Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/899aa091-d3bf-3b19-8dfd-59372fedf09f.roa
File:                     899aa091-d3bf-3b19-8dfd-59372fedf09f.roa (raw, json)
Hash identifier:          vvZoI+88DU96L0FPX8KkNGMXwqeY1OYynw+k30QqKiY=
Subject key identifier:   49:B3:54:8F:53:E5:13:52:62:07:FD:E1:F7:5C:EB:6A:6E:FD:32:48
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841156A55F67CC8E998589C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/899aa091-d3bf-3b19-8dfd-59372fedf09f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:56:a5:5f:67:cc:8e:99:85:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8e51acc7-02f8-4965-abce-fec0d1c47c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:fd:43:c4:d1:4e:67:84:09:b7:7e:78:a6:
                    66:0d:bd:d6:38:46:d3:28:17:7f:4a:55:8b:85:93:
                    7b:84:e2:e9:72:fa:92:89:66:93:b8:d7:34:2e:75:
                    72:97:3c:2d:a6:ac:88:82:ba:80:c4:13:77:b2:d5:
                    ad:fc:bf:9d:b7:e2:c7:a0:7d:f4:e3:24:d6:a6:08:
                    99:e5:95:c6:a8:b2:18:d0:f0:a2:e4:e5:ab:01:53:
                    d2:0f:36:23:96:c4:4d:50:4c:7c:51:93:72:54:b1:
                    4a:0f:06:9f:38:a6:4a:ad:40:02:37:62:52:e0:ac:
                    5b:81:28:2e:8e:f4:e9:d3:dd:27:e0:8d:c8:88:f3:
                    cd:9f:2f:b6:55:60:1a:c4:9e:48:88:3f:c2:bf:31:
                    74:a1:ec:14:b8:f2:4e:e6:41:65:4a:de:9f:ad:66:
                    5b:d9:71:58:8b:58:20:79:99:dd:39:ea:2a:af:66:
                    9c:1e:c2:f4:41:61:09:53:6a:0e:79:c3:4f:87:d5:
                    46:57:64:a5:14:08:b3:17:36:10:4f:14:8e:5b:aa:
                    7c:93:f2:70:99:25:0a:a4:e8:1a:37:69:e5:63:ea:
                    94:0d:41:26:a8:83:bf:2d:ea:a7:83:f3:88:50:51:
                    d1:2b:af:6e:d6:17:dd:e8:67:11:6c:a9:58:a2:7a:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:54:8F:53:E5:13:52:62:07:FD:E1:F7:5C:EB:6A:6E:FD:32:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/899aa091-d3bf-3b19-8dfd-59372fedf09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:c7:97:21:a7:55:1d:7f:fb:de:72:86:b5:e2:ee:14:37:69:
         46:54:21:6d:3e:90:82:96:1b:e0:ce:5d:e5:a7:ae:ca:da:c8:
         ec:85:0b:39:64:65:2f:d5:3d:93:10:19:f2:0d:74:e5:31:a3:
         1a:65:3c:70:e8:f5:39:c0:dc:48:37:79:4c:76:ba:6d:c1:ca:
         68:fd:c3:20:0a:f8:b4:ac:f8:ae:aa:68:fa:1a:68:45:59:c5:
         70:92:be:5a:2b:2e:d1:34:00:4d:e6:44:a1:de:58:4b:2e:75:
         fe:59:c0:a3:b9:25:79:40:f4:4c:48:c3:f6:a5:fb:ec:27:36:
         76:a2:3e:5f:7e:5b:f5:99:13:d4:ff:b1:37:27:20:25:29:71:
         46:d9:1b:dd:6a:0f:21:81:1b:af:c1:6f:14:d6:18:13:d5:dd:
         83:96:e7:ff:98:54:e0:34:7b:d8:9e:7f:f4:da:cb:2c:c1:cc:
         6d:43:4f:5d:26:d0:7c:3a:0c:47:36:68:3c:20:cc:7a:f5:df:
         70:66:9c:88:0c:1f:ad:66:ec:38:a1:27:56:a6:b4:4b:0d:9b:
         c2:15:5d:b1:fd:0b:f4:1a:e4:e4:5a:ab:1a:92:f7:13:6a:fa:
         a6:cf:56:7b:54:b2:6a:a8:fa:cb:f1:62:10:f1:db:dd:b6:97:
         86:6c:38:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEValX2fMjpmFicAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OGU1MWFjYzctMDJmOC00OTY1LWFiY2UtZmVjMGQxYzQ3YzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFz9Q8TRTmeECbd+eKZmDb3WOEbTKBd/SlWL
hZN7hOLpcvqSiWaTuNc0LnVylzwtpqyIgrqAxBN3stWt/L+dt+LHoH304yTWpgiZ
5ZXGqLIY0PCi5OWrAVPSDzYjlsRNUEx8UZNyVLFKDwafOKZKrUACN2JS4KxbgSgu
jvTp090n4I3IiPPNny+2VWAaxJ5IiD/CvzF0oewUuPJO5kFlSt6frWZb2XFYi1gg
eZndOeoqr2acHsL0QWEJU2oOecNPh9VGV2SlFAizFzYQTxSOW6p8k/JwmSUKpOga
N2nlY+qUDUEmqIO/Leqng/OIUFHRK69u1hfd6GcRbKlYonoAwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmzVI9T5RNSYgf94fdc62pu/TJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODk5YWEwOTEtZDNiZi0z
YjE5LThkZmQtNTkzNzJmZWRmMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMjHlyGnVR1/+95yhrXi7hQ3aUZUIW0+kIKWG+DOXeWnrsrayOyFCzlk
ZS/VPZMQGfINdOUxoxplPHDo9TnA3Eg3eUx2um3Bymj9wyAK+LSs+K6qaPoaaEVZ
xXCSvlorLtE0AE3mRKHeWEsudf5ZwKO5JXlA9ExIw/al++wnNnaiPl9+W/WZE9T/
sTcnICUpcUbZG91qDyGBG6/BbxTWGBPV3YOW5/+YVOA0e9ief/TayyzBzG1DT10m
0Hw6DEc2aDwgzHr133BmnIgMH61m7DihJ1amtEsNm8IVXbH9C/Qa5ORaqxqS9xNq
+qbPVntUsmqo+svxYhDx2922l4ZsOGg=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:41:09 2025 by rpki-client