Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/b2b6ab76-359f-301f-aaa6-fd1525be357f.roa
File:                     b2b6ab76-359f-301f-aaa6-fd1525be357f.roa (raw, json)
Hash identifier:          IhvlZBvkF+7iDXgBmwboTHTn9fTWPInIg+XQnFwTETI=
Subject key identifier:   BF:71:18:20:A1:41:10:71:EF:11:5A:C7:E3:9C:2B:78:37:95:C6:9B
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F43285848265FF8733A462BAEFED3E880
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/b2b6ab76-359f-301f-aaa6-fd1525be357f.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     16550
IP address blocks:        151.207.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f8:73:3a:46:2b:ae:fe:d3:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=b1dd38e3-4104-4d88-ab3c-53f7b9467c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:9a:3f:f5:b6:6f:9f:db:64:ea:3c:ea:a0:
                    f7:06:bc:6d:a2:93:be:cd:a5:ec:23:d1:b6:50:1a:
                    75:c8:69:2d:bd:51:e5:66:2b:bc:d0:b0:b4:b3:ae:
                    42:18:d3:5f:23:0b:bc:99:d5:3b:c6:aa:05:d5:83:
                    99:c0:58:74:fe:6a:c2:11:ee:07:f3:c2:40:64:c6:
                    86:41:c4:e2:ab:cb:79:e2:81:e2:75:8a:b6:ff:fc:
                    9c:7e:b3:82:00:22:cb:25:63:d7:34:b7:08:1c:25:
                    65:78:39:8b:f9:3b:92:5b:2d:86:a0:f5:25:d2:0d:
                    2c:0d:fb:02:13:d0:87:b0:74:91:ac:a9:fc:81:1f:
                    0f:46:c1:0d:49:38:92:1b:5f:4e:90:45:ea:ed:39:
                    e8:bc:09:e9:44:fb:9a:17:84:80:bd:9a:e0:4a:71:
                    87:1f:0d:2a:d5:6b:04:b8:76:67:a0:de:f8:9b:60:
                    81:b5:8c:6a:13:c7:f1:1d:90:fd:d0:eb:3a:f7:93:
                    81:90:a3:e2:08:8d:1e:44:f7:1f:d4:db:d7:53:a0:
                    ea:09:15:7a:a6:bf:25:94:45:ed:57:6e:1d:d5:98:
                    d9:6c:fb:58:ea:ee:32:b3:be:d1:1d:6a:e5:81:00:
                    ae:4c:4e:ad:73:5f:51:a8:46:8b:58:ee:a0:26:a2:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:71:18:20:A1:41:10:71:EF:11:5A:C7:E3:9C:2B:78:37:95:C6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/b2b6ab76-359f-301f-aaa6-fd1525be357f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:74:85:f2:fb:13:59:3b:48:cf:1b:44:01:0f:a1:c9:c2:1b:
         9c:0a:57:13:4a:57:3f:19:f2:1c:16:9e:49:a7:42:07:3e:8d:
         25:1e:0d:3f:14:05:78:44:81:b3:5a:9f:9e:ac:b6:ca:35:cd:
         3d:af:b5:c1:32:83:08:b7:5c:e7:1a:b5:a6:d0:93:58:3f:f5:
         2c:c0:58:b3:85:ab:dd:b2:23:7e:e0:47:9e:e3:83:97:cb:ef:
         41:7b:ed:2f:01:55:b9:af:40:6c:72:2c:67:48:7e:e4:fb:44:
         94:3d:dc:07:ac:3c:50:65:a7:84:03:60:19:d1:57:f4:37:4f:
         fc:51:3c:22:1a:7e:0a:ca:1d:59:95:8d:90:65:71:72:3d:65:
         84:e7:f7:7b:e1:a4:f1:0d:bc:a8:2a:87:3b:4c:d8:16:83:48:
         71:f9:3c:86:11:f7:b3:f7:ab:29:e2:c5:8f:a6:bd:1f:90:41:
         0b:2d:91:83:60:8d:d0:0e:dd:5c:79:6c:ae:a3:7e:6d:4e:76:
         87:51:10:25:c2:10:ae:8f:2d:7b:3b:de:43:9f:c5:a6:f5:f4:
         d7:bc:9b:fe:8d:bd:e4:d9:02:e3:67:16:32:43:b1:d3:fe:05:
         90:db:e1:91:c8:a4:00:fe:2e:31:7f:80:6c:9a:87:c6:12:86:
         c8:73:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:10:26 2025 by rpki-client