Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b51b419d-55ed-32f2-9eaa-6c236896ddc8.roa
File:                     b51b419d-55ed-32f2-9eaa-6c236896ddc8.roa (raw, json)
Hash identifier:          PY4eP2FzUmGEeqXkpyHSedvEVGGFbVSfjApphAGYK+4=
Subject key identifier:   0C:05:1A:E1:61:6C:99:68:44:81:D9:5E:67:C2:68:3B:78:2B:FF:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E563034DACBD14C7C1900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b51b419d-55ed-32f2-9eaa-6c236896ddc8.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.21.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:56:30:34:da:cb:d1:4c:7c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3c932e77-8601-4ead-b852-765f1c85b84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:d8:79:7e:19:b5:80:e5:16:1c:5d:73:13:
                    49:56:f1:41:b6:bd:10:86:96:3d:0a:56:68:9b:d3:
                    54:fa:c6:35:9c:b7:3d:2b:86:b6:d9:97:5b:ad:92:
                    66:83:ef:b9:1c:63:97:de:55:bb:69:ba:f8:43:a5:
                    e4:76:72:ec:2d:ac:f9:3d:a1:68:2f:ca:1d:c9:03:
                    96:a1:d4:27:06:5f:0f:24:47:b4:b7:5d:2e:1b:96:
                    07:26:72:49:e7:b7:6b:34:65:fb:d8:de:e8:5b:32:
                    64:3e:80:e6:5c:de:90:c1:76:c6:ea:38:de:ee:47:
                    bc:16:d5:de:b9:8d:11:98:6e:ea:33:0b:6d:b1:98:
                    ba:b9:61:63:96:a7:45:7a:d9:ca:a4:1e:3d:2c:b0:
                    cf:ef:aa:e8:1c:65:1f:a3:12:a7:53:18:32:87:3e:
                    a9:0c:6c:b0:00:42:68:56:9f:e0:3e:b0:5f:ed:ec:
                    ad:61:34:61:7f:33:45:90:11:d3:b4:da:d7:66:84:
                    0d:26:f8:06:68:a6:44:28:d4:4d:21:ab:b6:28:0f:
                    de:f8:a2:22:08:8e:7a:cd:d7:0d:2f:9f:d5:c8:cf:
                    3a:5e:8a:99:30:34:b4:ce:26:22:22:b9:9f:37:9a:
                    b5:54:e6:a5:f7:60:74:f5:4d:22:db:84:25:68:c7:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:05:1A:E1:61:6C:99:68:44:81:D9:5E:67:C2:68:3B:78:2B:FF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b51b419d-55ed-32f2-9eaa-6c236896ddc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:fa:49:4a:dd:3a:51:d6:42:33:c6:7b:96:fc:61:18:b5:
         5f:a7:8a:77:4f:75:87:b3:9c:cb:1a:d6:b9:98:6a:18:34:f7:
         6a:7a:76:d6:bc:85:08:02:37:e0:8c:4b:fc:3b:3c:ad:49:87:
         9c:66:8a:31:86:17:f8:70:af:19:56:74:91:2d:48:05:42:f7:
         38:11:2f:43:5c:e1:39:1b:25:76:a7:a4:21:e0:db:7c:2d:1c:
         80:a8:95:dc:ae:18:d5:0b:52:81:36:4d:4b:db:1a:f6:0b:c6:
         d8:4c:54:97:64:b2:95:ee:db:de:8a:3f:64:6a:a8:29:c0:31:
         47:46:ae:26:87:f0:f9:f0:81:81:87:0d:9c:00:87:71:07:c3:
         62:3b:16:2e:e9:0c:76:aa:1f:35:1c:0e:1c:31:4e:61:33:fa:
         37:e5:9d:26:2b:42:5b:0e:57:4c:5b:bb:8d:39:a3:b8:ab:a7:
         f7:12:30:a6:a2:be:e2:39:34:0f:8f:cb:b7:b1:69:68:0d:01:
         b3:2c:21:a8:3a:86:53:b1:fc:a4:ea:2e:96:43:34:bf:5a:ba:
         27:11:2b:7e:05:ff:30:46:a8:34:85:a3:cb:bd:2e:0e:f7:58:
         17:a8:14:bb:0d:42:18:6b:c5:b6:71:8d:fc:7f:f3:4e:d9:18:
         44:83:2d:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPlYwNNrL0Ux8GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
M2M5MzJlNzctODYwMS00ZWFkLWI4NTItNzY1ZjFjODViODRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR3YeX4ZtYDlFhxdcxNJVvFBtr0QhpY9ClZo
m9NU+sY1nLc9K4a22ZdbrZJmg++5HGOX3lW7abr4Q6XkdnLsLaz5PaFoL8odyQOW
odQnBl8PJEe0t10uG5YHJnJJ57drNGX72N7oWzJkPoDmXN6QwXbG6jje7ke8FtXe
uY0RmG7qMwttsZi6uWFjlqdFetnKpB49LLDP76roHGUfoxKnUxgyhz6pDGywAEJo
Vp/gPrBf7eytYTRhfzNFkBHTtNrXZoQNJvgGaKZEKNRNIau2KA/e+KIiCI56zdcN
L5/VyM86XoqZMDS0ziYiIrmfN5q1VOal92B09U0i24QlaMeVJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwFGuFhbJloRIHZXmfCaDt4K/+5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjUxYjQxOWQtNTVlZC0z
MmYyLTllYWEtNmMyMzY4OTZkZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEL0+klK3TpR1kIzxnuW/GEYtV+nindPdYeznMsa1rmYahg092p6dta8
hQgCN+CMS/w7PK1Jh5xmijGGF/hwrxlWdJEtSAVC9zgRL0Nc4TkbJXanpCHg23wt
HIColdyuGNULUoE2TUvbGvYLxthMVJdkspXu296KP2RqqCnAMUdGriaH8PnwgYGH
DZwAh3EHw2I7Fi7pDHaqHzUcDhwxTmEz+jflnSYrQlsOV0xbu405o7irp/cSMKai
vuI5NA+Py7exaWgNAbMsIag6hlOx/KTqLpZDNL9auicRK34F/zBGqDSFo8u9Lg73
WBeoFLsNQhhrxbZxjfx/807ZGESDLTU=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:09 2024 by rpki-client on console-fra.rpki-client.org