Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaf8ddc9-01b8-35f2-83c5-5b30007e0ba9.roa
File:                     eaf8ddc9-01b8-35f2-83c5-5b30007e0ba9.roa (raw, json)
Hash identifier:          DJiZES+RApoISiJi5/ZGidQGT61ZCGieuJaRhxzjOjY=
Subject key identifier:   BE:EA:6C:8A:A1:32:C9:06:79:44:70:52:D8:5A:43:B7:8B:47:B7:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581F33E37AD0E1A98EF7E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaf8ddc9-01b8-35f2-83c5-5b30007e0ba9.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:f3:3e:37:ad:0e:1a:98:ef:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e85203b5-4893-416c-8a25-8ab831fd53d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:36:98:04:1f:8b:b8:60:d6:2c:0b:20:fd:7f:
                    64:f1:d7:2f:bd:ef:a5:be:51:63:a9:05:e5:c0:33:
                    b0:55:0f:70:41:51:9f:63:5f:4a:28:86:22:69:db:
                    a3:63:5d:c8:b0:94:c3:c1:a6:d1:10:7c:ae:79:88:
                    50:30:e0:33:53:5f:a0:7e:2d:28:b0:25:c8:d4:1e:
                    2b:bc:1f:7a:b5:40:71:4f:db:13:87:48:d4:82:24:
                    af:e7:cd:0b:63:a6:e2:59:8f:5a:0e:30:40:28:81:
                    9d:2f:54:d0:8e:9c:2b:f9:86:47:e0:13:45:eb:7d:
                    e2:69:bf:cb:63:b8:db:c4:64:87:60:8d:15:40:54:
                    e2:15:2b:65:8a:d2:8c:04:2f:b0:94:a3:9d:53:2c:
                    6d:9f:20:f0:64:2d:5e:95:79:4f:b0:44:32:4d:f6:
                    d2:e4:0e:56:d8:91:d8:1c:ce:31:b4:45:34:45:07:
                    21:30:a0:08:c4:18:14:49:7a:c0:be:03:b1:2f:87:
                    ad:85:36:d6:ba:97:10:76:22:69:78:7f:0c:35:85:
                    32:2e:f1:8f:44:ee:68:fd:36:09:8e:2e:a6:fc:c4:
                    51:22:0f:24:d2:7f:11:1f:20:36:0b:00:64:b8:f3:
                    2d:30:2a:94:b7:c6:81:dc:7f:db:24:7e:d1:85:eb:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:6C:8A:A1:32:C9:06:79:44:70:52:D8:5A:43:B7:8B:47:B7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaf8ddc9-01b8-35f2-83c5-5b30007e0ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:83:5a:c4:f5:cc:4d:25:9e:35:a0:78:60:c8:b2:77:a0:d7:
         69:57:02:38:09:76:60:a0:cd:b0:b2:ac:4e:5e:b5:1b:a1:5f:
         e5:50:dc:73:69:82:62:26:ea:72:76:8d:a0:48:ad:17:91:94:
         42:39:a3:04:03:2e:8e:cd:28:c4:6d:21:4a:2a:38:75:c2:5f:
         eb:6a:82:e9:23:43:b8:53:b5:ec:89:09:0f:d1:1c:04:07:79:
         6b:9e:2b:24:07:78:f2:52:9d:93:0f:4a:10:58:13:da:cf:8a:
         1c:16:46:7c:60:4e:a4:6b:f5:f8:50:50:ed:ae:6d:b9:24:82:
         4d:a8:f7:bc:bb:f8:06:1e:37:43:09:17:be:53:0d:53:48:a3:
         22:34:94:8e:3b:a8:78:f3:73:60:38:f2:d0:b6:a0:39:09:9d:
         be:99:2f:ed:1a:40:5b:3e:66:f4:db:bb:d9:99:2f:36:d6:40:
         b5:f7:bf:05:a0:75:75:47:b7:99:f5:bc:4c:f3:1c:0c:5c:0e:
         78:1b:4c:91:82:34:28:c8:29:21:24:da:dc:83:49:88:82:47:
         3d:da:92:70:c2:45:ca:64:e8:f0:21:97:8c:da:51:2b:04:83:
         53:8f:c7:4e:2b:88:53:11:4e:79:c1:9a:f4:6e:7e:f2:d8:3e:
         42:56:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:58 2025 by rpki-client