Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa
File:                     de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa (raw, json)
Hash identifier:          XgRVuB8SIi9ez30L3A9ALo+lCFeSz2JSLIgq4oZb/mc=
Subject key identifier:   88:57:52:00:62:94:47:31:25:96:8E:91:FC:30:97:3F:20:8B:08:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581F5EE28919495B848DE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:f5:ee:28:91:94:95:b8:48:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=48064d32-672d-4436-9548-ee0448f47400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:1e:73:b3:79:48:fa:7d:ba:5e:85:74:b3:
                    0d:31:36:0d:75:a2:d4:68:05:21:cb:0a:d7:34:37:
                    20:ed:fd:37:8f:93:52:7a:f2:6c:f7:fc:84:cc:92:
                    aa:7e:36:21:44:07:cd:57:5a:bd:db:6b:3e:6c:12:
                    5e:43:00:73:d7:0c:8b:b4:6f:76:98:21:19:83:41:
                    47:b7:b5:54:12:48:64:3f:a8:bb:2a:07:96:26:4f:
                    63:58:82:f0:ec:1d:3e:e2:c3:73:0e:9b:ae:65:00:
                    2a:f9:5e:da:f9:43:22:36:e3:a7:ab:dc:19:9e:98:
                    ae:a3:fd:7e:95:b1:ed:1f:5c:fe:2e:5e:91:b3:ee:
                    58:0f:1d:a8:4b:41:42:89:29:28:4c:55:c7:25:11:
                    49:ef:2d:3b:23:36:2f:2c:42:73:21:cd:4e:da:17:
                    2e:49:f4:e7:ff:7b:5c:be:2b:ea:d9:d7:e7:0a:11:
                    d7:00:db:f1:e3:61:a0:2a:75:b7:5f:22:84:87:b6:
                    d5:53:36:a7:95:b7:55:45:4b:89:f5:c3:24:f3:0c:
                    40:cd:08:1c:42:c2:07:6f:86:98:99:15:7f:53:19:
                    2f:76:b3:43:68:1d:21:d7:d0:6a:06:19:2b:b8:bf:
                    1f:8d:5b:a1:e4:7b:49:bd:13:ba:30:63:82:64:44:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:57:52:00:62:94:47:31:25:96:8E:91:FC:30:97:3F:20:8B:08:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de155e30-1ecd-30f9-8319-f6c8fac4b05f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:c6:39:2d:c3:0c:f9:ed:4a:82:36:22:b0:dd:7f:db:db:
         4f:d8:5c:2b:cf:c9:6a:44:67:96:62:c7:8b:c2:63:49:0c:f3:
         99:00:d1:a5:d7:d3:81:4c:4d:60:f8:ba:31:23:d6:8b:4d:93:
         aa:ea:30:9d:f6:58:23:ce:83:fe:aa:ff:c3:ea:cf:30:55:ee:
         e2:b3:81:b8:4b:4f:38:65:da:1e:f7:9e:78:09:54:ab:bb:fc:
         76:48:2a:78:d1:10:77:86:e6:07:c7:fc:a4:28:59:2a:3e:a7:
         07:d4:b6:f6:48:83:25:a2:97:f4:49:02:d7:c2:f5:46:e6:ca:
         32:b9:f4:e5:1c:15:e8:a6:39:93:4e:7f:d3:49:61:80:9f:90:
         94:a8:c0:e5:4e:7d:71:29:55:87:ca:6f:80:ed:70:85:15:32:
         78:93:bb:86:9b:f5:f2:27:20:55:81:bc:61:18:1d:fa:61:ea:
         ad:e0:13:94:2e:f7:2f:d2:b1:ed:6a:31:58:92:96:0d:45:05:
         29:88:d7:83:4d:ac:9e:e8:67:15:79:38:f1:2e:df:35:23:c4:
         b7:6f:54:ad:ce:52:44:77:7f:d4:e3:f9:86:51:d3:3b:66:56:
         ae:5c:c3:b4:8f:db:f6:c3:70:fe:3f:4d:59:41:5e:d2:0e:54:
         0f:62:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:01 2025 by rpki-client