Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f65535a-9e35-3536-87f5-a06b0a1112dd.roa
File:                     4f65535a-9e35-3536-87f5-a06b0a1112dd.roa (raw, json)
Hash identifier:          HM48m/xq8+FiYek/l4jW2J4vfBq0h6X9lK4sHVNbN00=
Subject key identifier:   9F:18:76:6D:3F:CA:DA:85:DD:B2:24:17:6D:C9:3E:1C:EE:9D:D3:66
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A889941799090FB1EA400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f65535a-9e35-3536-87f5-a06b0a1112dd.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:88:99:41:79:90:90:fb:1e:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1a7dc7f7-ab25-4e1e-94ba-d1d753c73530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:33:3e:45:b0:1d:db:11:8f:9d:e1:37:90:78:
                    0a:85:fd:59:d7:e6:d1:c2:99:46:d5:a5:d4:63:4e:
                    ff:9e:ea:cd:c9:e7:fd:44:24:db:b6:bc:6c:82:15:
                    e9:01:bd:df:9e:1f:8c:40:fb:f3:34:e9:f1:0a:47:
                    2e:b4:16:03:41:95:6b:78:99:ca:4f:49:fd:aa:4c:
                    03:a3:07:de:82:2c:d6:3f:c3:55:cd:bd:01:ea:df:
                    06:84:0d:a8:2a:d3:7b:f6:29:09:83:cd:e3:5b:d7:
                    a9:fd:b3:60:64:66:1c:a1:42:00:c1:ba:f5:fc:12:
                    95:23:bf:29:01:0b:4d:4d:e3:36:d2:ae:4f:96:16:
                    88:0a:7c:fc:fc:a5:f7:15:b7:92:7e:d4:49:7c:65:
                    a4:84:22:d9:9a:ae:05:63:b5:41:4f:13:50:e3:a5:
                    30:42:83:33:79:cb:09:ef:a9:1d:70:d8:3f:8c:5e:
                    0b:bf:27:fd:6e:93:e5:b2:9c:89:46:c9:39:74:23:
                    37:3d:4a:63:5d:03:b6:d9:a4:cd:1c:ff:0c:93:0d:
                    a7:e5:69:a6:c6:3b:2e:e1:3b:4d:50:72:2e:a4:81:
                    93:a3:76:47:c6:b3:bd:4c:62:41:d1:b1:7b:20:f0:
                    06:ea:bc:b6:e2:ac:b8:e7:ee:f6:25:b0:3a:3b:05:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:18:76:6D:3F:CA:DA:85:DD:B2:24:17:6D:C9:3E:1C:EE:9D:D3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f65535a-9e35-3536-87f5-a06b0a1112dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:9f:08:ba:16:6a:ff:6e:23:37:c9:34:39:8a:63:b6:d8:
         f6:86:69:9c:9c:e3:3f:79:72:28:8c:6a:41:dd:ae:61:64:58:
         d6:02:5d:d1:46:8a:39:41:bf:28:60:13:ff:61:f5:d2:a1:8d:
         ac:63:07:12:ce:29:91:24:70:0c:8f:40:61:7c:b7:1d:40:d0:
         86:a0:f3:65:99:10:9f:ca:f2:3b:42:4b:7a:a9:7c:e0:16:4a:
         2e:cb:1b:ae:fa:d3:79:a9:51:3d:c5:9f:bc:85:9d:8f:b6:90:
         fd:73:ff:bc:81:5c:da:a1:15:f3:51:e6:ed:38:5a:c7:0a:fe:
         d8:41:2a:b1:fd:d4:9c:e6:9c:a4:b5:b0:12:f7:b8:1b:a1:40:
         ff:76:db:24:74:56:b7:8c:ad:8c:58:14:4e:8c:7f:94:47:4e:
         88:79:a6:94:0f:ba:41:3e:37:49:a8:62:0d:e4:8d:d9:0e:38:
         30:89:46:68:bc:7c:69:74:08:08:49:59:7e:aa:11:78:37:f1:
         b7:0c:2b:9e:70:dc:32:79:96:94:bc:73:98:a0:16:08:cc:81:
         88:1c:86:cf:57:b1:a6:c5:ad:fc:4f:55:5e:17:10:a4:7b:d5:
         c7:d9:92:bc:1b:67:ad:d6:f6:62:e4:88:64:8b:c6:34:e8:fa:
         ea:71:be:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKoiZQXmQkPsepAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MWE3ZGM3ZjctYWIyNS00ZTFlLTk0YmEtZDFkNzUzYzczNTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDM+RbAd2xGPneE3kHgKhf1Z1+bRwplG1aXU
Y07/nurNyef9RCTbtrxsghXpAb3fnh+MQPvzNOnxCkcutBYDQZVreJnKT0n9qkwD
owfegizWP8NVzb0B6t8GhA2oKtN79ikJg83jW9ep/bNgZGYcoUIAwbr1/BKVI78p
AQtNTeM20q5PlhaICnz8/KX3FbeSftRJfGWkhCLZmq4FY7VBTxNQ46UwQoMzecsJ
76kdcNg/jF4Lvyf9bpPlspyJRsk5dCM3PUpjXQO22aTNHP8Mkw2n5Wmmxjsu4TtN
UHIupIGTo3ZHxrO9TGJB0bF7IPAG6ry24qy45+72JbA6OwWkrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8Ydm0/ytqF3bIkF23JPhzundNmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGY2NTUzNWEtOWUzNS0z
NTM2LTg3ZjUtYTA2YjBhMTExMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFo7nwi6Fmr/biM3yTQ5imO22PaGaZyc4z95ciiMakHdrmFkWNYCXdFG
ijlBvyhgE/9h9dKhjaxjBxLOKZEkcAyPQGF8tx1A0Iag82WZEJ/K8jtCS3qpfOAW
Si7LG67603mpUT3Fn7yFnY+2kP1z/7yBXNqhFfNR5u04WscK/thBKrH91JzmnKS1
sBL3uBuhQP922yR0VreMrYxYFE6Mf5RHToh5ppQPukE+N0moYg3kjdkOODCJRmi8
fGl0CAhJWX6qEXg38bcMK55w3DJ5lpS8c5igFgjMgYgchs9XsabFrfxPVV4XEKR7
1cfZkrwbZ63W9mLkiGSLxjTo+upxvvY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:43 2024 by rpki-client on console-ams.rpki-client.org