Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa
File:                     2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa (raw, json)
Hash identifier:          dHXMYdKBzJcoksk07DJOWt190xE4tTG3LWcVV45GRhA=
Subject key identifier:   FE:D2:0A:6B:21:44:75:FC:5D:59:1B:FE:19:50:B5:8F:E2:05:50:CE
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F43285848960B5AF576DB36EAD1CB4500
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     31898
IP address blocks:        153.84.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:5a:f5:76:db:36:ea:d1:cb:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=d9cb7a67-8f9e-47b5-b205-c58962113196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:5f:83:9c:fb:d5:76:12:47:b4:1b:4b:25:
                    1d:61:62:cd:dc:2a:0b:0f:db:01:68:3b:de:a3:d9:
                    59:a0:98:56:2f:8b:fb:fb:1e:61:90:d4:ec:4a:08:
                    3b:67:de:48:b5:cb:78:4a:d6:4f:82:30:ea:55:c9:
                    78:79:2c:e7:4c:ac:37:59:89:d7:9f:b0:e1:0b:d2:
                    f1:c5:44:00:99:98:ff:14:51:ec:7d:84:ad:3f:be:
                    2e:a7:b9:da:3e:2d:22:58:9a:c4:4f:85:1a:83:8c:
                    db:5d:67:fe:55:a2:00:36:30:50:2f:07:98:d5:56:
                    c9:8e:e5:99:a7:d7:4f:e2:66:c6:a6:f1:1b:0b:72:
                    a4:30:e4:e9:f6:ce:40:2b:5c:bf:f7:5f:d3:4d:64:
                    3a:e4:26:2b:9c:ca:5b:ed:39:07:4f:80:d8:89:f5:
                    4c:15:85:e4:d5:10:b3:32:b4:12:1b:32:2d:44:be:
                    0f:05:ee:c1:84:28:87:6e:2f:97:bf:e4:0d:a6:54:
                    c9:04:a1:bb:6b:46:c3:f2:f2:4c:c8:4c:8b:2b:4a:
                    9f:6e:40:30:cc:07:33:b0:f6:7a:d6:7c:d5:df:34:
                    16:b9:e4:93:11:04:19:d7:8e:9c:d6:61:99:2e:22:
                    4d:7a:d4:69:85:32:bc:fa:c3:15:0c:0b:a9:b7:b1:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:0A:6B:21:44:75:FC:5D:59:1B:FE:19:50:B5:8F:E2:05:50:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.84.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:06:bd:44:45:7e:f8:7d:6a:b3:1e:ae:ec:58:9a:55:be:
         e9:8b:29:99:5d:74:42:73:43:78:37:76:3e:f5:24:38:c3:12:
         fa:c3:da:ef:04:67:71:ca:cf:16:6d:fa:3f:95:c1:6c:14:08:
         dc:32:8b:ed:f6:2f:14:c1:62:fa:e1:05:54:76:cf:1d:bb:a3:
         91:08:5b:ac:10:9b:91:c9:61:68:97:d6:16:8d:6f:ba:1e:46:
         bd:27:a5:b2:99:53:c2:01:81:cd:5a:35:a3:a0:42:05:72:9b:
         e5:ee:a0:2b:73:b6:fa:e3:32:09:9a:a6:c4:f7:28:5c:e5:fc:
         1b:94:d8:1f:e6:c2:ba:ad:dc:15:3d:8c:36:2d:80:16:7e:e5:
         13:bc:41:38:73:b6:f0:65:05:65:fa:92:68:d7:cc:ed:6f:94:
         cb:5e:4e:60:a9:e0:44:53:66:73:b7:69:61:ce:5b:ab:21:05:
         9f:e1:4c:ec:39:7a:48:64:71:e2:06:bc:6f:c8:a2:23:35:cf:
         b6:a4:04:dc:be:f5:36:b5:29:2e:51:70:fc:5d:f9:e2:23:df:
         60:79:bf:fe:57:a9:6d:ab:94:41:89:ef:37:9b:5e:28:59:3e:
         90:c2:21:49:02:34:d2:89:88:ed:d6:54:03:74:63:e2:c7:59:
         cc:7e:c5:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1r1dts26tHLRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI1ZjRkOGUtMjIwZC00YjIxLWE4ZjgtNTdlZDkxYmE4
NmU0MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZDljYjdhNjctOGY5ZS00N2I1LWIyMDUtYzU4OTYyMTEzMTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D9fg5z71XYSR7QbSyUdYWLN3CoLD9sBaDve
o9lZoJhWL4v7+x5hkNTsSgg7Z95Itct4StZPgjDqVcl4eSznTKw3WYnXn7DhC9Lx
xUQAmZj/FFHsfYStP74up7naPi0iWJrET4Uag4zbXWf+VaIANjBQLweY1VbJjuWZ
p9dP4mbGpvEbC3KkMOTp9s5AK1y/91/TTWQ65CYrnMpb7TkHT4DYifVMFYXk1RCz
MrQSGzItRL4PBe7BhCiHbi+Xv+QNplTJBKG7a0bD8vJMyEyLK0qfbkAwzAczsPZ6
1nzV3zQWueSTEQQZ146c1mGZLiJNetRphTK8+sMVDAupt7HkUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7SCmshRHX8XVkb/hlQtY/iBVDOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVm
NGQ4ZS0yMjBkLTRiMjEtYThmOC01N2VkOTFiYTg2ZTQvMmY1NWU3ZTQtYmJmZi0z
MGFkLWE2NDktZGJlNjhjZTMyMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzI1ZjRkOGUtMjIwZC00YjIxLWE4
ZjgtNTdlZDkxYmE4NmU0L2MyNWY0ZDhlLTIyMGQtNGIyMS1hOGY4LTU3ZWQ5MWJh
ODZlNC5jcmwwHwYDVR0jBBgwFoAULMAHHFwzZ6QTgXk+lrcV2bN7LlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVmNGQ4ZS0yMjBkLTRiMjEtYThmOC01N2Vk
OTFiYTg2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmVRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+fBr1ERX74fWqzHq7sWJpVvumLKZlddEJzQ3g3dj71JDjDEvrD2u8E
Z3HKzxZt+j+VwWwUCNwyi+32LxTBYvrhBVR2zx27o5EIW6wQm5HJYWiX1haNb7oe
Rr0npbKZU8IBgc1aNaOgQgVym+XuoCtztvrjMgmapsT3KFzl/BuU2B/mwrqt3BU9
jDYtgBZ+5RO8QThztvBlBWX6kmjXzO1vlMteTmCp4ERTZnO3aWHOW6shBZ/hTOw5
ekhkceIGvG/IoiM1z7akBNy+9Ta1KS5RcPxd+eIj32B5v/5XqW2rlEGJ7zebXihZ
PpDCIUkCNNKJiO3WVAN0Y+LHWcx+xfc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:33 2025 by rpki-client