Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90d13aa6-3017-32ac-9722-91fa30abae01.roa
File:                     90d13aa6-3017-32ac-9722-91fa30abae01.roa (raw, json)
Hash identifier:          gvFCE21Fc8OTrwyqqpcY8lBGhC+ROMIa7rKh5tLTJ6s=
Subject key identifier:   30:BE:3C:8B:8E:48:7F:34:D1:46:73:A6:CC:E1:FF:A8:7D:8B:ED:E8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121198CB8D6A1CEA661E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90d13aa6-3017-32ac-9722-91fa30abae01.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:11:98:cb:8d:6a:1c:ea:66:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=bf5ca69e-364e-48f9-ad1f-a44a59e9915e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:3d:5e:96:c4:cc:3d:36:4d:f3:8a:5f:fd:
                    ec:47:c1:ad:b0:cb:f3:34:62:67:6c:a8:e3:4f:12:
                    fb:66:61:14:1c:e2:7b:27:4d:af:04:59:07:82:30:
                    eb:b6:3f:50:70:52:88:07:f3:b9:b6:13:ed:3a:7d:
                    36:72:ec:d9:4a:26:39:59:7c:38:8a:c1:20:5b:fa:
                    44:bb:c8:b2:ef:29:05:8d:36:54:53:81:17:5b:6d:
                    c0:aa:e5:87:b1:6f:44:35:7e:f6:80:64:1f:54:93:
                    ad:02:5f:ad:88:b1:61:51:1f:af:b6:5b:aa:af:a1:
                    c2:e5:3f:01:f8:38:b2:bb:95:bd:95:e0:c2:6e:b3:
                    e2:ad:7d:41:d3:5b:1d:96:ee:a3:74:30:a6:65:f7:
                    6f:63:4a:57:18:72:a9:15:c7:ac:da:21:7f:6c:f7:
                    03:52:ed:69:7a:22:1c:28:8c:76:14:42:95:16:fb:
                    c5:cf:ea:3e:98:7e:9b:f1:49:42:b9:d7:6d:28:dd:
                    0a:22:5e:4e:b7:65:f0:2c:e9:59:0b:01:5d:47:94:
                    e3:19:f3:95:6b:f0:30:03:29:b2:99:84:7e:c5:1c:
                    fb:05:11:ea:64:15:1e:4f:d2:c6:5f:c3:de:c9:34:
                    58:b6:04:f6:8b:b3:f2:51:65:34:22:ac:54:87:0c:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BE:3C:8B:8E:48:7F:34:D1:46:73:A6:CC:E1:FF:A8:7D:8B:ED:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90d13aa6-3017-32ac-9722-91fa30abae01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:7e:4f:de:f1:18:a2:62:00:b3:66:6e:5d:6d:91:99:86:
         29:bd:63:c6:bb:40:35:c1:ef:7b:c3:cd:13:e4:00:27:0d:02:
         3d:0d:ee:db:13:9a:f0:3d:a3:ed:19:f3:04:4f:d4:21:fe:30:
         9f:b5:53:66:8c:b5:03:7f:f9:1c:fa:51:05:37:ab:2c:b1:bf:
         1c:a1:68:61:f2:71:99:32:12:9e:30:ef:25:c2:08:02:13:eb:
         b3:62:7c:90:ab:03:dd:2e:b8:35:b4:b5:6b:c9:ce:c8:b6:b8:
         84:6a:67:82:6c:74:97:ac:19:04:29:60:31:87:53:97:b3:f9:
         86:85:0e:27:2e:38:b7:39:ab:1f:86:cf:62:9d:87:d2:c2:e0:
         ef:0c:7c:12:fc:75:4c:43:4c:73:5a:fa:c7:54:56:1a:17:05:
         d0:b2:7a:82:75:ab:04:3b:ce:70:97:5f:22:cd:b0:39:39:8c:
         fb:44:33:80:fa:0a:27:ef:44:34:41:75:bf:19:d1:6f:f1:87:
         4c:a3:b6:9e:33:4f:35:dd:e7:31:95:b9:38:92:83:57:08:82:
         37:a6:49:ba:78:8a:90:d9:e0:96:bb:c2:fb:d4:f3:2e:d1:3f:
         e6:66:7b:bb:49:77:9c:85:04:b8:b8:aa:a7:0d:4c:ef:ea:50:
         24:d4:bb:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEhGYy41qHOpmHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YmY1Y2E2OWUtMzY0ZS00OGY5LWFkMWYtYTQ0YTU5ZTk5MTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wk9XpbEzD02TfOKX/3sR8GtsMvzNGJnbKjj
TxL7ZmEUHOJ7J02vBFkHgjDrtj9QcFKIB/O5thPtOn02cuzZSiY5WXw4isEgW/pE
u8iy7ykFjTZUU4EXW23AquWHsW9ENX72gGQfVJOtAl+tiLFhUR+vtluqr6HC5T8B
+Diyu5W9leDCbrPirX1B01sdlu6jdDCmZfdvY0pXGHKpFces2iF/bPcDUu1peiIc
KIx2FEKVFvvFz+o+mH6b8UlCuddtKN0KIl5Ot2XwLOlZCwFdR5TjGfOVa/AwAymy
mYR+xRz7BRHqZBUeT9LGX8PeyTRYtgT2i7PyUWU0IqxUhwwa6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDC+PIuOSH800UZzpszh/6h9i+3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTBkMTNhYTYtMzAxNy0z
MmFjLTk3MjItOTFmYTMwYWJhZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALpOfk/e8RiiYgCzZm5dbZGZhim9Y8a7QDXB73vDzRPkACcNAj0N7tsT
mvA9o+0Z8wRP1CH+MJ+1U2aMtQN/+Rz6UQU3qyyxvxyhaGHycZkyEp4w7yXCCAIT
67NifJCrA90uuDW0tWvJzsi2uIRqZ4JsdJesGQQpYDGHU5ez+YaFDicuOLc5qx+G
z2Kdh9LC4O8MfBL8dUxDTHNa+sdUVhoXBdCyeoJ1qwQ7znCXXyLNsDk5jPtEM4D6
CifvRDRBdb8Z0W/xh0yjtp4zTzXd5zGVuTiSg1cIgjemSbp4ipDZ4Ja7wvvU8y7R
P+Zme7tJd5yFBLi4qqcNTO/qUCTUu64=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:59 2025 by rpki-client