa:6e:01:c9:19:95:19:02:b6:
         e7:6f:3a:7c:8a:28:65:2b:78:d4:21:b6:36:96:fe:e6:39:09:
         80:85:2d:42:1b:e7:66:81:f3:9e:95:e0:02:0a:b2:b4:4b:99:
         69:24:6c:bc:bf:a1:1b:79:b3:56:f8:6a:30:08:31:0f:83:44:
         ee:e0:af:56:60:14:d1:8c:ad:f3:eb:c9:11:1d:38:44:83:86:
         85:2a:9d:91:73:a0:18:42:7d:4c:71:2c:ab:20:f2:cc:a3:a6:
         0e:37:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:56 2025 by rpki-client