Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c244c6a8-bbdf-3cfa-b23f-56d981440443.roa
File:                     c244c6a8-bbdf-3cfa-b23f-56d981440443.roa (raw, json)
Hash identifier:          UCJFySLms5pHf48lbqVtrzJvxoKfBWfCmI3z02XWA2o=
Subject key identifier:   0D:BD:70:F6:A8:3B:51:D3:4E:6E:68:D1:D9:D4:49:95:04:88:AA:AB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5815A186487D3DBE3A2D580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c244c6a8-bbdf-3cfa-b23f-56d981440443.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:5a:18:64:87:d3:db:e3:a2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d6bc4193-4717-4925-a06b-4ebfe876aa09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:47:1d:b4:a7:00:43:15:41:04:76:da:fd:
                    6b:a9:cd:d0:ed:19:4a:92:1e:d9:92:8a:2e:31:c2:
                    c1:71:37:d4:d2:0a:c2:9c:2e:5b:f9:99:d0:37:2c:
                    8e:00:26:df:e5:cf:d0:e5:ae:0c:ee:73:72:78:51:
                    10:c3:c3:5b:2b:5a:54:2b:0b:01:9e:e3:16:e7:0a:
                    78:67:ec:a9:d9:34:07:04:6b:4c:79:a1:fd:d6:0a:
                    dd:08:da:a0:ba:a7:91:33:db:c7:e7:01:4c:c5:e4:
                    0b:3d:73:a7:2e:d1:b4:15:28:a2:bb:f2:81:25:7c:
                    39:88:41:b9:96:77:6b:b1:76:4f:f7:30:2a:5a:19:
                    36:6a:1d:8f:21:b3:2d:43:0b:f7:13:d7:38:7a:cc:
                    b8:da:79:39:56:ec:59:cf:1b:5f:8f:c9:3a:2a:01:
                    24:bd:58:e3:06:f5:15:f4:04:dc:97:cb:2e:33:04:
                    19:77:6c:2d:b1:b9:d8:86:a4:50:a8:d8:ed:54:a4:
                    e8:3f:c5:9d:86:b7:4c:6c:1e:6f:7d:14:3b:b7:67:
                    e3:ad:d7:13:ac:61:ab:7b:8c:07:5e:90:0f:d1:7b:
                    65:23:4e:bd:55:82:d9:59:af:08:9e:0d:27:59:71:
                    92:01:87:bc:86:aa:0b:69:9b:7c:20:15:c5:7a:71:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BD:70:F6:A8:3B:51:D3:4E:6E:68:D1:D9:D4:49:95:04:88:AA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c244c6a8-bbdf-3cfa-b23f-56d981440443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:af:ea:f4:fd:a9:05:36:7e:80:68:ca:93:9b:8c:0a:47:49:
         4e:84:0f:c5:c4:18:d6:87:3e:7c:0c:c9:27:9d:05:8f:c9:63:
         a9:c3:5f:c5:1c:c5:fb:bb:76:d6:ac:95:80:9e:d2:ee:de:89:
         b2:42:08:df:b6:a4:ca:03:91:93:a3:24:7b:87:3a:27:6f:7b:
         46:de:55:61:f8:d8:4a:af:ec:da:b6:32:13:cc:5e:78:00:f6:
         eb:92:bb:12:6d:bf:93:5f:f3:c2:61:11:3f:b7:19:6b:77:74:
         32:64:8b:9f:e4:e3:0f:dd:a8:53:3f:6e:c2:b2:f1:a1:cb:3d:
         be:04:f8:07:73:2d:65:11:23:8d:b5:53:2d:04:48:56:b8:e5:
         8a:ec:7e:82:c0:f3:f3:5a:f5:2b:b7:08:a3:72:bb:e9:78:9c:
         ec:a0:c6:7f:ce:e2:dd:fc:84:41:db:d6:1f:91:4b:0c:95:ad:
         e4:af:50:9f:8e:92:0d:2b:ac:24:23:4f:a9:e6:7c:66:2c:97:
         ec:2a:81:57:b7:4c:a0:36:6b:8f:0b:66:52:79:62:a5:54:d3:
         b1:40:8f:74:d0:49:55:a6:4f:65:0d:ba:f9:7b:99:5e:78:12:
         07:b9:c9:be:90:e4:ad:96:f8:3d:ee:79:33:06:1f:df:a5:0b:
         b7:af:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:22 2025 by rpki-client