Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a35aa5b1-26de-3b03-88f4-b478df293d67.roa
File:                     a35aa5b1-26de-3b03-88f4-b478df293d67.roa (raw, json)
Hash identifier:          t+zRnU3uMlEwkWuczEnhvgyjOtOl/Qgr7vr5Akt1JCY=
Subject key identifier:   58:53:6F:D8:44:CD:E9:90:0E:41:29:ED:B5:5F:55:2F:39:AB:33:FD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A899BD7CDB1C163C85240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a35aa5b1-26de-3b03-88f4-b478df293d67.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:89:9b:d7:cd:b1:c1:63:c8:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e8eceee4-1a78-4ba1-904c-0e317221c4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:f5:7e:49:96:e9:a9:ce:ee:a0:62:cb:62:
                    de:28:10:92:3e:d5:3b:20:81:ae:a1:6f:ae:87:9f:
                    b2:16:99:3d:af:d0:e2:34:bc:94:29:78:47:37:1d:
                    3c:0b:88:d5:08:a6:40:4d:c7:03:fb:dc:62:b6:5c:
                    1b:47:77:b5:c7:42:b9:a1:fb:9d:77:5a:9b:1c:6e:
                    c6:fa:9a:97:35:8c:14:3c:4b:c6:fe:90:a3:61:d0:
                    67:83:2d:aa:67:b4:77:d5:69:59:ce:c2:40:7d:16:
                    5d:9f:cf:56:4d:71:b9:f1:48:b8:63:05:b9:a4:6c:
                    60:83:15:5a:61:dd:40:22:a6:52:aa:0d:e0:d7:44:
                    7f:b3:61:b7:8f:8b:1c:0a:af:15:41:b7:6c:18:a7:
                    f0:8f:5b:02:75:58:76:e2:c4:47:63:76:13:8c:13:
                    6a:8b:65:aa:f7:2a:35:9c:bf:e9:cb:bc:c2:02:bb:
                    81:db:66:07:5d:b6:e3:b9:ed:a8:0c:b0:ee:4f:4f:
                    cf:47:35:30:01:6b:cf:8c:40:c4:48:d0:e1:22:b5:
                    fa:44:7b:97:32:3a:06:04:42:5d:e5:e0:64:bf:62:
                    2c:1a:ed:54:bb:81:2a:c8:eb:44:cd:b4:3a:31:91:
                    bf:fc:8f:e9:98:07:ea:9c:06:2a:15:19:b9:93:a1:
                    d4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:53:6F:D8:44:CD:E9:90:0E:41:29:ED:B5:5F:55:2F:39:AB:33:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a35aa5b1-26de-3b03-88f4-b478df293d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:cd:5e:f7:4f:89:94:bd:f3:0e:b0:ca:4f:ab:98:d9:24:9a:
         1e:4b:48:85:26:14:b2:60:86:ed:f2:67:af:7a:f2:d7:56:15:
         05:c9:f4:e6:46:fc:49:08:46:d0:dd:52:39:a6:58:ad:b8:be:
         3e:e2:c7:8c:4d:0f:73:2f:ef:00:75:3e:68:8b:bd:66:15:e7:
         d8:7a:09:01:b2:de:b9:b8:7d:6a:c7:05:38:49:4f:77:39:8a:
         cc:12:fb:99:92:25:41:ca:e0:09:55:5a:4b:e5:2a:93:8f:f4:
         d0:4e:54:5a:d6:c1:79:82:f8:ff:97:55:5d:4b:86:8a:f1:5f:
         20:90:af:08:d9:b6:13:28:33:70:1c:db:f7:de:f7:3e:eb:ba:
         a8:ce:fe:23:bf:c4:ee:42:27:1e:0b:79:1c:ec:4f:96:55:16:
         87:e6:99:51:02:7c:d3:5b:3c:59:de:19:75:ec:f4:ba:52:dd:
         2c:ce:2b:a0:7b:e2:31:17:6b:ca:90:7b:5f:0a:39:0c:c3:56:
         b2:fb:93:80:e7:53:5e:42:2d:67:8d:6c:2f:9f:33:80:31:5c:
         9e:28:83:33:96:d5:64:1c:3e:70:88:b4:71:69:dc:a8:18:24:
         51:07:f6:08:04:53:d0:a5:4d:99:54:7b:c4:6b:f9:0d:f3:ce:
         fc:87:83:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKomb182xwWPIUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZThlY2VlZTQtMWE3OC00YmExLTkwNGMtMGUzMTcyMjFjNGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiH1fkmW6anO7qBiy2LeKBCSPtU7IIGuoW+u
h5+yFpk9r9DiNLyUKXhHNx08C4jVCKZATccD+9xitlwbR3e1x0K5ofudd1qbHG7G
+pqXNYwUPEvG/pCjYdBngy2qZ7R31WlZzsJAfRZdn89WTXG58Ui4YwW5pGxggxVa
Yd1AIqZSqg3g10R/s2G3j4scCq8VQbdsGKfwj1sCdVh24sRHY3YTjBNqi2Wq9yo1
nL/py7zCAruB22YHXbbjue2oDLDuT0/PRzUwAWvPjEDESNDhIrX6RHuXMjoGBEJd
5eBkv2IsGu1Uu4EqyOtEzbQ6MZG//I/pmAfqnAYqFRm5k6HUvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhTb9hEzemQDkEp7bVfVS85qzP9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTM1YWE1YjEtMjZkZS0z
YjAzLTg4ZjQtYjQ3OGRmMjkzZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBX1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfNXvdPiZS98w6wyk+rmNkkmh5LSIUmFLJghu3yZ6968tdWFQXJ9OZG
/EkIRtDdUjmmWK24vj7ix4xND3Mv7wB1PmiLvWYV59h6CQGy3rm4fWrHBThJT3c5
iswS+5mSJUHK4AlVWkvlKpOP9NBOVFrWwXmC+P+XVV1LhorxXyCQrwjZthMoM3Ac
2/fe9z7ruqjO/iO/xO5CJx4LeRzsT5ZVFofmmVECfNNbPFneGXXs9LpS3SzOK6B7
4jEXa8qQe18KOQzDVrL7k4DnU15CLWeNbC+fM4AxXJ4ogzOW1WQcPnCItHFp3KgY
JFEH9ggEU9ClTZlUe8Rr+Q3zzvyHg7I=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:03:44 2024 by rpki-client on console-ams.rpki-client.org