Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12aa8211-effe-3720-9df0-f21a07ad81f4.roa
File:                     12aa8211-effe-3720-9df0-f21a07ad81f4.roa (raw, json)
Hash identifier:          lFPfEenIlCN5IZ+EAsE5g+14XNkqtrbB7zTsTv+efvA=
Subject key identifier:   1E:99:9A:5E:0E:FD:29:C0:61:64:34:30:87:B1:D6:C0:6F:1A:98:EB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B1A2FC6D60C72831296E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12aa8211-effe-3720-9df0-f21a07ad81f4.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:1a:2f:c6:d6:0c:72:83:12:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6f4d2560-b23d-41ca-9a89-1881e87006aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:e9:b2:07:70:f3:59:7a:4e:bf:75:29:91:
                    29:74:6b:6c:d2:5b:cc:92:df:5f:1d:a2:57:06:22:
                    33:bf:8a:4d:08:b0:b2:21:8d:3f:12:69:90:77:91:
                    ce:6b:2c:78:d6:fe:56:1d:ba:27:19:f7:35:22:29:
                    f1:40:e3:b6:be:d4:6d:a6:df:da:ba:a8:ba:24:cc:
                    ab:9c:85:4c:c8:84:80:37:47:0c:99:6f:9b:6b:37:
                    44:96:61:6b:f5:b2:8e:c5:9a:20:24:7e:b1:a3:df:
                    d0:f0:1a:97:8a:fd:ae:59:cb:52:8f:99:07:03:d8:
                    83:16:1b:c0:e3:5c:3b:66:27:80:32:8d:a9:6d:fb:
                    ba:ed:27:a8:2e:bf:20:b9:17:3a:93:c1:2d:b4:3e:
                    41:57:f5:ae:57:a6:3e:95:2d:87:e2:a8:83:59:4a:
                    a7:c4:14:e3:46:04:49:d0:2d:50:18:7d:ed:ef:08:
                    c7:a7:1d:56:b4:82:b9:2c:b1:63:bd:41:3f:86:eb:
                    69:b5:34:b7:ca:f3:4b:4c:81:a2:72:4c:34:0f:6a:
                    ac:d6:4f:b1:85:1d:bc:73:fb:a4:30:ca:f2:9b:90:
                    2a:65:a0:5c:c1:2a:a2:e8:c3:73:a3:a1:0e:7c:e2:
                    43:59:3a:22:7b:42:1f:b3:11:c4:72:3b:34:08:9d:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:99:9A:5E:0E:FD:29:C0:61:64:34:30:87:B1:D6:C0:6F:1A:98:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12aa8211-effe-3720-9df0-f21a07ad81f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:73:6b:3f:e4:db:0b:10:5d:d3:91:0d:ab:a4:f9:ca:c2:a0:
         15:f5:db:2f:41:05:8a:3e:87:26:df:29:29:c4:f5:3a:74:e6:
         cc:8d:98:1e:b6:89:26:21:d2:5f:e1:9c:e2:36:2a:b7:f4:39:
         40:ce:d9:c5:dc:5a:cb:6e:f5:79:ed:8c:e3:ae:82:c5:e9:ee:
         aa:41:b8:6d:e2:bf:f5:f6:2e:da:15:7f:20:41:a5:f3:ae:47:
         75:7f:63:59:4c:03:78:f2:f9:de:63:32:c2:a1:26:f5:5c:f8:
         19:21:52:8b:1d:a0:ce:c6:66:2a:d0:50:29:54:84:fb:f9:e6:
         81:66:fa:81:20:77:e9:58:f7:f2:72:59:6f:86:28:31:9f:7d:
         ab:25:81:90:0c:34:1a:60:5b:81:a9:40:fb:9b:1f:f9:22:4f:
         9a:8d:cc:80:56:f8:70:5f:dd:11:42:80:7e:63:1f:e6:b6:b8:
         7b:cb:b8:75:3d:e6:5e:f7:bd:3d:b2:83:60:37:71:97:b4:d7:
         e6:4b:bc:30:91:85:e4:fc:f1:f3:98:9f:df:93:01:d0:79:94:
         ad:ea:47:39:1e:20:2b:8b:61:a9:7c:2d:b8:78:54:25:c0:41:
         7b:08:a1:12:39:85:8c:29:d5:3e:5e:73:95:20:ff:30:9b:6d:
         8d:9b:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:13 2024 by rpki-client on console-ams.rpki-client.org