Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b050dfe-0e74-348a-8ed0-12e9a9193470.roa
File:                     0b050dfe-0e74-348a-8ed0-12e9a9193470.roa (raw, json)
Hash identifier:          qLXuUJAOdXDTrwQMJg8c0Gj9GtISQqbq9myRskmrDZg=
Subject key identifier:   5E:DE:0D:88:49:3D:B2:7D:C2:CC:49:29:2A:7D:32:95:45:8B:5B:9F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B1B1633EB6DABB7528E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b050dfe-0e74-348a-8ed0-12e9a9193470.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:1b:16:33:eb:6d:ab:b7:52:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=22d9f118-05ef-4189-8d76-c15dd151cefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:da:bb:7d:a3:df:e7:65:58:8c:22:02:2f:
                    80:74:c2:a0:32:a8:4b:63:e3:b6:6f:59:cd:5c:4e:
                    82:d0:72:bf:7e:bc:31:d7:71:e6:dd:9d:6a:79:29:
                    73:97:f2:01:80:8a:1a:86:00:1d:05:17:33:46:f6:
                    a1:53:f7:1d:8b:80:58:01:2f:a7:8b:a7:b5:bd:4a:
                    81:2a:9e:cc:ce:ef:a9:a1:1c:b5:7b:b5:79:52:18:
                    34:91:b1:3a:8a:60:1e:e4:30:55:13:1f:ff:78:b4:
                    c9:5f:24:3f:46:db:76:05:a1:44:74:a1:1c:d3:10:
                    ad:bb:dc:b6:23:64:ab:28:ac:e6:c2:54:ec:c8:60:
                    c3:b2:ca:01:31:54:e5:f1:8f:c1:4c:d6:1f:e4:8f:
                    26:74:a3:4d:ca:ce:cc:ca:77:39:12:a2:e3:ca:74:
                    95:62:2b:f7:66:d5:a7:ca:3f:30:a5:82:10:7c:f0:
                    c7:b1:ab:45:2c:9a:eb:bc:be:ba:f4:88:aa:b1:8d:
                    d6:34:59:e8:3c:cc:8b:c8:fc:27:56:5e:66:fa:b2:
                    93:42:5e:e0:8b:e5:5d:c0:38:72:0a:f8:f0:fa:90:
                    67:36:2a:53:11:c0:69:c3:1d:03:eb:97:90:da:79:
                    dd:f7:39:88:ec:48:1d:60:ad:d3:81:3e:5b:f8:23:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DE:0D:88:49:3D:B2:7D:C2:CC:49:29:2A:7D:32:95:45:8B:5B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b050dfe-0e74-348a-8ed0-12e9a9193470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:c5:f1:be:2b:d9:e0:e6:66:cd:9b:11:1b:ad:24:ce:ce:
         c8:ed:9f:d4:09:d9:94:59:8f:cd:a5:eb:b9:59:bc:39:b7:91:
         9a:38:ff:98:f1:f4:8f:30:63:c2:bc:46:d9:fc:f6:0a:62:8d:
         3b:65:91:3e:87:fb:d3:b4:61:25:7e:f1:11:b6:d0:38:81:07:
         99:d1:19:61:42:9c:36:fd:3d:6f:f0:24:cf:f5:e0:98:5a:36:
         a0:f9:c7:84:78:e8:23:f9:1b:9b:6a:d2:f0:83:a6:46:11:64:
         6b:36:03:2b:65:a7:f7:6a:0d:bc:2f:63:11:5f:6e:9d:c4:a2:
         81:99:70:e8:5b:a7:57:ed:be:42:2a:bf:43:d8:1b:0b:30:3c:
         57:04:95:60:25:30:bf:3f:ed:97:7a:32:00:e2:89:45:35:54:
         13:59:15:2b:86:2b:20:e7:be:d5:6d:67:63:25:e0:8a:c3:f6:
         f8:d1:fd:fa:6d:54:93:3c:9f:e7:f1:5e:ca:8d:f6:f4:22:35:
         0b:d2:f9:e0:d8:66:73:1a:0e:20:f9:e6:73:2f:1c:ce:ae:0c:
         32:36:3e:8b:0b:aa:46:89:4b:8d:f2:08:99:f3:fc:64:84:4a:
         8c:29:a0:ef:49:57:ed:ce:63:ae:2b:c4:e9:03:40:04:e1:ad:
         d5:0a:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:02:43 2024 by rpki-client on console-ams.rpki-client.org