Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b050dfe-0e74-348a-8ed0-12e9a9193470.roa
File:                     0b050dfe-0e74-348a-8ed0-12e9a9193470.roa (raw, json)
Hash identifier:          2V9LyjBTXD5VWN3oxES3hHUS2EtmrlXLq+ZboSnmtbc=
Subject key identifier:   AE:A7:7C:82:94:C4:EC:93:5D:B7:E7:EE:B8:F4:88:0A:43:28:60:7D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB471EBD89687CCCE88F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b050dfe-0e74-348a-8ed0-12e9a9193470.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.21.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:47:1e:bd:89:68:7c:cc:e8:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0c8282b2-617c-4556-8684-09016d7eaa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:35:fa:91:6b:32:c6:7b:83:4d:30:62:c6:
                    05:62:8f:45:c0:2b:50:0b:3a:5a:af:cf:a7:0b:e8:
                    e0:38:cd:40:0d:f4:d2:75:73:93:e4:7e:f2:6c:54:
                    24:88:79:bd:f6:75:93:71:97:d2:b6:da:59:48:05:
                    cc:1c:f4:97:77:44:83:5e:2c:53:77:62:5b:ee:48:
                    df:d6:a4:a9:ec:21:26:26:0a:e5:77:19:52:2b:88:
                    5d:d5:88:2e:bc:db:fb:69:04:53:ff:65:ae:0f:0b:
                    02:ab:1c:f6:a7:3e:62:52:bb:78:7f:86:ed:f3:31:
                    03:4b:79:34:eb:45:37:fd:8d:8c:24:83:03:d4:3d:
                    41:51:fd:b1:48:4c:38:29:65:78:a3:cc:28:21:25:
                    fe:76:be:5d:57:b2:31:70:a0:ea:25:79:e3:9d:63:
                    08:42:66:2f:b7:f2:2f:fa:96:dd:19:ab:41:d3:6f:
                    46:fe:c4:27:19:43:fd:11:1e:fa:8f:43:95:7a:58:
                    b9:35:76:ec:ea:46:af:de:a2:2c:99:d9:7c:b9:65:
                    f2:9f:c6:52:1a:8d:d9:4e:b1:dc:8f:38:eb:0a:a3:
                    df:7f:94:a5:4d:c9:98:76:4d:55:da:74:75:37:8a:
                    b5:a8:c8:a1:3e:8b:23:3c:96:25:f6:96:64:82:ec:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A7:7C:82:94:C4:EC:93:5D:B7:E7:EE:B8:F4:88:0A:43:28:60:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b050dfe-0e74-348a-8ed0-12e9a9193470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:56:b2:0a:6f:4b:35:eb:60:4a:bb:13:96:d3:01:c0:10:
         a1:0e:f1:6b:1f:08:66:46:46:62:86:fb:c7:6a:d3:a0:6c:2f:
         46:c9:54:b7:1f:1d:44:e0:d8:4c:62:aa:0e:cd:4b:c6:8e:e8:
         2f:c3:27:61:e1:a3:a3:4b:a3:e2:1c:27:5a:2c:2d:8a:39:ea:
         81:e0:32:73:d6:4b:e1:ee:04:e7:61:41:dd:ae:29:9f:90:47:
         f0:c8:95:17:0e:1e:62:fe:b8:7c:38:44:3e:99:e2:cc:87:05:
         63:8f:ea:63:28:b2:bb:ef:12:0f:f1:e7:81:ea:35:3e:37:e7:
         cc:bf:cb:28:f9:44:3d:01:8a:28:19:45:48:b1:64:b8:03:17:
         8d:fd:a2:88:4b:0d:ce:79:c0:10:50:e3:94:79:75:ad:df:32:
         0b:32:d1:3e:68:e2:9b:81:fe:af:4d:b8:87:02:c6:97:d8:fe:
         3a:eb:5b:e5:96:48:d8:95:41:b9:77:9f:50:de:8c:23:4e:b4:
         6d:ea:54:de:f4:90:16:2a:a4:90:b5:a7:36:ad:a8:1d:a3:bb:
         a6:4e:dd:0b:33:85:1a:ad:71:46:74:d7:7c:84:82:04:61:70:
         82:c6:74:9d:f8:cd:4c:33:cc:34:db:17:c0:a0:85:f2:8f:91:
         77:39:76:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0cevYlofMzojwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MGM4MjgyYjItNjE3Yy00NTU2LTg2ODQtMDkwMTZkN2VhYTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt81+pFrMsZ7g00wYsYFYo9FwCtQCzpar8+n
C+jgOM1ADfTSdXOT5H7ybFQkiHm99nWTcZfSttpZSAXMHPSXd0SDXixTd2Jb7kjf
1qSp7CEmJgrldxlSK4hd1YguvNv7aQRT/2WuDwsCqxz2pz5iUrt4f4bt8zEDS3k0
60U3/Y2MJIMD1D1BUf2xSEw4KWV4o8woISX+dr5dV7IxcKDqJXnjnWMIQmYvt/Iv
+pbdGatB029G/sQnGUP9ER76j0OVeli5NXbs6kav3qIsmdl8uWXyn8ZSGo3ZTrHc
jzjrCqPff5SlTcmYdk1V2nR1N4q1qMihPosjPJYl9pZkguzDgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6nfIKUxOyTXbfn7rj0iApDKGB9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGIwNTBkZmUtMGU3NC0z
NDhhLThlZDAtMTJlOWE5MTkzNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfBVrIKb0s162BKuxOW0wHAEKEO8WsfCGZGRmKG+8dq06BsL0bJVLcf
HUTg2Exiqg7NS8aO6C/DJ2Hho6NLo+IcJ1osLYo56oHgMnPWS+HuBOdhQd2uKZ+Q
R/DIlRcOHmL+uHw4RD6Z4syHBWOP6mMosrvvEg/x54HqNT4358y/yyj5RD0BiigZ
RUixZLgDF439oohLDc55wBBQ45R5da3fMgsy0T5o4puB/q9NuIcCxpfY/jrrW+WW
SNiVQbl3n1DejCNOtG3qVN70kBYqpJC1pzatqB2ju6ZO3QszhRqtcUZ013yEggRh
cILGdJ34zUwzzDTbF8CghfKPkXc5dig=
-----END CERTIFICATE-----
Generated at Sat May 10 19:31:43 2025 by rpki-client