Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d746d9d-f572-3d64-a7b4-4f39a282aa86.roa
File:                     7d746d9d-f572-3d64-a7b4-4f39a282aa86.roa (raw, json)
Hash identifier:          4xnxEZc9DA7bNulYL7ovZ9efCV943TLd24smeQGUgnM=
Subject key identifier:   23:91:CE:E2:52:B7:36:2E:34:58:A0:60:91:4E:CF:70:0E:FD:33:A8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B1C6C446C1415CAB2DE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d746d9d-f572-3d64-a7b4-4f39a282aa86.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:1c:6c:44:6c:14:15:ca:b2:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c2663c0e-0920-4dd6-82ba-cc2de92d97d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:a7:66:01:dc:75:03:f3:7b:46:a2:1a:8a:
                    97:34:ae:83:ea:df:65:5c:c0:4e:c3:54:5b:5b:24:
                    4f:a9:2f:0a:a7:4c:f2:0d:b5:c2:c6:15:be:07:f8:
                    1b:e2:c4:53:d0:fb:ff:43:67:66:ab:66:f7:35:4e:
                    fe:c1:c2:ad:1f:53:f9:04:29:93:d7:a7:3e:02:eb:
                    a3:f4:83:c7:dc:14:ab:fa:70:d7:0c:15:35:60:88:
                    f8:3f:f2:b6:64:7e:43:9d:56:6c:a2:f0:61:4b:bb:
                    2c:d6:3d:ff:94:30:85:6f:08:bc:a8:03:03:15:1d:
                    5d:58:a6:fa:4a:b8:5f:0d:82:f0:c0:4b:a4:cf:bf:
                    ce:da:61:c2:eb:78:37:b0:c7:97:4a:49:d4:76:42:
                    4a:2f:6b:0c:f7:c2:65:f4:94:d0:4b:c5:e1:ed:a3:
                    1e:3f:16:96:56:60:69:34:04:25:6d:69:38:03:6c:
                    17:e5:74:f6:6c:f0:55:f7:dd:4d:cc:cb:af:b6:aa:
                    33:71:92:a7:9c:d8:4d:aa:76:00:62:b7:5a:92:6d:
                    67:3f:ad:a7:e0:5f:e5:4f:12:f1:3f:3d:63:e6:9e:
                    db:39:65:0b:01:cf:94:28:55:b9:55:8a:57:b6:a0:
                    2f:42:7b:ed:3f:80:93:ba:b9:76:74:65:5c:b1:97:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:CE:E2:52:B7:36:2E:34:58:A0:60:91:4E:CF:70:0E:FD:33:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d746d9d-f572-3d64-a7b4-4f39a282aa86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:cb:99:a3:8a:c9:12:00:f5:aa:c1:1e:17:96:38:23:cb:
         fe:dc:c3:11:81:e5:96:5b:de:51:a1:d3:49:72:83:62:46:48:
         eb:bf:75:65:48:9f:16:8a:9b:bd:0b:d9:a4:44:63:07:d7:bb:
         5e:a4:44:5d:93:4c:6a:98:59:96:01:2c:cb:83:fe:13:ee:57:
         5a:c4:0e:0c:f7:ec:ab:1b:77:11:52:de:6e:3a:ae:e5:18:d2:
         30:c1:6d:84:0c:b6:cf:13:34:f6:94:68:9c:0d:68:bd:7c:d3:
         da:07:c5:c9:6f:29:c7:4b:2c:66:66:4c:2d:fa:da:01:27:75:
         c4:8f:6c:18:87:90:2a:55:b6:4a:ef:07:d2:19:94:33:8e:2d:
         00:5b:7a:83:93:bd:5c:5e:30:d0:9b:27:7f:d2:56:29:65:2c:
         49:a9:66:cb:97:5a:81:32:99:52:e3:33:e7:0e:d3:13:c3:41:
         97:cb:c2:fa:d5:53:07:65:21:98:e5:15:cd:10:21:33:b5:ff:
         7e:ee:15:59:42:42:5d:b9:e1:e0:a4:10:cf:e3:1f:42:1e:1f:
         6f:30:b9:59:a6:32:f2:92:2d:f1:52:0d:75:63:ac:e1:f7:c0:
         56:83:09:06:1b:61:d1:c8:a7:6a:2b:62:1d:73:71:97:f4:cf:
         1d:e2:d8:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKxxsRGwUFcqy3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YzI2NjNjMGUtMDkyMC00ZGQ2LTgyYmEtY2MyZGU5MmQ5N2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjqnZgHcdQPze0aiGoqXNK6D6t9lXMBOw1Rb
WyRPqS8Kp0zyDbXCxhW+B/gb4sRT0Pv/Q2dmq2b3NU7+wcKtH1P5BCmT16c+Auuj
9IPH3BSr+nDXDBU1YIj4P/K2ZH5DnVZsovBhS7ss1j3/lDCFbwi8qAMDFR1dWKb6
SrhfDYLwwEukz7/O2mHC63g3sMeXSknUdkJKL2sM98Jl9JTQS8Xh7aMePxaWVmBp
NAQlbWk4A2wX5XT2bPBV991NzMuvtqozcZKnnNhNqnYAYrdakm1nP62n4F/lTxLx
Pz1j5p7bOWULAc+UKFW5VYpXtqAvQnvtP4CTurl2dGVcsZfm+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCORzuJStzYuNFigYJFOz3AO/TOoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2Q3NDZkOWQtZjU3Mi0z
ZDY0LWE3YjQtNGYzOWEyODJhYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNey5mjiskSAPWqwR4Xljgjy/7cwxGB5ZZb3lGh00lyg2JGSOu/dWVI
nxaKm70L2aREYwfXu16kRF2TTGqYWZYBLMuD/hPuV1rEDgz37KsbdxFS3m46ruUY
0jDBbYQMts8TNPaUaJwNaL1809oHxclvKcdLLGZmTC362gEndcSPbBiHkCpVtkrv
B9IZlDOOLQBbeoOTvVxeMNCbJ3/SVillLEmpZsuXWoEymVLjM+cO0xPDQZfLwvrV
UwdlIZjlFc0QITO1/37uFVlCQl254eCkEM/jH0IeH28wuVmmMvKSLfFSDXVjrOH3
wFaDCQYbYdHIp2orYh1zcZf0zx3i2P0=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:03:28 2024 by rpki-client on console-ams.rpki-client.org