Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa
File:                     1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa (raw, json)
Hash identifier:          yHUK54mQ673Pij1x3Ta9zZtpTBvkbFf6z00greYwPuc=
Subject key identifier:   C1:E7:95:41:24:B3:8B:BA:C8:62:F7:27:B4:20:30:FC:AB:54:7F:13
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A88A4A48780EF4D8CA840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:88:a4:a4:87:80:ef:4d:8c:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=8fc7a90c-17fd-48d4-b33c-515db568243e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:39:a5:c5:fd:cc:7f:45:e7:61:ca:35:4b:
                    f6:cf:69:40:47:8b:da:4d:48:cf:3b:7e:6c:29:fb:
                    39:bc:9a:f6:ac:0b:98:c8:1d:cc:36:7e:e8:32:e8:
                    f2:66:d7:53:26:a1:85:5c:0d:1e:84:cc:df:01:a9:
                    45:5a:a3:5a:a8:a9:23:e4:26:0a:5c:08:68:33:f6:
                    1c:e8:46:59:e7:cb:d5:63:9a:67:9e:cd:6b:00:2d:
                    d9:9a:eb:72:0c:01:1e:ba:78:f8:54:5e:bd:b0:d7:
                    1d:46:d8:a7:46:78:a1:c0:ac:cd:9f:d1:d2:e0:27:
                    f5:b8:d9:8b:c2:40:26:7d:de:ca:6e:39:48:16:52:
                    29:46:46:97:58:9e:3e:c8:c2:f9:35:d2:b5:1f:5e:
                    7b:fe:8e:5c:c5:93:cf:e4:f6:e2:f5:67:07:e3:90:
                    00:57:76:1e:76:be:a6:4c:25:26:e6:f2:27:48:de:
                    86:a1:6e:0c:2e:87:55:bc:97:53:df:56:4d:c9:5f:
                    62:a6:82:de:6d:f5:e3:cc:41:12:59:8e:ec:06:15:
                    a1:1c:e6:ec:f9:43:f1:8c:97:de:dd:3f:61:27:26:
                    de:c5:4a:cb:74:72:af:b3:95:65:4e:18:d7:7f:e9:
                    30:36:ca:b7:6c:6f:ff:0d:4b:46:72:dd:9d:fb:88:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E7:95:41:24:B3:8B:BA:C8:62:F7:27:B4:20:30:FC:AB:54:7F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:20:ef:6a:a9:d9:ee:6c:82:04:f9:01:a4:1c:37:f0:af:
         25:64:57:84:8e:92:9c:b7:76:42:72:5d:e6:5f:34:f4:62:7f:
         70:c8:57:cf:da:11:e0:bb:24:60:b4:d1:d2:37:97:21:9c:7e:
         82:68:b7:d2:83:89:79:e9:6d:12:17:d4:40:bb:ec:d7:2c:7d:
         6e:f9:da:f4:58:50:af:e9:00:af:ba:3a:71:0d:86:be:58:40:
         e8:b6:14:60:71:34:c9:32:ce:39:5c:2e:39:07:f0:91:fb:61:
         20:ac:41:26:fe:f9:b6:84:b0:80:e0:5e:4e:62:34:10:eb:ea:
         a9:96:17:52:16:25:d6:d8:89:69:27:b7:98:0c:e4:fa:19:eb:
         0a:1e:1a:1e:22:8a:27:fb:d5:2c:09:66:8a:cc:12:eb:cc:3d:
         5f:09:0b:87:81:90:b7:48:79:a5:9f:ad:c4:32:da:48:74:5b:
         68:d5:91:06:30:75:3b:70:06:b8:b9:12:af:a6:0b:e7:cc:7c:
         c9:75:7f:19:95:e2:9b:67:f3:e3:ba:65:e0:0c:80:c3:97:5a:
         73:52:ce:60:22:3a:87:32:c7:fc:bb:a8:8a:50:e7:37:4b:9b:
         98:c3:65:44:67:73:be:7a:59:9e:6f:3d:c9:ad:15:85:b0:de:
         ce:06:0e:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKoikpIeA702MqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OGZjN2E5MGMtMTdmZC00OGQ0LWIzM2MtNTE1ZGI1NjgyNDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPI5pcX9zH9F52HKNUv2z2lAR4vaTUjPO35s
Kfs5vJr2rAuYyB3MNn7oMujyZtdTJqGFXA0ehMzfAalFWqNaqKkj5CYKXAhoM/Yc
6EZZ58vVY5pnns1rAC3ZmutyDAEeunj4VF69sNcdRtinRnihwKzNn9HS4Cf1uNmL
wkAmfd7KbjlIFlIpRkaXWJ4+yML5NdK1H157/o5cxZPP5Pbi9WcH45AAV3Yedr6m
TCUm5vInSN6GoW4MLodVvJdT31ZNyV9ipoLebfXjzEESWY7sBhWhHObs+UPxjJfe
3T9hJybexUrLdHKvs5VlThjXf+kwNsq3bG//DUtGct2d+4gVrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHnlUEks4u6yGL3J7QgMPyrVH8TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWU3ZjNhMjMtNTRlMC0z
MzU0LWE2ZmEtZDUwZWYzMWRiZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChMIO9qqdnubIIE+QGkHDfwryVkV4SOkpy3dkJyXeZfNPRif3DIV8/a
EeC7JGC00dI3lyGcfoJot9KDiXnpbRIX1EC77NcsfW752vRYUK/pAK+6OnENhr5Y
QOi2FGBxNMkyzjlcLjkH8JH7YSCsQSb++baEsIDgXk5iNBDr6qmWF1IWJdbYiWkn
t5gM5PoZ6woeGh4iiif71SwJZorMEuvMPV8JC4eBkLdIeaWfrcQy2kh0W2jVkQYw
dTtwBri5Eq+mC+fMfMl1fxmV4ptn8+O6ZeAMgMOXWnNSzmAiOocyx/y7qIpQ5zdL
m5jDZURnc756WZ5vPcmtFYWw3s4GDg0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:07 2024 by rpki-client on console-fra.rpki-client.org