Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8447ee48-ffa3-3afd-8fc0-6573056ff47f.roa
File:                     8447ee48-ffa3-3afd-8fc0-6573056ff47f.roa (raw, json)
Hash identifier:          PG5vrNayV6j7vGzI5XKK43rT/sGARRa5U0Xb3AyYXEY=
Subject key identifier:   A7:64:11:B4:D0:A8:66:54:7A:7A:82:E8:8C:A1:E9:3C:A0:0A:86:61
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E88A70D08598EA230780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8447ee48-ffa3-3afd-8fc0-6573056ff47f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e8:8a:70:d0:85:98:ea:23:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=2eb6e79c-d744-4319-9dcb-c8007ef6ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:f7:3f:0a:9c:7e:3a:ed:29:ce:fb:d0:a4:
                    ca:d9:0e:d8:2e:e4:7e:43:73:0c:7d:e7:00:85:84:
                    8b:da:27:11:45:b0:d0:cc:43:5b:ff:0c:d3:2a:16:
                    b4:d6:08:06:1f:41:57:dd:84:0c:a6:b0:d8:f9:0e:
                    02:dc:6d:59:95:18:cf:d3:1c:ca:f5:92:59:42:3a:
                    cb:d2:e9:9e:82:03:c8:cf:9d:fd:64:e3:6b:c7:e0:
                    a2:96:af:dd:d3:45:d7:95:89:eb:e7:84:e5:17:0c:
                    81:d5:6f:cf:8c:0a:67:1f:1e:63:45:95:a0:df:53:
                    d1:82:e6:2a:7b:51:30:50:ae:1f:30:61:e9:e8:d2:
                    09:ad:e0:e8:9e:f6:ee:7d:7a:d2:9d:be:e8:ad:a6:
                    f4:6f:d4:df:44:47:b6:82:75:f1:e1:83:17:71:e7:
                    c0:11:a4:03:0b:85:a2:fc:f5:98:1b:f5:94:29:55:
                    5b:5b:82:7f:0c:ae:77:9f:2a:d9:39:be:6e:f2:d2:
                    36:9c:84:90:0c:02:e9:38:de:95:18:6f:15:30:5c:
                    f8:68:33:f8:23:2e:1c:d1:54:8f:8d:9b:31:5b:67:
                    74:fa:d8:14:e9:2f:c8:be:4c:9b:8d:33:10:92:21:
                    05:a8:31:3d:3c:af:0a:3c:e4:c6:c3:4b:d3:44:02:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:64:11:B4:D0:A8:66:54:7A:7A:82:E8:8C:A1:E9:3C:A0:0A:86:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8447ee48-ffa3-3afd-8fc0-6573056ff47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:c9:b6:93:84:40:f1:66:15:91:e4:c0:5a:12:2b:48:be:
         7b:8a:73:75:91:8b:da:aa:32:40:71:04:65:94:b8:2d:81:61:
         f4:d9:8a:6e:6b:54:25:8a:db:03:c2:0c:88:a8:95:df:94:09:
         a6:0c:73:5d:c9:7f:32:42:74:ce:fc:8b:6e:72:0e:e0:76:8a:
         ab:78:28:61:55:cc:72:2b:e2:d5:46:59:a1:15:1f:ad:34:ea:
         37:df:82:9c:e0:ef:66:82:48:63:75:d1:81:2c:30:cf:2f:6f:
         12:b5:af:90:19:10:95:b1:10:af:a2:94:3e:8e:b3:32:27:73:
         7d:4a:82:d1:cf:2a:22:e5:f7:16:12:40:fc:1c:97:f6:1a:27:
         d9:bb:64:87:85:94:d6:f2:44:79:54:bb:a7:4c:5e:63:fa:00:
         4e:20:99:d8:38:eb:aa:15:b1:5c:c1:d1:95:f8:58:8a:3c:64:
         ee:28:25:6a:39:3b:1a:66:b3:81:0c:4e:57:90:b2:32:2b:fb:
         4d:c5:c6:6f:f5:af:69:52:f2:2d:1c:a6:23:2f:e3:e6:d3:7e:
         ed:69:4d:e6:1c:4b:6a:40:de:7a:6d:5f:ba:fe:27:d0:d3:13:
         a5:e1:57:27:97:23:a9:23:c3:0c:ae:ba:91:17:5d:91:b0:1f:
         ae:68:40:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeiKcNCFmOojB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmViNmU3OWMtZDc0NC00MzE5LTlkY2ItYzgwMDdlZjZjYTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKP3PwqcfjrtKc770KTK2Q7YLuR+Q3MMfecA
hYSL2icRRbDQzENb/wzTKha01ggGH0FX3YQMprDY+Q4C3G1ZlRjP0xzK9ZJZQjrL
0umeggPIz539ZONrx+Cilq/d00XXlYnr54TlFwyB1W/PjApnHx5jRZWg31PRguYq
e1EwUK4fMGHp6NIJreDonvbufXrSnb7orab0b9TfREe2gnXx4YMXcefAEaQDC4Wi
/PWYG/WUKVVbW4J/DK53nyrZOb5u8tI2nISQDALpON6VGG8VMFz4aDP4Iy4c0VSP
jZsxW2d0+tgU6S/IvkybjTMQkiEFqDE9PK8KPOTGw0vTRAJE1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdkEbTQqGZUenqC6Iyh6TygCoZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODQ0N2VlNDgtZmZhMy0z
YWZkLThmYzAtNjU3MzA1NmZmNDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCsybaThEDxZhWR5MBaEitIvnuKc3WRi9qqMkBxBGWUuC2BYfTZim5r
VCWK2wPCDIiold+UCaYMc13JfzJCdM78i25yDuB2iqt4KGFVzHIr4tVGWaEVH600
6jffgpzg72aCSGN10YEsMM8vbxK1r5AZEJWxEK+ilD6OszInc31KgtHPKiLl9xYS
QPwcl/YaJ9m7ZIeFlNbyRHlUu6dMXmP6AE4gmdg466oVsVzB0ZX4WIo8ZO4oJWo5
Oxpms4EMTleQsjIr+03Fxm/1r2lS8i0cpiMv4+bTfu1pTeYcS2pA3nptX7r+J9DT
E6XhVyeXI6kjwwyuupEXXZGwH65oQFQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:29:10 2025 by rpki-client