Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f33e24-885a-3a47-adf3-c4fcd6199959.roa
File:                     24f33e24-885a-3a47-adf3-c4fcd6199959.roa (raw, json)
Hash identifier:          f6S4VnAwQO+l+7uKXIyPaP2rZBZEIxQ84/72HVF6cd4=
Subject key identifier:   A4:2A:D8:EC:C2:E1:75:47:A7:29:FD:D5:4D:7D:EF:22:67:A4:52:71
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB41F0BCE40D8E7A332640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f33e24-885a-3a47-adf3-c4fcd6199959.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.20.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:41:f0:bc:e4:0d:8e:7a:33:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e44374a0-5e19-4a88-b2d5-c565e74ea787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:f0:7c:74:85:cf:75:49:3c:40:bb:42:84:
                    8f:85:02:36:13:0f:3a:72:41:f6:a1:9b:d2:40:46:
                    f1:4c:35:d5:fa:fa:02:84:ee:f8:7a:29:4c:a7:77:
                    67:96:77:cf:dd:67:59:74:fc:15:ac:ba:34:9c:b1:
                    ed:cf:fd:15:e5:c7:68:fc:f2:4d:24:0e:f3:7d:a9:
                    f3:8b:24:81:d2:bd:96:2f:e4:28:f3:4c:3b:56:97:
                    c9:12:ea:6f:16:94:a6:ea:dd:4f:40:c9:ff:4f:73:
                    9e:85:7c:44:7d:57:1c:c4:fe:46:50:c9:9b:8b:14:
                    39:1e:3d:28:42:aa:8a:08:20:64:7c:d5:06:af:32:
                    38:26:fa:bc:15:14:f2:cb:c4:7e:09:08:c1:d4:68:
                    3f:52:93:3a:93:74:48:2c:d0:ed:e2:6f:15:d8:14:
                    9d:f4:ae:a4:c7:ae:3a:8b:a3:00:90:c6:f4:a8:97:
                    c0:41:f2:58:5d:a4:cb:ef:67:9d:02:e2:b8:85:a2:
                    e8:e8:4c:d5:c9:56:81:ab:bc:f6:c4:97:bf:d5:fe:
                    4a:b3:e2:25:fe:31:c9:4b:fd:12:df:90:9f:a5:91:
                    d7:79:53:6f:fb:21:74:f9:a4:37:ca:61:ab:86:14:
                    0f:19:b4:76:40:e6:0f:b2:03:88:a9:73:57:14:68:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2A:D8:EC:C2:E1:75:47:A7:29:FD:D5:4D:7D:EF:22:67:A4:52:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f33e24-885a-3a47-adf3-c4fcd6199959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:37:7c:13:4e:a3:67:c8:08:35:62:d1:ba:70:76:97:e7:2b:
         c6:9c:91:4b:f3:2e:77:80:89:9a:68:75:a1:72:f2:52:ba:25:
         29:a2:93:15:00:e7:11:40:c0:b7:ba:20:c9:b4:ee:c7:6a:04:
         28:e9:3e:55:00:74:47:0e:ea:a1:64:e6:09:11:84:f8:3e:cf:
         82:99:e6:b0:38:00:72:fd:6a:df:e4:aa:3e:a7:4e:f0:51:28:
         ae:d6:ee:0b:97:55:cd:e4:e0:5a:c4:bd:55:e6:00:c7:95:e6:
         b0:67:55:53:d6:a6:90:98:c0:dc:21:f3:67:65:97:77:ff:41:
         6e:5a:45:f6:25:10:e6:1c:2d:a5:46:24:e1:e7:ca:0b:c2:33:
         bc:e7:a9:a2:1b:95:8e:60:cd:90:ef:9a:96:4f:3e:c9:4c:76:
         8d:e7:74:88:62:ba:52:1e:df:50:2e:70:20:a8:38:07:32:12:
         fa:fe:5e:fa:7e:06:d4:8e:78:95:7b:3a:35:29:a3:52:08:ef:
         0f:5e:17:be:4a:02:7b:80:77:d3:f0:c7:d7:58:5f:cb:25:b1:
         e8:9e:4e:75:a3:b6:12:7d:b8:bb:18:d7:17:e3:fa:f9:3f:69:
         8e:2d:43:ed:13:ec:84:97:8f:0b:3f:fd:44:81:92:5f:f6:35:
         b8:bb:d2:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0HwvOQNjnozJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZTQ0Mzc0YTAtNWUxOS00YTg4LWIyZDUtYzU2NWU3NGVhNzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ7wfHSFz3VJPEC7QoSPhQI2Ew86ckH2oZvS
QEbxTDXV+voChO74eilMp3dnlnfP3WdZdPwVrLo0nLHtz/0V5cdo/PJNJA7zfanz
iySB0r2WL+Qo80w7VpfJEupvFpSm6t1PQMn/T3OehXxEfVccxP5GUMmbixQ5Hj0o
QqqKCCBkfNUGrzI4Jvq8FRTyy8R+CQjB1Gg/UpM6k3RILNDt4m8V2BSd9K6kx646
i6MAkMb0qJfAQfJYXaTL72edAuK4haLo6EzVyVaBq7z2xJe/1f5Ks+Il/jHJS/0S
35CfpZHXeVNv+yF0+aQ3ymGrhhQPGbR2QOYPsgOIqXNXFGjktQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQq2OzC4XVHpyn91U197yJnpFJxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjRmMzNlMjQtODg1YS0z
YTQ3LWFkZjMtYzRmY2Q2MTk5OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD03fBNOo2fICDVi0bpwdpfnK8ackUvzLneAiZpodaFy8lK6JSmikxUA
5xFAwLe6IMm07sdqBCjpPlUAdEcO6qFk5gkRhPg+z4KZ5rA4AHL9at/kqj6nTvBR
KK7W7guXVc3k4FrEvVXmAMeV5rBnVVPWppCYwNwh82dll3f/QW5aRfYlEOYcLaVG
JOHnygvCM7znqaIblY5gzZDvmpZPPslMdo3ndIhiulIe31AucCCoOAcyEvr+Xvp+
BtSOeJV7OjUpo1II7w9eF75KAnuAd9Pwx9dYX8slseieTnWjthJ9uLsY1xfj+vk/
aY4tQ+0T7ISXjws//USBkl/2Nbi70lI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:28:39 2025 by rpki-client