Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67a24355-f586-3102-9423-b2c1053bc9ba.roa
File:                     67a24355-f586-3102-9423-b2c1053bc9ba.roa (raw, json)
Hash identifier:          UzRYD6cWgFuPtb8stBA3S6BE8GuOdMtRs0vkq6imOqQ=
Subject key identifier:   39:C8:8C:C5:35:C5:CA:5B:36:39:D7:D3:C9:DB:AA:0E:8E:CE:16:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAA197C4A226F587BCC500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67a24355-f586-3102-9423-b2c1053bc9ba.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:a1:97:c4:a2:26:f5:87:bc:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=63a07111-d18a-4869-b937-b6f69bda3045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:60:67:8e:77:8b:4e:03:f6:fa:54:28:a0:6b:
                    7e:94:2c:d6:8a:53:da:30:a3:27:bb:e4:56:8f:ff:
                    85:2c:7b:ad:40:3b:cf:48:6e:a3:7c:dc:36:78:ce:
                    73:05:3e:94:b7:5c:e1:c0:30:39:a2:f9:ec:ec:a1:
                    12:9d:fa:39:d1:21:7d:46:05:e7:c6:23:b2:9d:eb:
                    4d:e7:4a:f8:80:5e:0f:66:ea:64:ec:c6:4b:bf:79:
                    46:ed:4f:28:5a:50:55:26:24:11:d8:fe:21:35:47:
                    cb:d3:a1:31:6a:38:50:60:96:71:a8:1c:94:2b:a4:
                    8d:63:bd:c1:c9:17:c7:f7:aa:73:42:2f:73:4d:b3:
                    74:0d:9d:2b:24:07:55:61:0c:eb:ba:53:7c:1b:56:
                    a6:08:db:99:f6:47:77:e6:b5:b6:5c:66:ca:71:a5:
                    0c:0b:e6:bb:72:55:66:72:e0:9e:da:df:c8:20:78:
                    f0:80:d1:9c:04:d6:54:72:60:c8:b0:bd:80:61:c4:
                    a6:01:12:ce:43:8e:0f:25:a2:fb:80:71:ad:da:73:
                    99:3a:ae:16:a8:20:2e:b8:08:42:4b:87:03:22:33:
                    ca:12:ae:73:b8:d8:f4:86:f3:9c:e4:2c:7a:19:8c:
                    06:9a:15:e7:e4:6e:dd:0b:c3:28:af:c6:ee:80:82:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:8C:C5:35:C5:CA:5B:36:39:D7:D3:C9:DB:AA:0E:8E:CE:16:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67a24355-f586-3102-9423-b2c1053bc9ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:42:db:c4:ed:ca:a0:9d:b8:bb:25:b5:ca:25:2e:c1:e5:36:
         7c:01:68:65:76:4a:75:97:62:83:69:56:27:5f:ab:ac:e9:18:
         74:a3:ef:c0:85:3d:57:06:5d:c2:1a:97:b5:80:1b:1e:7f:8a:
         de:e5:80:89:af:f8:29:f8:56:69:be:88:a3:15:f2:af:a4:4a:
         45:3f:f9:08:40:86:cf:5c:40:58:84:91:8a:f9:85:57:3f:01:
         b7:19:2f:30:c8:ab:f4:76:8d:ac:44:65:23:cf:b4:47:bc:6f:
         49:a1:1f:de:4a:34:b0:cc:8a:e2:6e:24:91:c2:7c:e5:d9:62:
         93:aa:b1:d8:be:c7:b6:4b:f7:31:52:72:6d:36:44:12:96:94:
         4e:e9:fa:00:d9:7b:d1:9f:1b:18:29:24:b5:95:bf:ba:ef:f5:
         22:1a:f6:46:89:8a:32:07:13:5f:46:be:af:fb:f3:35:5b:2c:
         74:f5:2b:f1:0e:58:0c:14:cb:89:29:92:7e:85:94:b1:b9:a4:
         10:16:81:9a:57:37:b1:88:78:ae:f5:48:05:22:6f:4b:dc:48:
         a8:0b:f2:26:a1:7a:f3:95:2a:ad:4a:0a:fe:0c:63:e1:fa:c4:
         5c:40:ac:de:16:ec:98:49:04:19:8a:a6:3e:0b:66:08:10:59:
         85:3b:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:20:42 2025 by rpki-client