Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa
File:                     7f7b1408-84ff-37ca-8b92-a380aefab40a.roa (raw, json)
Hash identifier:          2jb77yTT7f/Lc51tJc0nzlncLzUTnkjoO2SdyWpHCdQ=
Subject key identifier:   F3:1C:1C:AA:C1:88:02:61:A3:DD:6A:CB:08:74:C9:C6:B3:76:47:4B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84115DA849A1D05C5C318380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:5d:a8:49:a1:d0:5c:5c:31:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d478ab91-712a-458a-99ed-64cac8cb53d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:f5:be:e5:75:91:12:d0:22:95:78:69:b9:
                    e7:9a:41:9c:c9:8c:6a:36:6c:ec:22:c1:50:27:4c:
                    81:ed:46:39:88:71:99:61:90:ed:98:0a:65:0d:f1:
                    10:ff:4d:07:c7:42:3b:a4:06:38:0a:88:ad:5e:2b:
                    77:71:e8:18:cf:87:10:10:9e:51:90:6f:0b:8e:07:
                    11:22:1e:eb:5f:fc:f0:0c:08:66:44:dc:f4:6e:58:
                    47:d8:ff:41:b1:d5:37:16:e1:1c:e4:7f:66:2f:77:
                    ef:1f:76:97:91:fc:26:e7:a2:82:7e:ff:02:d7:1b:
                    67:5a:41:08:63:a5:59:f1:cc:db:20:60:13:c0:9c:
                    8e:7b:2c:6b:0e:e5:dc:95:be:64:2c:18:3a:30:28:
                    c9:67:52:f5:16:07:46:30:e6:43:d8:b3:55:30:7a:
                    96:73:b6:a3:a2:73:cd:fa:11:b5:fa:b5:58:d0:fa:
                    25:35:2f:c6:83:2e:7d:4b:40:eb:8c:f5:83:45:c0:
                    35:aa:31:9d:48:d1:b0:ec:22:7c:a6:70:3f:21:15:
                    c0:68:36:63:2e:df:72:01:ac:fa:06:d2:8c:86:c7:
                    e1:50:e3:e3:25:5a:d5:57:fa:97:15:6d:5d:49:04:
                    5b:19:57:67:76:a1:94:4d:e3:36:00:0c:2b:c7:50:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:1C:AA:C1:88:02:61:A3:DD:6A:CB:08:74:C9:C6:B3:76:47:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:54:e0:b6:fc:22:95:3a:bf:b9:76:81:9a:fc:c1:a6:6c:b8:
         54:3b:3d:cf:4d:a4:76:88:b8:3e:a1:25:68:f6:c9:be:ae:77:
         da:aa:d6:e5:ba:c8:1a:8b:56:90:a6:42:7c:06:4c:d4:b6:7a:
         49:44:c3:e4:79:e1:fe:0d:9f:31:7f:a8:ae:79:01:0a:e6:62:
         6d:c8:9d:f4:8a:e6:57:b0:8b:bb:ae:6c:0c:67:b4:77:25:33:
         c1:42:34:24:58:d4:fa:56:33:4b:0e:19:b6:85:5c:0a:30:28:
         a2:d7:10:d6:72:93:c0:45:44:3c:72:3e:e2:9f:dc:be:f2:81:
         67:45:3c:f3:00:34:6d:be:00:f4:3d:c1:e0:40:a8:f9:f8:6d:
         b8:f3:3b:34:ae:be:d3:e2:88:1d:49:fd:b4:a1:10:ad:37:1b:
         a4:37:cf:1e:b4:7f:de:8e:c6:a9:48:56:16:f5:b1:37:29:f8:
         21:6d:8e:a0:7c:92:64:6b:0d:31:af:c4:e3:d5:5f:4e:86:92:
         fc:17:a6:bb:ea:a1:45:51:0e:87:03:3f:d3:13:0b:69:4f:ab:
         1e:57:f7:68:76:b8:f2:83:6e:db:7c:07:f9:8a:a9:ec:4c:3b:
         b0:47:db:54:31:1c:67:3b:52:59:e0:09:8f:76:89:eb:50:54:
         5a:d6:d7:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEV2oSaHQXFwxg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZDQ3OGFiOTEtNzEyYS00NThhLTk5ZWQtNjRjYWM4Y2I1M2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jn1vuV1kRLQIpV4abnnmkGcyYxqNmzsIsFQ
J0yB7UY5iHGZYZDtmAplDfEQ/00Hx0I7pAY4CoitXit3cegYz4cQEJ5RkG8LjgcR
Ih7rX/zwDAhmRNz0blhH2P9BsdU3FuEc5H9mL3fvH3aXkfwm56KCfv8C1xtnWkEI
Y6VZ8czbIGATwJyOeyxrDuXclb5kLBg6MCjJZ1L1FgdGMOZD2LNVMHqWc7ajonPN
+hG1+rVY0PolNS/Ggy59S0DrjPWDRcA1qjGdSNGw7CJ8pnA/IRXAaDZjLt9yAaz6
BtKMhsfhUOPjJVrVV/qXFW1dSQRbGVdndqGUTeM2AAwrx1D/8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMcHKrBiAJho91qywh0ycazdkdLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2Y3YjE0MDgtODRmZi0z
N2NhLThiOTItYTM4MGFlZmFiNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBX/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtU4Lb8IpU6v7l2gZr8waZsuFQ7Pc9NpHaIuD6hJWj2yb6ud9qq1uW6
yBqLVpCmQnwGTNS2eklEw+R54f4NnzF/qK55AQrmYm3InfSK5lewi7uubAxntHcl
M8FCNCRY1PpWM0sOGbaFXAowKKLXENZyk8BFRDxyPuKf3L7ygWdFPPMANG2+APQ9
weBAqPn4bbjzOzSuvtPiiB1J/bShEK03G6Q3zx60f96OxqlIVhb1sTcp+CFtjqB8
kmRrDTGvxOPVX06GkvwXprvqoUVRDocDP9MTC2lPqx5X92h2uPKDbtt8B/mKqexM
O7BH21QxHGc7UlngCY92ietQVFrW1wc=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:19 2025 by rpki-client