Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d571037f-3aa3-32aa-89eb-4c2564243023.roa
File:                     d571037f-3aa3-32aa-89eb-4c2564243023.roa (raw, json)
Hash identifier:          vkkONcYA6UMqClUsTQMbGU29p4gWJl2P6DEiDbZmmG4=
Subject key identifier:   34:52:C2:9F:88:E2:CD:8E:04:F0:7D:6A:30:F8:9F:33:DA:5D:65:F9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581EA2E907E197B98C19000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d571037f-3aa3-32aa-89eb-4c2564243023.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ea:2e:90:7e:19:7b:98:c1:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e0206ee5-bcf2-45c4-a07c-44fdd47dcf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:be:07:26:70:82:8b:9f:99:eb:77:89:0f:
                    d1:79:9b:4b:48:78:73:fd:72:12:b0:88:89:36:71:
                    78:39:63:2c:6b:d4:ee:9b:3c:80:70:69:e1:7e:70:
                    d9:b2:d9:47:dc:75:d5:95:64:78:c9:89:09:b9:a9:
                    f8:1b:6f:2d:bf:b2:87:aa:ab:d4:4c:3b:24:26:13:
                    8a:1a:26:d9:10:ca:b2:45:9c:5a:4a:1f:ff:af:aa:
                    d5:11:34:7d:18:e3:16:74:df:9f:90:cc:bf:d1:56:
                    b8:52:8a:13:e2:7b:20:6e:9c:3c:57:98:5d:f2:8a:
                    ad:49:1a:fe:e6:d4:17:d9:17:e5:55:76:3f:f0:33:
                    b6:5f:12:36:f8:31:f3:9e:8f:53:83:f0:7a:f1:29:
                    bf:79:7e:53:a1:12:a2:1e:0a:15:0e:06:a4:16:c2:
                    62:62:3f:a1:ae:71:5c:22:f5:b2:6e:b7:5f:4a:0a:
                    ba:fe:43:40:5b:03:f2:9a:21:9d:f1:d4:d2:e0:a6:
                    45:af:5c:ad:62:70:6d:0e:a4:33:b5:3b:0d:a0:a3:
                    62:7c:c3:ee:87:7d:eb:75:96:6f:e2:fe:78:22:4c:
                    44:1b:cc:af:88:b7:82:4a:12:42:e2:ef:39:e6:42:
                    6f:55:74:28:ec:7a:86:34:60:ff:0d:e5:35:dd:f3:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:C2:9F:88:E2:CD:8E:04:F0:7D:6A:30:F8:9F:33:DA:5D:65:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d571037f-3aa3-32aa-89eb-4c2564243023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:db:e8:b5:9f:87:7f:38:8e:12:da:91:f1:8a:8b:31:40:
         44:cc:86:3b:a4:bf:21:15:72:86:cc:38:cc:75:84:8f:5d:88:
         e1:1d:c0:70:06:f6:36:e8:ba:9c:92:4c:86:c0:cf:33:7a:a5:
         82:2e:6a:5f:2d:fd:45:1a:0d:ae:21:40:d9:67:6d:8d:94:79:
         83:f3:1a:33:3e:6d:4b:78:6d:b6:e7:d4:74:69:8a:a0:d5:01:
         0c:f2:68:a7:4e:18:3c:83:bc:f0:26:15:87:93:f2:b7:5c:6a:
         d8:bc:b1:31:95:83:2d:c1:b1:11:8f:83:15:c1:d7:81:ad:5b:
         7f:f5:b9:d8:24:38:1a:34:0c:fc:c2:1a:7f:97:51:f5:0d:5b:
         e7:ae:0e:e7:ec:b5:f1:5d:d8:c7:c3:2b:73:b0:53:38:57:39:
         02:bb:44:66:04:50:de:9f:8a:70:f6:d3:54:b0:86:c9:14:cd:
         21:14:1e:63:88:61:fa:d5:3d:66:81:c7:57:f1:94:6a:dd:20:
         91:80:49:ba:29:5c:4a:62:35:a7:6e:6f:e2:3a:93:22:a6:f3:
         41:20:8c:f6:5e:00:0e:10:32:c8:55:d7:fb:6a:67:5c:e3:b5:
         12:26:03:3d:c2:69:09:f0:a6:89:14:6c:ec:de:a6:dd:67:b3:
         cf:f5:5e:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeoukH4Ze5jBkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTAyMDZlZTUtYmNmMi00NWM0LWEwN2MtNDRmZGQ0N2RjZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l6+ByZwgoufmet3iQ/ReZtLSHhz/XISsIiJ
NnF4OWMsa9TumzyAcGnhfnDZstlH3HXVlWR4yYkJuan4G28tv7KHqqvUTDskJhOK
GibZEMqyRZxaSh//r6rVETR9GOMWdN+fkMy/0Va4UooT4nsgbpw8V5hd8oqtSRr+
5tQX2RflVXY/8DO2XxI2+DHzno9Tg/B68Sm/eX5ToRKiHgoVDgakFsJiYj+hrnFc
IvWybrdfSgq6/kNAWwPymiGd8dTS4KZFr1ytYnBtDqQztTsNoKNifMPuh33rdZZv
4v54IkxEG8yviLeCShJC4u855kJvVXQo7HqGNGD/DeU13fOSOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRSwp+I4s2OBPB9ajD4nzPaXWX5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDU3MTAzN2YtM2FhMy0z
MmFhLTg5ZWItNGMyNTY0MjQzMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtH2+i1n4d/OI4S2pHxiosxQETMhjukvyEVcobMOMx1hI9diOEdwHAG
9jboupySTIbAzzN6pYIual8t/UUaDa4hQNlnbY2UeYPzGjM+bUt4bbbn1HRpiqDV
AQzyaKdOGDyDvPAmFYeT8rdcati8sTGVgy3BsRGPgxXB14GtW3/1udgkOBo0DPzC
Gn+XUfUNW+euDufstfFd2MfDK3OwUzhXOQK7RGYEUN6finD201SwhskUzSEUHmOI
YfrVPWaBx1fxlGrdIJGASbopXEpiNadub+I6kyKm80EgjPZeAA4QMshV1/tqZ1zj
tRImAz3CaQnwpokUbOzept1ns8/1XhE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:35 2025 by rpki-client