Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab80dea9-141c-395e-96be-ac8bdf6695e8.roa
File:                     ab80dea9-141c-395e-96be-ac8bdf6695e8.roa (raw, json)
Hash identifier:          bxDvECBtU3CY5pQ2onWfAKMZfSxhrJQ29OW4U/A4WmU=
Subject key identifier:   24:BD:54:2F:98:3D:A0:EA:CE:43:8A:3B:34:B0:3B:20:B4:04:23:80
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB50B332576CE4B992AF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab80dea9-141c-395e-96be-ac8bdf6695e8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.63.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:50:b3:32:57:6c:e4:b9:92:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=cbaa3788-ee6e-4419-a251-dc940e54cf56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:4f:e3:b1:dd:8c:62:58:d4:e8:3b:e1:e4:
                    fa:84:8a:4e:fa:b8:db:5e:7c:71:7d:24:4f:ed:27:
                    d6:a3:56:f3:92:ab:ce:04:60:11:d2:ac:3d:44:19:
                    6c:c4:9f:8e:ec:62:c2:47:be:25:ad:48:e5:78:79:
                    a2:a3:f1:46:a1:1c:ff:9e:86:9c:08:a2:96:3b:dc:
                    90:ec:c9:f4:6c:47:c0:4f:17:f0:62:3b:c9:78:32:
                    2b:35:06:7a:0c:81:e3:fc:9f:1a:95:c5:94:57:58:
                    72:0f:76:ef:75:91:18:38:8f:57:71:20:80:42:95:
                    0e:db:d5:99:5b:d3:b9:b5:4e:a5:00:af:85:57:11:
                    86:f8:e6:c8:38:d0:b5:46:6d:7f:f1:4b:90:5c:1c:
                    3d:9e:aa:f7:4d:2d:14:6d:bb:b8:0d:30:1e:02:a0:
                    4c:29:9c:6d:7d:5b:76:bf:ad:49:11:54:0b:68:40:
                    90:03:2f:ba:54:1b:8c:40:33:bd:d0:44:10:04:8a:
                    be:c3:73:72:cc:a4:a6:27:ff:b6:16:bf:ea:54:ad:
                    0d:8c:26:32:e0:3d:8e:74:74:9f:8a:45:9f:30:94:
                    a2:53:f3:c2:90:a0:4e:82:96:7f:6f:bb:92:1b:ee:
                    ab:80:d3:c9:30:52:b8:1b:24:66:d0:94:78:4b:8d:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BD:54:2F:98:3D:A0:EA:CE:43:8A:3B:34:B0:3B:20:B4:04:23:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab80dea9-141c-395e-96be-ac8bdf6695e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:12:b6:c8:fc:66:e2:48:d6:ab:39:71:f5:ba:3e:77:82:
         58:66:30:77:bb:f8:6d:f8:d4:83:f6:16:35:5e:78:c3:f6:87:
         47:84:a9:db:e7:75:51:2e:7e:9d:5a:c0:da:42:36:60:cd:89:
         90:2b:d7:37:f8:0d:38:9d:f8:57:49:2b:0d:c6:dc:4d:c3:f8:
         6b:74:a5:44:0a:1b:72:8a:e3:94:de:e1:33:61:4e:f8:e6:62:
         ad:12:9e:7e:d0:03:78:08:1e:dc:52:47:a3:b8:e8:5c:45:3f:
         bc:b8:aa:31:ec:94:81:fd:87:0a:85:e5:13:11:e6:ef:2e:7c:
         30:7c:f6:c6:76:37:30:8e:7e:11:71:3b:5a:7a:5d:10:bc:a7:
         19:70:06:cb:59:84:61:fc:54:73:0a:78:3f:ec:bd:96:b0:3b:
         4e:81:f3:a0:d1:71:9d:0e:ed:1f:9b:25:c5:4c:fe:7d:5d:7d:
         70:be:8e:4b:14:9a:df:6c:b8:7d:5b:6b:75:a9:b5:43:f0:17:
         2e:42:9a:ca:c1:a0:a6:d5:6a:c0:4b:53:42:0f:08:49:91:b1:
         9c:2b:a5:4e:c8:c0:d8:be:94:9c:56:cd:f6:6d:fd:ad:89:6e:
         04:21:f0:4c:1f:09:b2:ff:a9:a0:a4:48:51:cd:9e:c8:61:2e:
         ff:07:95:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1CzMlds5LmSrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
Y2JhYTM3ODgtZWU2ZS00NDE5LWEyNTEtZGM5NDBlNTRjZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvNP47HdjGJY1Og74eT6hIpO+rjbXnxxfSRP
7SfWo1bzkqvOBGAR0qw9RBlsxJ+O7GLCR74lrUjleHmio/FGoRz/noacCKKWO9yQ
7Mn0bEfATxfwYjvJeDIrNQZ6DIHj/J8alcWUV1hyD3bvdZEYOI9XcSCAQpUO29WZ
W9O5tU6lAK+FVxGG+ObIONC1Rm1/8UuQXBw9nqr3TS0Ubbu4DTAeAqBMKZxtfVt2
v61JEVQLaECQAy+6VBuMQDO90EQQBIq+w3NyzKSmJ/+2Fr/qVK0NjCYy4D2OdHSf
ikWfMJSiU/PCkKBOgpZ/b7uSG+6rgNPJMFK4GyRm0JR4S42niwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCS9VC+YPaDqzkOKOzSwOyC0BCOAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWI4MGRlYTktMTQxYy0z
OTVlLTk2YmUtYWM4YmRmNjY5NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABa7ErbI/GbiSNarOXH1uj53glhmMHe7+G341IP2FjVeeMP2h0eEqdvn
dVEufp1awNpCNmDNiZAr1zf4DTid+FdJKw3G3E3D+Gt0pUQKG3KK45Te4TNhTvjm
Yq0Snn7QA3gIHtxSR6O46FxFP7y4qjHslIH9hwqF5RMR5u8ufDB89sZ2NzCOfhFx
O1p6XRC8pxlwBstZhGH8VHMKeD/svZawO06B86DRcZ0O7R+bJcVM/n1dfXC+jksU
mt9suH1ba3WptUPwFy5CmsrBoKbVasBLU0IPCEmRsZwrpU7IwNi+lJxWzfZt/a2J
bgQh8EwfCbL/qaCkSFHNnshhLv8HlWg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:04:05 2025 by rpki-client