Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca072aed-d2d0-3506-8af7-697087184f66.roa
File:                     ca072aed-d2d0-3506-8af7-697087184f66.roa (raw, json)
Hash identifier:          Nv5CKDSG46Xv9/LDkr76ev8Dl+9WhgunJHBA8d9RvBE=
Subject key identifier:   5B:66:03:9B:89:29:71:5F:4D:73:BE:09:C4:FF:DD:3D:90:0E:B0:8E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581679A7308609FEF1C0900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca072aed-d2d0-3506-8af7-697087184f66.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:67:9a:73:08:60:9f:ef:1c:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b299f407-0104-4fea-9dc5-8881acb66783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:bd:f1:3c:3f:56:64:7f:80:8c:cd:f7:4c:
                    1e:27:7b:cd:63:40:6b:9e:a2:50:85:a4:53:89:57:
                    b1:44:10:de:18:de:1b:b7:80:76:73:18:84:af:35:
                    a5:9c:a0:14:18:d3:44:3e:23:3b:7d:7d:4a:56:bb:
                    8a:7a:9e:fa:ba:e3:05:83:4f:44:17:71:a9:48:56:
                    1d:e6:87:d5:f6:8b:fa:32:a4:d5:fa:35:f6:b9:57:
                    6d:28:c6:85:c8:b8:d5:bb:4b:d1:f7:55:cc:b8:41:
                    26:4c:77:f5:f0:08:a8:49:71:bd:27:3c:b6:c9:e4:
                    df:10:fc:80:e7:ba:ea:7d:b5:10:9c:e8:16:6c:34:
                    59:6d:2e:6e:34:40:71:0b:63:8d:f0:bb:88:3f:66:
                    9c:45:e6:be:e8:69:a0:7c:99:6a:f4:d2:86:27:75:
                    0e:23:a9:e2:c4:20:19:a0:5f:a5:0b:3d:28:2c:97:
                    b4:3b:4c:02:de:bd:eb:99:3e:13:ce:a5:f5:3d:ed:
                    c8:f4:ef:88:84:3e:a8:b3:91:dd:01:6e:3f:02:09:
                    8f:dd:41:7a:21:27:6d:89:f9:87:5e:3d:12:a1:80:
                    c6:5a:43:47:88:b3:3b:9b:fc:9d:35:6c:30:b1:99:
                    55:5e:dc:6e:f1:fb:1a:1a:30:25:8a:a1:22:03:79:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:66:03:9B:89:29:71:5F:4D:73:BE:09:C4:FF:DD:3D:90:0E:B0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca072aed-d2d0-3506-8af7-697087184f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:61:92:bf:3b:49:df:a8:81:8f:80:47:bd:05:ab:ec:f0:
         3f:e1:ae:eb:2e:51:49:d9:bf:f5:f3:90:73:06:51:c2:6f:39:
         f7:da:71:b0:68:b2:9d:19:78:20:6a:f0:11:0c:00:c9:e8:a8:
         32:bb:fc:92:2c:83:81:7f:40:19:45:12:d4:9e:07:12:cb:c5:
         cf:0e:fc:86:6f:f0:d3:d6:2a:f6:d7:e7:68:14:f5:77:ab:63:
         bc:18:d3:f9:05:60:9d:50:e0:cd:6a:c1:1a:1f:f4:70:a2:be:
         ab:ca:b0:a9:0c:54:30:55:e4:10:d3:ea:2d:d2:1c:1d:3d:9c:
         29:66:2b:ca:7d:40:b4:c8:bb:db:2f:b4:77:a5:54:8c:6e:ad:
         81:f7:11:0d:fc:0d:6d:bc:e7:c3:38:48:9b:1d:5a:b0:16:d8:
         62:dc:ac:c4:3a:bd:97:ea:76:6b:90:b7:cc:be:fc:d7:aa:6b:
         6f:30:f0:76:a0:86:7f:bf:d3:c8:29:1c:e8:06:d0:6c:cf:be:
         fc:04:93:e6:32:b7:54:e0:eb:a0:c7:98:1b:13:9f:bb:c7:83:
         0c:ce:26:3f:84:51:50:18:8a:45:61:c9:f6:08:22:2c:9b:01:
         57:36:46:ad:fe:09:93:be:78:fe:d7:7b:75:1a:81:91:18:de:
         22:62:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:23 2025 by rpki-client