Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/b2b6ab76-359f-301f-aaa6-fd1525be357f.roa
File:                     b2b6ab76-359f-301f-aaa6-fd1525be357f.roa (raw, json)
Hash identifier:          sO0aSEQkNyT+AIzfd1mqtYM8Iz69acBpUSYbJAufHms=
Subject key identifier:   6A:5C:06:F3:EC:D9:43:33:61:4D:EF:C8:F1:7F:B0:74:A0:B1:E5:69
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F43285849071BEB0F44AE1FFB31E3E300
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/b2b6ab76-359f-301f-aaa6-fd1525be357f.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     16550
IP address blocks:        151.207.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:eb:0f:44:ae:1f:fb:31:e3:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=541d33d0-ef93-4012-9484-2dbb20a7e850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:24:91:2a:80:e3:08:c4:fb:cd:9e:ba:af:
                    ef:5a:0e:c3:08:3a:97:6c:a6:e6:d3:7b:1c:40:c9:
                    bf:6f:07:43:dd:5e:ef:5c:51:c1:58:2d:01:41:b5:
                    3c:98:da:a6:3c:8c:67:3f:38:72:44:a6:94:ed:4c:
                    57:b9:99:a2:53:be:96:55:5c:81:ff:b9:c6:38:f2:
                    1a:9a:9b:b2:d6:39:39:7e:8b:17:0d:ae:a9:74:f4:
                    a8:0f:83:58:4d:b4:6f:01:a9:ff:6f:de:5e:15:f2:
                    e1:69:4c:1b:09:89:c6:f4:3a:94:cc:77:35:47:24:
                    cd:49:2a:be:29:85:41:fe:02:53:7d:a5:b6:be:d1:
                    5e:0e:f2:4b:e3:83:76:5a:c6:f4:95:8b:aa:db:7b:
                    d2:39:7a:19:ab:20:c4:1f:08:02:23:65:68:09:98:
                    04:59:61:24:91:c7:e6:6c:35:65:23:c0:40:9b:36:
                    13:d6:18:d9:ff:85:ab:0c:7c:31:45:a0:da:04:23:
                    75:a1:1b:01:6b:37:ff:d8:ab:5a:ea:43:0d:03:f6:
                    cc:8d:49:aa:9b:ea:46:1e:e6:91:f4:bc:7f:6d:2e:
                    b3:b5:21:ab:67:29:40:53:56:d4:75:74:f4:c8:09:
                    a2:86:fd:ee:fa:aa:6c:1f:bd:00:16:4d:8b:86:b2:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5C:06:F3:EC:D9:43:33:61:4D:EF:C8:F1:7F:B0:74:A0:B1:E5:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/b2b6ab76-359f-301f-aaa6-fd1525be357f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:38:fe:fe:36:3b:8e:01:e6:5f:03:98:16:88:f4:ca:4f:8b:
         c8:e3:55:92:69:2c:54:a2:cf:88:b4:c1:4d:d8:d0:13:7b:48:
         3d:ed:c4:2f:43:7c:d1:b1:0a:1f:e3:61:c2:72:14:ec:c8:85:
         2c:84:5f:9f:4a:44:d9:ad:41:c6:9d:f9:6d:d7:82:63:7e:96:
         21:7e:13:0e:44:fa:7c:b7:08:ff:fc:59:0e:44:10:7d:aa:b9:
         11:20:2b:62:01:79:88:2f:ad:fd:9d:b6:73:7d:15:23:f1:77:
         ad:07:46:6a:d8:5a:eb:4c:60:6f:5a:33:51:94:c2:be:8d:1e:
         49:62:3c:2a:26:c1:7c:22:85:b6:54:b9:9f:c1:60:c4:6a:39:
         b4:cc:4b:d7:d3:a4:96:7c:22:6d:eb:7e:ad:45:ad:46:62:3d:
         db:d3:c0:a7:a1:b4:13:7c:2a:23:bc:99:51:8f:ef:9f:fc:60:
         6d:05:62:88:d0:49:ff:80:c8:c6:76:ff:df:cf:9b:e7:ad:79:
         81:a6:9f:1e:36:62:90:e9:f6:bd:0f:7f:7e:ef:b8:6e:47:2c:
         2b:0d:46:f2:cb:db:63:c2:23:f7:e9:2d:cb:a2:6a:f5:05:cd:
         92:07:21:cc:c9:0b:38:82:a2:21:e5:e7:ee:a5:29:4a:74:99:
         9b:b5:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:42:06 2025 by rpki-client