Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa
File:                     2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa (raw, json)
Hash identifier:          ftcJRHOcrcTn5NieAhJEWgzJPBmTls3DvijT2jrQUTE=
Subject key identifier:   46:43:52:94:C8:DC:6F:54:7F:7F:64:8E:B6:B9:34:FC:50:0F:F5:58
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584518B0487FF4DC945597C54DC0
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     31898
IP address blocks:        153.84.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:48:7f:f4:dc:94:55:97:c5:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=592f3a1f-d1d7-46e5-984c-51a568fa0e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:86:75:de:68:44:a3:a0:eb:65:c3:f1:f1:
                    44:2e:67:bb:36:97:81:4d:4d:10:ac:1d:2e:a1:96:
                    d9:d3:52:0c:c2:90:43:a3:fa:51:b8:28:b0:fe:4e:
                    50:c6:3f:13:4f:97:5c:40:52:d6:ea:98:39:45:ec:
                    bf:ce:be:e5:78:ed:16:e1:79:65:71:e3:73:a1:58:
                    bf:66:21:26:3c:d8:87:66:72:66:02:a7:49:c4:2d:
                    0a:7e:c6:5e:a3:95:9c:54:0b:49:d8:a5:8d:c5:5d:
                    fe:da:0f:ac:26:00:a1:5a:5a:3a:63:cd:a0:d2:d0:
                    5d:d2:48:0f:fe:37:59:90:4f:fc:c6:ff:bd:1f:3c:
                    ad:26:af:08:24:0e:1f:b3:4a:16:60:7b:a5:d9:22:
                    74:4f:ac:2b:df:fc:e6:4a:e1:9b:18:99:7c:99:10:
                    54:47:46:61:36:8a:8f:ed:85:c5:98:e0:84:33:3c:
                    3a:e5:52:12:8c:7a:dd:9d:16:15:3f:ae:d1:5a:3a:
                    12:77:92:e6:99:f5:58:da:44:eb:6e:f0:f4:2f:da:
                    07:89:f7:89:a7:63:4d:dc:64:39:8a:74:86:ac:ef:
                    78:80:32:2d:60:f5:b8:12:b4:71:c8:c0:89:ac:e5:
                    85:74:05:ff:6f:6e:ed:08:2a:1f:bd:34:4b:bc:25:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:52:94:C8:DC:6F:54:7F:7F:64:8E:B6:B9:34:FC:50:0F:F5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/2f55e7e4-bbff-30ad-a649-dbe68ce32020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.84.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:60:a4:e3:79:c6:35:a4:a7:0b:fd:7b:5f:0d:69:c9:2f:
         67:e7:05:06:a2:40:20:8f:b5:11:ba:38:c6:6d:dc:fb:87:d1:
         1b:0b:3e:70:d3:19:cd:6d:06:9b:b5:c2:f3:9e:4b:a0:83:09:
         cd:cd:b7:21:b2:58:7c:03:2a:78:77:3e:81:5b:39:50:99:78:
         5d:cf:98:f9:31:63:11:c6:76:06:f3:76:bb:ce:7e:b9:b1:bf:
         68:52:8c:65:a2:ba:8d:83:1e:d2:9a:83:f8:69:c4:8e:91:80:
         a7:e9:17:bf:b6:be:64:53:52:c7:c4:7a:55:f1:f2:d0:64:2d:
         a1:5d:b8:61:72:b4:ac:91:89:e8:d7:a7:ee:71:d6:26:cb:ba:
         3e:3d:39:b9:95:0d:48:01:f9:45:0b:bf:a6:b9:13:bf:e8:0b:
         01:b4:88:40:fa:be:05:92:1a:4b:1c:fd:d4:cc:d1:e2:7a:3f:
         5c:14:ea:76:f7:4d:2a:57:d4:fb:d8:ce:24:0e:6f:a8:84:76:
         de:ee:c5:5d:8b:50:41:43:2f:1c:28:26:72:2e:71:8e:14:93:
         ab:29:9b:d3:a6:a5:4a:ce:47:10:77:af:40:c6:48:8b:86:07:
         ee:a3:ea:e2:af:07:73:f9:c7:01:1e:5f:89:65:f3:6a:76:6f:
         78:4f:d8:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUYsEh/9NyUVZfFTcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI1ZjRkOGUtMjIwZC00YjIxLWE4ZjgtNTdlZDkxYmE4
NmU0MB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk
NTkyZjNhMWYtZDFkNy00NmU1LTk4NGMtNTFhNTY4ZmEwZTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWSGdd5oRKOg62XD8fFELme7NpeBTU0QrB0u
oZbZ01IMwpBDo/pRuCiw/k5Qxj8TT5dcQFLW6pg5Rey/zr7leO0W4XllceNzoVi/
ZiEmPNiHZnJmAqdJxC0KfsZeo5WcVAtJ2KWNxV3+2g+sJgChWlo6Y82g0tBd0kgP
/jdZkE/8xv+9HzytJq8IJA4fs0oWYHul2SJ0T6wr3/zmSuGbGJl8mRBUR0ZhNoqP
7YXFmOCEMzw65VISjHrdnRYVP67RWjoSd5LmmfVY2kTrbvD0L9oHifeJp2NN3GQ5
inSGrO94gDItYPW4ErRxyMCJrOWFdAX/b27tCCofvTRLvCWCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZDUpTI3G9Uf39kjra5NPxQD/VYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVm
NGQ4ZS0yMjBkLTRiMjEtYThmOC01N2VkOTFiYTg2ZTQvMmY1NWU3ZTQtYmJmZi0z
MGFkLWE2NDktZGJlNjhjZTMyMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzI1ZjRkOGUtMjIwZC00YjIxLWE4
ZjgtNTdlZDkxYmE4NmU0L2MyNWY0ZDhlLTIyMGQtNGIyMS1hOGY4LTU3ZWQ5MWJh
ODZlNC5jcmwwHwYDVR0jBBgwFoAULMAHHFwzZ6QTgXk+lrcV2bN7LlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVmNGQ4ZS0yMjBkLTRiMjEtYThmOC01N2Vk
OTFiYTg2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmVRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCoYKTjecY1pKcL/XtfDWnJL2fnBQaiQCCPtRG6OMZt3PuH0RsLPnDT
Gc1tBpu1wvOeS6CDCc3NtyGyWHwDKnh3PoFbOVCZeF3PmPkxYxHGdgbzdrvOfrmx
v2hSjGWiuo2DHtKag/hpxI6RgKfpF7+2vmRTUsfEelXx8tBkLaFduGFytKyRiejX
p+5x1ibLuj49ObmVDUgB+UULv6a5E7/oCwG0iED6vgWSGksc/dTM0eJ6P1wU6nb3
TSpX1PvYziQOb6iEdt7uxV2LUEFDLxwoJnIucY4Uk6spm9OmpUrORxB3r0DGSIuG
B+6j6uKvB3P5xwEeX4ll82p2b3hP2MQ=
-----END CERTIFICATE-----
Generated at Thu May 2 03:30:09 2024 by rpki-client on console-ams.rpki-client.org