Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d9844a6-aa33-39ea-b57a-3441b331ff09.roa
File:                     4d9844a6-aa33-39ea-b57a-3441b331ff09.roa (raw, json)
Hash identifier:          NmNSByoktJbEcPlApCjeK9/LFKbcfmXTwrtJS/AgxFU=
Subject key identifier:   DB:EC:1B:96:03:37:71:D7:67:A0:64:91:96:A7:72:0F:A6:E3:AC:75
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581EA7D2A1B282343F0B500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d9844a6-aa33-39ea-b57a-3441b331ff09.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ea:7d:2a:1b:28:23:43:f0:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=79a66d1a-15b5-495c-bc46-e91846a1ea9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:26:05:e3:14:01:3a:01:cf:33:eb:be:2b:
                    9d:62:74:5f:95:cf:f5:1c:ae:f4:d3:a0:c4:38:b8:
                    61:c0:a7:8d:a1:dc:18:e5:54:85:76:0c:4c:5a:52:
                    96:cc:4c:73:d3:6b:13:0b:55:bb:f8:90:97:fe:df:
                    8a:24:b5:93:a7:91:5b:a2:4a:f6:f1:52:f8:20:50:
                    3a:ed:05:7f:c3:b6:0e:fe:94:c7:0b:33:83:97:63:
                    8d:b9:3c:15:d1:86:bb:35:cb:b7:36:3c:b4:a5:b2:
                    70:45:02:c4:5b:a6:cb:28:38:5b:b0:b6:64:75:be:
                    59:7c:ff:35:8b:19:99:41:6b:f5:ee:49:c1:4a:99:
                    d4:1c:df:02:65:ab:ef:6a:48:77:8f:20:4b:e0:0e:
                    0d:45:35:92:f9:c5:90:37:19:25:c4:d0:bc:64:8e:
                    ee:6b:ba:83:0f:0c:33:8d:23:10:93:ce:db:a9:cf:
                    86:8f:d4:44:4e:a3:b9:12:10:1b:27:27:eb:e4:5a:
                    e4:9d:58:af:98:ec:3c:64:3d:3a:1c:b8:5a:b2:aa:
                    35:c1:8f:dd:5c:fc:74:0e:b6:b8:7b:c7:ff:9e:fe:
                    86:48:41:f0:3a:c2:da:aa:c7:14:4c:96:23:2c:06:
                    af:8c:f7:b0:91:19:fa:26:60:5a:bf:23:aa:7e:2a:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EC:1B:96:03:37:71:D7:67:A0:64:91:96:A7:72:0F:A6:E3:AC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d9844a6-aa33-39ea-b57a-3441b331ff09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:3a:2c:b0:78:a1:19:6b:8a:75:35:d8:1a:32:83:2d:49:e4:
         d3:9d:f4:73:16:ca:21:18:d6:0b:42:80:a5:72:3d:0d:e6:e7:
         58:85:69:c2:e4:10:51:f5:de:b3:7f:d7:f1:e0:4e:77:c0:56:
         fb:23:3e:60:54:fe:c9:ef:f8:a3:3d:aa:5c:a7:74:cd:af:d2:
         0f:22:17:df:61:0f:b8:9e:98:87:a7:2a:3b:f8:fd:e6:c1:82:
         f0:b0:83:c1:d7:03:52:93:2b:a5:91:10:b3:80:01:a7:61:bd:
         42:ee:c6:04:a6:7b:c2:61:0f:f9:6e:37:7a:61:b8:47:91:5e:
         93:78:54:49:91:16:9c:ff:32:77:91:7f:c4:dc:91:eb:c2:b1:
         be:1f:d7:c3:06:29:20:49:0d:9a:a7:5a:7b:90:02:76:da:e6:
         46:1b:63:45:52:8c:3d:5b:67:0d:31:66:82:ef:a8:80:1f:27:
         ab:bd:53:4b:29:21:26:61:5a:4c:b0:66:28:00:f1:66:67:9f:
         fc:c0:97:ba:32:56:93:b0:36:96:df:45:82:f6:f0:39:f9:bd:
         16:bf:98:d7:90:ee:ff:7b:f9:c9:39:d3:2b:40:b1:38:49:f9:
         28:65:34:08:96:fb:67:4f:0f:65:08:cd:80:de:83:ba:ef:01:
         52:92:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:39 2025 by rpki-client