Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d96082e2-4b8e-3430-a7f1-43ec85810198.roa
File:                     d96082e2-4b8e-3430-a7f1-43ec85810198.roa (raw, json)
Hash identifier:          LwlmRGCHlE2uaIgOFtGiEaPv9gAuVonFcte6V43cb2g=
Subject key identifier:   73:8B:B2:E4:CB:D6:67:C7:6B:89:85:C7:4E:0D:FC:32:20:54:5B:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581F387F243FC5A3343A980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d96082e2-4b8e-3430-a7f1-43ec85810198.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:f3:87:f2:43:fc:5a:33:43:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=fdb611ee-0b0f-4b28-9b20-1f2543056991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:19:21:30:c4:f1:67:b3:66:17:3e:90:04:83:
                    3c:14:07:58:d9:39:f0:25:45:47:61:d2:f3:b0:40:
                    1f:c8:d2:58:b5:59:e7:e8:3a:a8:9a:f8:e7:1b:eb:
                    0a:9f:02:db:1e:e7:4e:3e:4d:25:d6:82:03:e8:1b:
                    6b:30:8a:2d:87:ba:13:34:80:70:22:1d:31:40:4c:
                    e4:01:c4:ba:49:fe:41:11:40:6d:00:62:13:bb:08:
                    fc:21:67:7c:eb:8a:91:58:61:14:10:ba:c6:2b:3f:
                    79:d5:89:32:a7:4d:7c:28:4e:c9:4d:23:da:0e:84:
                    e3:4b:fb:b5:9b:3b:39:6a:ac:05:fa:e2:fe:47:3e:
                    f4:6a:4b:e5:a0:02:c2:16:ac:9c:8d:7b:28:46:21:
                    1b:4b:b6:b3:db:12:e5:23:9b:de:4d:d8:2c:53:86:
                    22:b8:05:3b:ac:0a:1d:32:e0:13:19:54:54:0b:9c:
                    f4:42:62:af:83:4b:2b:c6:af:cf:27:41:a9:ee:fd:
                    72:3d:8b:92:f3:51:c8:35:22:04:08:a1:68:d0:21:
                    8e:c5:9e:10:5a:40:3f:e8:81:7a:fe:11:86:05:7a:
                    99:1d:84:79:7c:b3:83:e4:34:13:32:52:7e:14:d9:
                    12:f1:eb:43:04:2f:27:1c:62:2b:68:ec:6e:fd:d5:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8B:B2:E4:CB:D6:67:C7:6B:89:85:C7:4E:0D:FC:32:20:54:5B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d96082e2-4b8e-3430-a7f1-43ec85810198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f2:b6:73:d8:6a:8a:ec:1e:da:cf:ab:ac:af:9d:dc:34:76:
         9d:f0:1d:46:a7:fa:7b:09:e9:5f:a4:fe:f4:59:d9:a0:b5:6d:
         24:c8:f2:13:83:2b:15:9c:9c:63:a4:f3:f0:14:45:30:40:b5:
         35:96:27:59:88:1d:c8:5d:92:b0:e0:e9:f4:7d:9a:0b:a0:40:
         e6:07:d5:46:25:2e:98:ca:27:a6:f8:7c:62:0c:18:75:32:3c:
         96:57:12:ec:2d:18:47:e6:19:fb:d3:e4:01:8a:9d:85:80:cc:
         9c:35:7b:46:35:f0:0f:de:21:10:53:eb:19:81:5d:bb:fe:ab:
         98:81:7a:ec:eb:e7:8c:bf:2f:11:61:c0:11:61:d4:a5:80:57:
         d6:02:11:6d:aa:5d:2e:2b:b4:ce:dd:8f:95:95:54:91:f4:31:
         31:06:db:42:4d:8b:9d:25:27:a6:d5:cb:8d:cd:a6:9a:e7:15:
         78:31:37:b8:f6:ae:0d:7e:21:eb:a1:da:f6:2d:5a:b8:0d:6d:
         c3:9a:53:5c:79:b0:0c:31:e3:28:20:16:1e:e6:60:18:a0:0b:
         c1:26:7d:49:08:89:f8:69:6c:8a:c3:6e:8d:f9:30:b1:23:5e:
         33:e7:2b:00:0b:21:09:91:4e:25:18:c0:5d:54:f0:d8:3f:21:
         29:17:db:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfOH8kP8WjNDqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmRiNjExZWUtMGIwZi00YjI4LTliMjAtMWYyNTQzMDU2OTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xkhMMTxZ7NmFz6QBIM8FAdY2TnwJUVHYdLz
sEAfyNJYtVnn6DqomvjnG+sKnwLbHudOPk0l1oID6BtrMIoth7oTNIBwIh0xQEzk
AcS6Sf5BEUBtAGITuwj8IWd864qRWGEUELrGKz951Ykyp018KE7JTSPaDoTjS/u1
mzs5aqwF+uL+Rz70akvloALCFqycjXsoRiEbS7az2xLlI5veTdgsU4YiuAU7rAod
MuATGVRUC5z0QmKvg0srxq/PJ0Gp7v1yPYuS81HINSIECKFo0CGOxZ4QWkA/6IF6
/hGGBXqZHYR5fLOD5DQTMlJ+FNkS8etDBC8nHGIraOxu/dX82QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOLsuTL1mfHa4mFx04N/DIgVFujMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDk2MDgyZTItNGI4ZS0z
NDMwLWE3ZjEtNDNlYzg1ODEwMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKvytnPYaorsHtrPq6yvndw0dp3wHUan+nsJ6V+k/vRZ2aC1bSTI8hOD
KxWcnGOk8/AURTBAtTWWJ1mIHchdkrDg6fR9mgugQOYH1UYlLpjKJ6b4fGIMGHUy
PJZXEuwtGEfmGfvT5AGKnYWAzJw1e0Y18A/eIRBT6xmBXbv+q5iBeuzr54y/LxFh
wBFh1KWAV9YCEW2qXS4rtM7dj5WVVJH0MTEG20JNi50lJ6bVy43NpprnFXgxN7j2
rg1+Ieuh2vYtWrgNbcOaU1x5sAwx4yggFh7mYBigC8EmfUkIifhpbIrDbo35MLEj
XjPnKwALIQmRTiUYwF1U8Ng/ISkX26Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:41 2025 by rpki-client