Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f33e24-885a-3a47-adf3-c4fcd6199959.roa
File:                     24f33e24-885a-3a47-adf3-c4fcd6199959.roa (raw, json)
Hash identifier:          cscMbn3o+jF0XltF9T7ypeZCPemwvLCumjxGwhCRsm8=
Subject key identifier:   2E:0F:29:6F:75:C3:8C:68:00:D5:E5:1C:9A:86:F3:4B:52:10:9B:7F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E53BAE00AD3D4E482500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f33e24-885a-3a47-adf3-c4fcd6199959.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e5:3b:ae:00:ad:3d:4e:48:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=fa5febfc-902b-41bb-8940-d0ed11545420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:b0:a7:cc:21:d6:8d:bc:81:3e:a0:91:ac:
                    42:7d:bf:8e:6e:6b:1b:af:b8:9a:b0:32:ce:11:7f:
                    96:5c:5f:6b:3b:e7:d3:10:2e:b0:07:12:bd:bf:f9:
                    25:08:9e:46:be:6d:a7:9c:7d:0d:d7:ce:a7:44:9e:
                    a4:ca:8a:75:09:e5:18:0f:d1:a1:28:82:38:7d:34:
                    a8:22:41:54:67:07:2a:6a:7c:a5:26:86:be:12:1e:
                    f7:6f:00:33:32:10:24:3b:e5:72:22:03:2a:d2:6b:
                    b6:ec:ce:56:03:96:1a:3b:b4:55:e2:a2:1e:91:64:
                    41:9a:ca:29:59:60:d9:5b:2d:9d:6f:66:0b:3d:61:
                    fc:ed:6b:64:11:3b:fb:52:8e:74:fe:e6:56:19:23:
                    57:11:01:74:d1:7f:59:b6:fc:40:ec:4b:d4:45:c9:
                    80:e8:d1:57:b6:3d:d0:91:ec:32:6c:14:41:76:b6:
                    27:14:8b:29:c0:cb:80:9d:07:89:2f:94:5a:3a:bf:
                    69:6b:69:92:41:01:d6:a4:21:7c:d7:a2:db:fd:ed:
                    83:56:22:dd:67:72:01:d8:41:b6:fd:1a:e3:cd:ee:
                    9e:91:d4:8a:13:64:8f:d7:03:94:ce:17:e1:73:a4:
                    21:6d:b1:45:6b:dd:da:78:fe:87:c8:32:78:f6:15:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0F:29:6F:75:C3:8C:68:00:D5:E5:1C:9A:86:F3:4B:52:10:9B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f33e24-885a-3a47-adf3-c4fcd6199959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:f2:67:f8:41:32:11:7b:b9:ce:53:77:dd:07:29:d5:d1:8a:
         c2:95:43:9d:4f:28:7e:55:b9:ee:36:0b:65:93:e6:e6:a7:cc:
         ec:94:bd:61:1f:21:f0:32:8f:94:1d:76:e3:9c:0b:73:da:d6:
         1b:c7:39:ec:94:a5:62:0b:08:04:78:d3:cd:e6:69:fe:23:36:
         e7:bc:2e:ae:85:a1:a2:81:49:1a:71:92:77:46:5e:4a:48:06:
         0d:bd:e6:58:5c:ba:aa:f2:d3:fe:84:0a:2f:f6:53:0f:45:9a:
         8f:1e:19:cf:21:21:28:69:09:5c:dc:d2:2c:ee:cd:cb:08:d8:
         70:1b:8b:e8:e5:91:9e:8e:ab:27:a4:b6:ba:c5:85:2d:fc:33:
         e4:ec:41:07:d0:62:f9:44:73:47:7c:8b:20:3e:57:31:35:c6:
         dd:74:3b:ed:1d:a6:4f:57:57:a3:41:07:8e:a3:55:31:15:c7:
         ce:48:e5:29:c7:70:9e:33:eb:21:e8:b1:e1:4c:dd:12:4b:ff:
         01:83:52:11:64:76:a6:60:0c:02:f9:13:e3:e3:6f:be:cb:34:
         86:42:63:fc:07:ec:a0:07:0d:32:35:59:85:e9:bd:5f:c7:d5:
         63:09:bc:3d:5b:ab:99:99:0c:49:49:91:fd:36:5d:44:98:a7:
         ed:10:67:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:19 2025 by rpki-client