Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfd77c62-62e5-3750-87bc-8410d1e287ab.roa
File:                     dfd77c62-62e5-3750-87bc-8410d1e287ab.roa (raw, json)
Hash identifier:          VuaP8pwaA9pt4IfKfbC1mls5ANDgSS7o/pbIqljigvA=
Subject key identifier:   64:BD:9A:C2:97:53:C0:31:E9:11:0E:9F:FD:02:F2:8A:1D:B7:0B:B3
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F43285848C8BFB9555B248F04B4743E00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfd77c62-62e5-3750-87bc-8410d1e287ab.roa
Signing time:             Wed 05 Feb 2025 17:54:51 +0000
ROA not before:           Wed 05 Feb 2025 17:54:51 +0000
ROA not after:            Tue 06 May 2025 16:54:51 +0000
asID:                     23473
IP address blocks:        153.33.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:bf:b9:55:5b:24:8f:04:b4:74:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb  5 17:54:51 2025 GMT
            Not After : May  6 16:54:51 2025 GMT
        Subject: CN=a132e08d-4592-417a-be13-a17c792ddec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:8a:70:97:78:82:99:92:0b:55:1a:55:95:
                    ed:2c:51:0d:47:a0:70:e1:34:0c:4e:a5:c9:54:f6:
                    13:b6:a5:ba:d0:be:29:d0:f2:94:70:33:02:5c:05:
                    b2:5a:e8:ba:c2:0d:3a:13:c1:a5:26:d3:85:da:32:
                    6e:61:54:5a:b2:b6:bd:ee:57:2a:f4:c8:61:2a:ff:
                    fa:c1:3d:8f:2a:99:91:9f:db:38:d0:24:90:1f:13:
                    f9:9b:9c:aa:43:64:3f:a8:6b:60:26:9b:94:cf:9c:
                    90:7a:75:6a:48:5a:20:ba:5a:c9:cd:18:4c:7d:a3:
                    65:05:87:04:51:49:17:91:c8:72:2a:b3:e0:1e:c8:
                    11:40:20:ed:cf:60:10:ba:bb:9c:fe:cb:29:3d:9e:
                    1c:f1:ce:f0:80:6f:bb:c1:42:78:6d:55:dc:4e:a0:
                    a6:98:fe:ed:01:fc:58:a3:fc:ac:8d:60:37:3d:ba:
                    42:c1:6d:89:1d:ec:de:ae:79:d0:69:0b:97:32:c6:
                    44:00:3c:4e:7a:48:a1:b8:27:45:90:7f:c4:ab:d4:
                    51:6f:95:95:9f:44:ca:71:97:9d:48:3e:ca:61:75:
                    47:87:f0:75:81:1b:e5:70:de:1c:31:16:f8:e1:0e:
                    af:8a:24:dc:96:db:a4:42:f6:3e:d9:1f:dd:6f:5e:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BD:9A:C2:97:53:C0:31:E9:11:0E:9F:FD:02:F2:8A:1D:B7:0B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfd77c62-62e5-3750-87bc-8410d1e287ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:98:3b:c7:b8:94:f6:d5:72:27:63:3d:30:8f:aa:2b:c8:d6:
         f1:92:e4:b8:e2:82:81:58:41:d9:82:4d:89:74:34:9c:de:18:
         f7:f4:f6:07:12:54:b8:37:da:3f:79:d5:25:13:3e:df:d0:87:
         6e:78:a0:de:68:85:7c:f6:8c:c9:1e:1a:83:9a:81:40:5b:eb:
         71:d0:80:6b:32:ec:c1:77:a2:a4:c9:61:3b:5f:3b:77:89:1c:
         00:dd:60:1a:79:89:ba:8d:94:6f:57:c4:95:8d:b4:e9:4e:c6:
         2a:db:87:df:6c:ed:d6:c3:e3:15:ff:78:1a:be:19:d9:d7:7f:
         29:1e:55:44:71:cc:79:9e:d0:aa:2c:04:3a:b7:d4:5b:e8:20:
         97:d2:36:fb:eb:a3:d5:ad:80:f7:27:7a:f8:6e:fc:1a:b0:11:
         51:78:b5:a1:96:9f:ec:7b:3b:25:dd:3f:1c:81:c8:df:32:a2:
         b9:b1:21:29:ca:ea:85:c7:51:c0:a8:00:08:97:88:a5:26:b6:
         47:ce:f2:64:f2:d5:6d:6a:b5:05:47:f5:d5:83:4e:da:9c:bc:
         ae:69:1c:fd:be:e0:78:52:5d:01:70:47:7d:61:65:73:5c:80:
         d9:37:5f:c8:12:eb:23:ad:71:03:74:5e:fc:88:86:9d:73:3e:
         c1:a3:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:44 2025 by rpki-client