Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ece7effd-bbad-3bbc-951d-a66499696a77.roa
File:                     ece7effd-bbad-3bbc-951d-a66499696a77.roa (raw, json)
Hash identifier:          RCsT/Bo0QnZMjxa5Hf7l+yAyhonWLVwuwpYsvOlvdNE=
Subject key identifier:   FB:49:34:06:46:07:57:90:EE:4A:98:52:96:79:C4:31:06:ED:39:19
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5816839D5D516056F739E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ece7effd-bbad-3bbc-951d-a66499696a77.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:68:39:d5:d5:16:05:6f:73:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=034801bb-2511-458d-82fc-59d6818d2c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:a2:80:a1:32:fb:a4:c9:e4:f9:8d:ed:02:
                    38:00:a5:22:f4:29:33:60:ae:a4:3c:fc:92:e3:d3:
                    c9:1f:c0:8f:2f:7a:98:4b:1a:f8:22:c2:d9:aa:e6:
                    d8:ac:d2:17:9e:21:65:4c:f4:74:ad:98:5e:4b:7c:
                    a3:c4:1d:05:7b:f8:49:46:f9:82:e5:32:1c:43:1e:
                    72:88:31:6c:71:30:7b:c6:63:ad:e5:d9:e9:e9:6f:
                    b8:64:2c:e8:8d:92:ef:5c:9f:b4:c0:46:6b:9a:cd:
                    bd:ba:59:25:1a:47:89:1b:87:f6:55:97:c9:94:11:
                    f3:eb:3a:5c:7a:47:e4:50:2d:0e:53:ff:c2:9f:52:
                    2c:32:3d:ac:14:99:22:21:ae:f1:c0:97:fe:6f:95:
                    cc:4d:22:da:4e:fa:20:35:a3:c9:ca:03:d5:d7:95:
                    7d:80:70:29:27:f1:01:db:01:c5:b3:85:21:b5:34:
                    ef:0d:b4:0f:30:f8:53:e0:99:1b:e1:ac:63:b4:6f:
                    a9:93:19:fd:68:e4:2c:93:4f:25:d9:97:7d:63:10:
                    d4:c9:78:bd:18:f6:87:4f:f8:5f:19:3f:4c:4e:7a:
                    ff:5a:36:80:b3:76:fe:1e:23:c9:4a:23:54:33:65:
                    f8:fe:d2:59:7f:bc:9b:4e:34:7e:03:d5:96:be:89:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:49:34:06:46:07:57:90:EE:4A:98:52:96:79:C4:31:06:ED:39:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ece7effd-bbad-3bbc-951d-a66499696a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d8:76:44:15:5f:e3:6e:14:78:e3:b0:a6:ee:d8:0a:29:6b:
         a9:48:4c:9d:e3:6b:92:a4:55:7b:ff:54:26:a7:05:47:3a:1d:
         12:6a:53:3c:d6:e8:f7:e1:29:85:86:9f:aa:9e:77:4c:5e:36:
         a3:55:28:9e:44:a5:00:f1:e4:93:34:c7:78:81:25:30:36:07:
         54:18:0c:e1:f0:61:6c:54:63:0f:77:a9:86:2b:c9:bb:59:d9:
         66:20:7c:9d:13:14:35:63:e1:bf:09:b8:5d:da:40:f8:b7:d6:
         44:9e:0d:51:eb:88:88:d1:72:00:24:8c:72:24:ce:cd:74:81:
         8b:fa:a3:25:09:11:a0:22:e9:89:12:2d:12:dc:ba:32:2e:c3:
         e9:42:21:c6:4b:b2:ae:c5:73:4a:11:b3:6b:8a:b5:35:74:7f:
         f5:a2:de:e2:7c:11:a9:55:76:b7:e1:fd:33:40:f9:ad:82:22:
         d3:8a:9b:d5:70:6b:fa:c3:dd:3f:fc:ae:0c:62:2b:4a:78:a7:
         7d:3a:6d:9e:c6:30:49:87:4a:d0:3a:f8:f3:b8:67:9b:f7:85:
         c6:4c:e3:bb:89:2d:6a:60:43:8c:69:cd:ee:77:0d:09:16:1a:
         34:69:d1:c3:e8:0f:80:ac:0d:e1:48:e1:59:42:58:90:76:44:
         15:a2:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:06 2025 by rpki-client