Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173b1b90-a385-3f2d-8729-05947f6dac05.roa
File:                     173b1b90-a385-3f2d-8729-05947f6dac05.roa (raw, json)
Hash identifier:          8Xxgo7FZNg+b3Tap7uftm/SVxItsyjXB2EVP39SmZVU=
Subject key identifier:   1A:3F:D6:91:03:F2:D6:D2:B7:89:D0:33:54:A4:C1:26:51:A0:99:5C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E544DB38EC981EFFEDB20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173b1b90-a385-3f2d-8729-05947f6dac05.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:54:4d:b3:8e:c9:81:ef:fe:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=e2627f17-bb43-4b18-950f-547fe3e49433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:ae:64:0f:8c:21:27:c3:f0:73:04:79:36:
                    bf:5d:1a:f7:74:cc:73:b7:98:fd:67:04:d1:48:80:
                    2b:81:ec:19:1f:0b:b7:35:04:8d:20:1c:a6:87:6a:
                    e9:94:e3:2e:83:75:e2:30:2e:82:31:7c:73:ad:93:
                    ba:a7:cb:0c:7e:dc:c2:8f:5b:93:19:5b:31:0c:38:
                    f7:1e:28:6d:40:02:b6:e8:50:d2:50:9c:ad:c8:55:
                    0c:c2:43:d0:c5:d0:8d:ba:bd:4a:a6:00:48:59:d5:
                    c9:ab:0f:a6:7f:a1:fa:84:7a:4f:d6:74:05:00:dc:
                    72:a7:ae:55:e4:99:f5:2d:6d:37:4f:33:db:50:6c:
                    70:f4:d8:43:ff:fe:41:a0:f5:4c:42:e1:c9:6c:7c:
                    e4:e1:ac:00:c7:5d:50:4b:d5:f6:c1:a9:e4:06:d3:
                    7d:eb:57:1c:ea:d9:dc:91:09:39:4e:88:bd:6b:30:
                    cf:4c:0a:5e:32:92:a5:d8:21:a7:92:d8:a5:d2:86:
                    3a:4e:5e:6c:d8:a2:61:d2:12:e8:01:51:37:c0:fd:
                    8f:e7:d5:d1:88:1d:62:e3:48:3d:f3:ee:f9:0f:7d:
                    bd:a1:1a:f0:05:bb:66:03:36:2b:36:6b:e9:cb:19:
                    02:57:40:51:6c:49:44:f1:8d:df:30:b0:05:32:6d:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3F:D6:91:03:F2:D6:D2:B7:89:D0:33:54:A4:C1:26:51:A0:99:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173b1b90-a385-3f2d-8729-05947f6dac05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:a4:f9:ea:61:92:18:38:72:fd:b8:e4:33:be:4d:7a:3e:
         a7:cd:20:be:b7:02:bc:8b:c4:d4:c3:a1:81:83:73:9f:e3:19:
         a1:ae:32:ab:9d:70:9b:29:c5:7a:3b:75:f2:44:e0:f6:b5:40:
         42:af:75:b8:18:01:b1:73:e7:d6:18:ad:80:33:88:8e:27:ff:
         e5:c3:e5:38:b7:af:ec:71:4e:76:15:12:67:83:56:33:11:e6:
         ea:d4:14:f6:e8:2a:3b:ad:df:00:e2:7c:df:cd:e6:04:8c:26:
         43:13:9f:bb:c0:83:11:c1:1b:e0:24:80:19:df:9b:0b:f0:30:
         a2:c1:68:f9:40:18:38:ca:f8:5f:04:7d:ff:5f:25:da:6b:ad:
         1a:ca:1c:f0:c3:9a:70:52:e5:bf:5d:bd:97:7b:1b:4d:b4:01:
         a9:5b:04:a0:24:12:70:99:64:23:d4:6b:15:da:45:c3:58:60:
         61:dc:73:e3:81:5d:81:ff:35:32:c1:66:7a:8f:cd:03:a1:18:
         0e:7f:4c:69:d9:bb:47:ba:01:f3:ab:20:44:0e:79:a1:45:dc:
         87:4b:b4:69:d1:9d:1f:87:1c:73:76:a0:fe:1e:96:e4:f0:7c:
         12:91:26:aa:14:7a:cf:57:f0:a9:61:ac:d0:7a:1d:5f:87:3f:
         da:e5:4e:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPlRNs47Jge/+2yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZTI2MjdmMTctYmI0My00YjE4LTk1MGYtNTQ3ZmUzZTQ5NDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYKuZA+MISfD8HMEeTa/XRr3dMxzt5j9ZwTR
SIArgewZHwu3NQSNIBymh2rplOMug3XiMC6CMXxzrZO6p8sMftzCj1uTGVsxDDj3
HihtQAK26FDSUJytyFUMwkPQxdCNur1KpgBIWdXJqw+mf6H6hHpP1nQFANxyp65V
5Jn1LW03TzPbUGxw9NhD//5BoPVMQuHJbHzk4awAx11QS9X2wankBtN961cc6tnc
kQk5Toi9azDPTApeMpKl2CGnktil0oY6Tl5s2KJh0hLoAVE3wP2P59XRiB1i40g9
8+75D329oRrwBbtmAzYrNmvpyxkCV0BRbElE8Y3fMLAFMm1EewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBo/1pED8tbSt4nQM1SkwSZRoJlcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTczYjFiOTAtYTM4NS0z
ZjJkLTg3MjktMDU5NDdmNmRhYzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDMpPnqYZIYOHL9uOQzvk16PqfNIL63AryLxNTDoYGDc5/jGaGuMqud
cJspxXo7dfJE4Pa1QEKvdbgYAbFz59YYrYAziI4n/+XD5Ti3r+xxTnYVEmeDVjMR
5urUFPboKjut3wDifN/N5gSMJkMTn7vAgxHBG+AkgBnfmwvwMKLBaPlAGDjK+F8E
ff9fJdprrRrKHPDDmnBS5b9dvZd7G020AalbBKAkEnCZZCPUaxXaRcNYYGHcc+OB
XYH/NTLBZnqPzQOhGA5/TGnZu0e6AfOrIEQOeaFF3IdLtGnRnR+HHHN2oP4eluTw
fBKRJqoUes9X8KlhrNB6HV+HP9rlTg4=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:36 2024 by rpki-client on console-ams.rpki-client.org