Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c46b8907-0a8d-340d-bffd-5e31d7f727e1.roa
File:                     c46b8907-0a8d-340d-bffd-5e31d7f727e1.roa (raw, json)
Hash identifier:          XqFVcqSips/c6mTKBQk6PxMgr+NW8KZc+5I2POtpn6k=
Subject key identifier:   46:75:F1:FF:25:C0:5C:59:2D:26:B3:3F:8E:FE:39:13:64:09:CF:44
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581620A50948D6E424CCFE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c46b8907-0a8d-340d-bffd-5e31d7f727e1.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:62:0a:50:94:8d:6e:42:4c:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6f45fa5d-b51b-45b3-ae3e-d9c997b6c839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:36:ca:d3:0d:e0:d2:d5:7d:50:7e:04:99:50:
                    54:6f:29:78:16:32:66:f2:ad:25:e8:75:78:60:11:
                    0d:eb:72:f4:86:8c:0d:d5:42:f8:26:5e:fc:2e:88:
                    bd:30:9b:9e:99:db:87:27:0d:0d:de:30:9c:46:17:
                    b7:95:bd:f6:b6:58:f5:79:d6:f2:fb:77:14:a5:3a:
                    a1:f6:5b:aa:93:8f:42:f4:d8:c0:d3:da:70:3d:bc:
                    bd:aa:42:98:c7:76:55:a6:00:49:d4:07:95:82:32:
                    78:ff:49:1d:eb:9e:66:c1:5b:5d:e3:47:26:a8:e1:
                    a7:ec:99:36:d5:2a:a8:b0:f6:4a:0b:96:6e:01:14:
                    08:19:38:33:a3:8b:45:ab:1f:56:59:e7:f1:51:8e:
                    a9:f1:00:9b:cb:64:b1:4f:a9:97:9b:c5:3b:cd:6a:
                    5a:d8:65:be:35:ea:f1:05:07:61:b5:6a:bf:97:43:
                    2b:f5:60:d1:aa:6b:a7:94:50:05:b5:5b:c4:58:91:
                    e1:2c:fc:9d:33:c5:1e:80:21:9c:e6:03:6a:03:ca:
                    48:c2:f5:f3:55:0d:ca:9e:6e:dd:d1:f9:ed:08:fb:
                    db:63:a4:99:fb:ff:13:a9:02:97:27:50:63:65:d6:
                    6e:4d:41:53:f2:c3:65:71:13:2f:55:e9:4d:b6:2d:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:F1:FF:25:C0:5C:59:2D:26:B3:3F:8E:FE:39:13:64:09:CF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c46b8907-0a8d-340d-bffd-5e31d7f727e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:2c:d7:0f:45:04:f4:a1:54:d2:b7:11:46:4f:e6:0f:1f:
         e8:94:6a:97:34:51:c8:80:80:d2:e2:b9:6d:b7:e1:aa:5f:d5:
         d4:f9:7a:f3:3f:8a:19:ab:f1:e8:22:12:41:2d:b1:ac:d9:51:
         43:18:e3:4b:da:d5:83:bc:38:6c:68:b9:8b:bb:ef:91:f1:09:
         ce:6f:53:e3:13:54:cb:a7:43:5c:07:89:39:b8:ba:bf:c5:74:
         37:b7:f5:0f:1a:6b:ed:33:fb:23:1f:50:80:c2:bd:23:c3:77:
         5a:0e:14:fb:1e:73:a4:70:05:12:9a:71:38:bb:85:c2:46:5c:
         89:de:e6:b2:76:a3:82:9e:21:d6:63:0d:da:69:7f:a0:fa:a9:
         8b:8d:10:80:ca:00:1d:9d:a0:6f:03:a4:e7:d6:0f:c0:e5:bb:
         e8:df:21:68:17:a7:99:89:44:24:83:50:e3:6b:a7:02:5f:52:
         d4:e7:70:3d:04:2a:0d:93:31:1d:68:91:ea:5a:8f:67:17:92:
         c0:66:e7:81:f4:c9:f9:58:3d:86:b8:ab:48:19:13:34:b0:f8:
         10:ac:02:24:25:e3:a4:4c:a5:b8:d0:fe:5f:2a:67:b6:e6:a8:
         9d:f5:c6:8e:68:f2:bd:83:67:27:12:23:ba:0f:3c:79:77:5e:
         e9:90:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:03 2025 by rpki-client