Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c42901-52ee-36b6-9a0d-63b4d2a284db.roa
File:                     10c42901-52ee-36b6-9a0d-63b4d2a284db.roa (raw, json)
Hash identifier:          bdVFd1Wgc+/0ToskDpey13leyMZuvP3G3q3VoXGt9g8=
Subject key identifier:   67:74:2F:5B:5A:0E:9D:3B:30:EB:FF:7E:63:5C:1C:D0:B5:E6:F2:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC06CB01CCCDD4311A000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c42901-52ee-36b6-9a0d-63b4d2a284db.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     40306
IP address blocks:        99.196.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c0:6c:b0:1c:cc:dd:43:11:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ccf5f805-3483-47ed-8bf3-dbd474eff543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:dd:ad:c1:aa:1d:65:4a:ea:4a:1b:90:d3:
                    d2:4e:d2:a6:2a:9d:2a:e9:c1:72:c6:03:1c:76:c9:
                    28:bf:63:c8:66:36:e4:8a:f3:39:1c:25:c4:f9:1a:
                    6f:79:52:b5:5d:00:36:19:70:1b:ff:09:2c:a4:a0:
                    40:d8:0f:55:92:69:f9:37:a2:16:1f:b4:25:60:20:
                    dc:8e:f1:a4:fa:ad:57:1a:ad:b2:0a:50:c7:a9:b3:
                    a9:0b:b3:ef:89:6b:8c:a2:ae:d6:15:7e:af:dd:16:
                    cb:b7:4f:47:13:b6:86:cc:7a:59:79:6d:4d:26:0e:
                    e8:13:2e:9c:34:de:ea:da:c4:ae:eb:12:ad:bb:7f:
                    84:9f:9f:f5:b4:dd:cf:f3:31:3e:b8:37:4b:ec:05:
                    9c:90:d3:91:78:85:78:b1:1a:c1:96:39:5f:d3:12:
                    ae:34:ec:59:c3:89:f1:14:cd:e2:c4:2f:ec:6f:15:
                    20:7e:31:48:53:c2:5f:56:42:ca:b9:4c:70:93:74:
                    f9:97:59:4e:29:be:56:02:4d:20:3d:db:bb:b3:f5:
                    ed:40:6e:1c:11:ad:81:00:ea:a3:b4:56:29:29:4a:
                    47:e4:31:75:0e:3a:2a:11:22:22:7d:8d:0d:71:6d:
                    c2:be:59:7f:0b:6a:4b:a8:29:be:08:90:e2:5f:bb:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:74:2F:5B:5A:0E:9D:3B:30:EB:FF:7E:63:5C:1C:D0:B5:E6:F2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c42901-52ee-36b6-9a0d-63b4d2a284db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:a1:9b:95:bd:4b:c6:37:58:f7:5c:4a:cd:93:b0:92:d3:32:
         9b:4c:84:c5:ac:c7:f0:0d:01:51:b9:80:f2:a1:c3:85:e5:9b:
         38:21:3d:6c:c7:e4:64:7d:c1:b2:75:0a:08:47:29:49:ee:48:
         98:a9:4a:1c:48:7d:3b:38:75:92:8a:59:94:8f:52:5b:b1:6d:
         84:75:cd:40:95:17:59:99:15:30:85:d6:d2:e2:ef:66:0c:d6:
         4d:21:25:46:c3:21:e0:5c:df:06:13:b9:7f:4b:da:aa:f7:7e:
         c2:98:47:28:d7:e2:bc:c9:12:8d:cb:46:33:d6:42:52:58:a5:
         63:b8:e7:e1:51:dc:c4:9d:7d:6d:8c:e8:99:72:f6:c1:1f:2f:
         aa:71:42:ff:ea:77:62:1f:d3:74:cc:7b:cc:03:c0:95:55:15:
         55:36:2c:8c:1c:45:19:f6:fd:8b:70:6e:a6:84:9c:67:d9:b0:
         4e:6a:60:c6:3e:c0:f0:52:34:0a:aa:2f:13:9c:5a:55:e5:88:
         5f:cb:38:ce:b6:9d:9b:e0:b3:27:30:e9:f7:a8:14:1a:cb:da:
         c2:9a:42:54:49:2d:c2:4c:60:31:ea:ca:eb:97:42:1b:8d:ed:
         4d:62:77:c3:6a:14:5e:77:e0:be:35:0b:96:2c:53:83:85:d5:
         8f:5d:b0:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsBssBzM3UMRoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
Y2NmNWY4MDUtMzQ4My00N2VkLThiZjMtZGJkNDc0ZWZmNTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2fdrcGqHWVK6kobkNPSTtKmKp0q6cFyxgMc
dskov2PIZjbkivM5HCXE+RpveVK1XQA2GXAb/wkspKBA2A9Vkmn5N6IWH7QlYCDc
jvGk+q1XGq2yClDHqbOpC7PviWuMoq7WFX6v3RbLt09HE7aGzHpZeW1NJg7oEy6c
NN7q2sSu6xKtu3+En5/1tN3P8zE+uDdL7AWckNOReIV4sRrBljlf0xKuNOxZw4nx
FM3ixC/sbxUgfjFIU8JfVkLKuUxwk3T5l1lOKb5WAk0gPdu7s/XtQG4cEa2BAOqj
tFYpKUpH5DF1DjoqESIifY0NcW3Cvll/C2pLqCm+CJDiX7sOaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGd0L1taDp07MOv/fmNcHNC15vIBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBjNDI5MDEtNTJlZS0z
NmI2LTlhMGQtNjNiNGQyYTI4NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMmhm5W9S8Y3WPdcSs2TsJLTMptMhMWsx/ANAVG5gPKhw4XlmzghPWzH
5GR9wbJ1CghHKUnuSJipShxIfTs4dZKKWZSPUluxbYR1zUCVF1mZFTCF1tLi72YM
1k0hJUbDIeBc3wYTuX9L2qr3fsKYRyjX4rzJEo3LRjPWQlJYpWO45+FR3MSdfW2M
6Jly9sEfL6pxQv/qd2If03TMe8wDwJVVFVU2LIwcRRn2/YtwbqaEnGfZsE5qYMY+
wPBSNAqqLxOcWlXliF/LOM62nZvgsycw6feoFBrL2sKaQlRJLcJMYDHqyuuXQhuN
7U1id8NqFF534L41C5YsU4OF1Y9dsH4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:00 2024 by rpki-client on console-fra.rpki-client.org