Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1835390f-0ae8-375a-9ec7-5cbc5f2b3f54.roa
File:                     1835390f-0ae8-375a-9ec7-5cbc5f2b3f54.roa (raw, json)
Hash identifier:          leRv0+1DOzDs8DWdGy+GIfvD8MPLLONgpIvLd0RK/tA=
Subject key identifier:   E6:EE:79:32:A4:53:4C:80:92:0A:E9:60:BD:5E:49:0B:3B:B4:DC:81
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F432858489340B0075AFD5454BADBCD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1835390f-0ae8-375a-9ec7-5cbc5f2b3f54.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     40306
IP address blocks:        99.196.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:b0:07:5a:fd:54:54:ba:db:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=31bf4be5-212f-4459-9b46-0e603f47ee80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:23:49:f5:24:30:d9:19:19:fa:73:ee:5e:
                    bf:57:e4:8f:f2:de:d3:bc:18:28:64:da:b0:8f:41:
                    97:06:23:47:22:89:25:60:17:2d:7e:76:3b:6d:9e:
                    e6:68:39:14:bf:89:a4:75:7b:c9:13:51:21:21:43:
                    45:67:d7:93:a7:29:f8:45:1d:72:b2:49:17:51:60:
                    68:ff:6f:e9:fc:a2:8e:ab:81:f7:09:a7:62:cb:e5:
                    b2:fa:37:1e:df:b1:90:6e:2b:d0:0a:e2:d4:e1:ed:
                    b5:bc:81:bd:95:f8:ed:d7:55:db:0b:c6:7a:79:58:
                    4a:82:ea:51:4b:d2:a5:af:bf:28:94:87:ed:e6:f9:
                    91:28:e6:77:75:b8:70:47:08:cc:55:3f:23:c4:ed:
                    73:c9:89:24:82:c3:22:c2:bd:33:8a:e9:bb:95:c2:
                    4f:e0:7f:4e:36:d6:df:a2:85:14:e9:99:96:7e:14:
                    53:0a:e5:ce:14:db:87:6e:61:b1:d9:f8:62:bc:59:
                    7e:4f:70:b5:fa:41:e0:18:48:5d:b6:08:31:ab:67:
                    c7:79:7f:8a:2e:77:4c:29:b9:f1:37:1b:36:1e:48:
                    70:dd:6e:93:dd:eb:f5:be:16:33:77:60:c2:c0:2c:
                    cd:94:eb:1e:69:45:98:52:4e:fa:21:46:90:95:fe:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:79:32:A4:53:4C:80:92:0A:E9:60:BD:5E:49:0B:3B:B4:DC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1835390f-0ae8-375a-9ec7-5cbc5f2b3f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:d5:c8:b7:cf:26:bd:61:d9:9e:20:9d:6b:5e:88:31:ff:
         54:0f:c3:ae:1e:3f:4c:6e:f3:a4:53:97:3e:81:bd:69:4e:9b:
         65:31:88:17:45:75:d6:97:89:ca:a0:cd:e1:2c:af:86:9c:ac:
         fb:6d:c8:2d:f6:75:5a:a4:8c:3f:cf:fe:17:04:9a:cc:d5:27:
         28:ce:06:46:c1:7a:76:63:a1:ff:20:e0:9c:38:04:8f:49:20:
         98:61:2f:f6:da:a3:eb:48:3b:1b:f5:e6:38:b0:93:b4:58:ff:
         74:1b:b3:7a:49:cf:83:61:73:a6:5c:c8:d7:63:f2:ce:51:43:
         8c:e7:75:d7:a6:8d:65:dc:58:94:97:40:29:d9:81:3b:94:77:
         4e:04:7b:36:5a:d1:b2:e5:48:f1:2f:56:ce:c8:09:62:43:9d:
         41:bb:0d:ce:6e:b2:9f:b8:7a:7c:80:67:0c:1b:10:e5:f4:d3:
         7a:1e:6d:5a:b4:9c:58:be:4a:41:6b:40:0f:d1:c5:d1:e3:9b:
         47:87:57:87:25:93:e6:a5:57:95:5a:a1:67:71:ed:4b:84:42:
         05:b1:fc:ad:3f:90:27:95:c3:a3:fc:fe:e3:43:3c:31:7f:e6:
         87:76:78:d4:43:f3:a7:eb:9a:d6:a9:d1:0b:72:82:dd:47:c0:
         a2:2b:01:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLAHWv1UVLrbzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
MzFiZjRiZTUtMjEyZi00NDU5LTliNDYtMGU2MDNmNDdlZTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwIjSfUkMNkZGfpz7l6/V+SP8t7TvBgoZNqw
j0GXBiNHIoklYBctfnY7bZ7maDkUv4mkdXvJE1EhIUNFZ9eTpyn4RR1yskkXUWBo
/2/p/KKOq4H3Cadiy+Wy+jce37GQbivQCuLU4e21vIG9lfjt11XbC8Z6eVhKgupR
S9Klr78olIft5vmRKOZ3dbhwRwjMVT8jxO1zyYkkgsMiwr0zium7lcJP4H9ONtbf
ooUU6ZmWfhRTCuXOFNuHbmGx2fhivFl+T3C1+kHgGEhdtggxq2fHeX+KLndMKbnx
Nxs2Hkhw3W6T3ev1vhYzd2DCwCzNlOseaUWYUk76IUaQlf599wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObueTKkU0yAkgrpYL1eSQs7tNyBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTgzNTM5MGYtMGFlOC0z
NzVhLTllYzctNWNiYzVmMmIzZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyH1ci3zya9YdmeIJ1rXogx/1QPw64eP0xu86RTlz6BvWlOm2UxiBdF
ddaXicqgzeEsr4acrPttyC32dVqkjD/P/hcEmszVJyjOBkbBenZjof8g4Jw4BI9J
IJhhL/bao+tIOxv15jiwk7RY/3Qbs3pJz4Nhc6ZcyNdj8s5RQ4znddemjWXcWJSX
QCnZgTuUd04EezZa0bLlSPEvVs7ICWJDnUG7Dc5usp+4enyAZwwbEOX003oebVq0
nFi+SkFrQA/RxdHjm0eHV4clk+alV5VaoWdx7UuEQgWx/K0/kCeVw6P8/uNDPDF/
5od2eNRD86frmtap0Qtygt1HwKIrAT8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:15 2025 by rpki-client