Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa
File:                     1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa (raw, json)
Hash identifier:          auyq58TjafKBtXzTmUcgXHv3Jsjan4lJw3vhTzknftk=
Subject key identifier:   C2:EA:C8:CE:9E:1C:B9:7F:ED:85:16:CA:B0:4E:D6:06:D9:78:47:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5813993533FEB15D4234BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:39:93:53:3f:eb:15:d4:23:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e151d28a-1725-4a07-96d1-e93393a53707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:11:f4:00:83:67:9b:2f:f3:d1:ee:51:04:
                    78:2c:b0:51:fb:39:cf:05:94:62:3b:02:b5:d3:aa:
                    2d:4e:48:93:81:e2:ec:8c:53:e7:b4:0b:25:24:d5:
                    ba:c2:52:4c:a9:af:ad:02:74:5c:41:5c:c0:ef:e8:
                    eb:f2:d6:30:8f:06:12:ba:ef:d2:3b:72:ef:af:4e:
                    6c:32:bf:1d:28:fe:33:67:76:95:4f:a9:6e:af:44:
                    b5:33:94:08:c3:24:17:a5:c5:8f:af:3f:be:35:3c:
                    d4:0a:71:fa:6d:e7:5e:6d:28:ec:95:12:49:c3:83:
                    72:bf:ab:df:d0:2d:17:21:99:6a:cb:96:7a:90:be:
                    95:a0:7f:84:bd:32:49:56:0b:a5:24:bc:c1:ad:c1:
                    1f:48:1a:94:f5:4f:75:be:44:4d:7c:06:39:b7:8f:
                    9e:c3:4d:f5:d2:c7:7e:06:c4:25:7e:34:50:47:7e:
                    9b:76:3a:9f:8a:7f:0b:c9:bc:d3:54:fb:a9:71:b2:
                    35:a1:a6:c9:57:a8:1b:aa:dd:02:2e:8d:f0:1c:9b:
                    e7:08:5a:bb:3b:c1:0c:43:fd:d1:87:66:58:39:2e:
                    28:43:35:b3:71:f6:31:7f:0d:31:59:4f:3a:6f:87:
                    3b:62:cc:9f:f8:b9:a1:6e:99:11:0b:fa:9f:15:2d:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:C8:CE:9E:1C:B9:7F:ED:85:16:CA:B0:4E:D6:06:D9:78:47:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:e3:4c:cf:6a:4d:86:39:db:d2:fb:3c:e6:a4:da:84:70:
         b6:cb:70:ad:41:d7:c4:78:58:48:c5:ca:99:68:fd:20:2e:5f:
         f9:aa:6f:d7:78:21:2d:8e:49:81:66:e9:29:3b:b0:12:39:6f:
         6c:21:20:d7:15:9d:2b:fe:15:c8:ae:a2:e7:89:9d:24:ee:53:
         c6:39:be:41:34:2d:90:5c:5c:a9:e6:f0:64:65:17:b1:05:14:
         29:d9:a4:e1:40:98:27:73:1a:34:cb:80:d5:18:bb:ae:36:63:
         56:d8:d9:9f:b1:3a:11:75:52:a1:10:bb:74:e8:8f:43:b8:a6:
         5c:a6:fe:cd:92:37:dd:1f:45:34:2b:ac:09:4c:bc:02:60:7f:
         2b:87:83:1c:c7:cb:05:fb:cb:98:d4:e0:04:49:da:0a:73:25:
         f4:23:fd:64:ca:82:c1:db:7a:c1:83:49:ec:73:c5:a9:35:d0:
         05:2f:51:95:13:0c:05:71:6b:b6:08:1b:09:59:6d:0b:a2:35:
         a6:54:a6:6b:9d:4f:8a:d7:29:20:bf:fc:1e:37:a5:30:34:f9:
         ff:41:44:4e:fd:9a:9a:38:07:ef:1d:ee:67:79:b7:5c:50:9b:
         f1:1f:67:0a:cb:61:2a:96:c9:98:7f:68:43:c3:63:8d:66:97:
         f8:fa:32:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTmTUz/rFdQjS8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTE1MWQyOGEtMTcyNS00YTA3LTk2ZDEtZTkzMzkzYTUzNzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+AR9ACDZ5sv89HuUQR4LLBR+znPBZRiOwK1
06otTkiTgeLsjFPntAslJNW6wlJMqa+tAnRcQVzA7+jr8tYwjwYSuu/SO3Lvr05s
Mr8dKP4zZ3aVT6lur0S1M5QIwyQXpcWPrz++NTzUCnH6bedebSjslRJJw4Nyv6vf
0C0XIZlqy5Z6kL6VoH+EvTJJVgulJLzBrcEfSBqU9U91vkRNfAY5t4+ew0310sd+
BsQlfjRQR36bdjqfin8LybzTVPupcbI1oabJV6gbqt0CLo3wHJvnCFq7O8EMQ/3R
h2ZYOS4oQzWzcfYxfw0xWU86b4c7Ysyf+LmhbpkRC/qfFS3IxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLqyM6eHLl/7YUWyrBO1gbZeEfWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWZiYTQwNmQtODhhMC0z
MjY1LWJhZWUtM2I3ZTZiY2NjYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8V+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+M40zPak2GOdvS+zzmpNqEcLbLcK1B18R4WEjFyplo/SAuX/mqb9d4
IS2OSYFm6Sk7sBI5b2whINcVnSv+FciuoueJnSTuU8Y5vkE0LZBcXKnm8GRlF7EF
FCnZpOFAmCdzGjTLgNUYu642Y1bY2Z+xOhF1UqEQu3Toj0O4plym/s2SN90fRTQr
rAlMvAJgfyuHgxzHywX7y5jU4ARJ2gpzJfQj/WTKgsHbesGDSexzxak10AUvUZUT
DAVxa7YIGwlZbQuiNaZUpmudT4rXKSC//B43pTA0+f9BRE79mpo4B+8d7md5t1xQ
m/EfZwrLYSqWyZh/aEPDY41ml/j6Mpw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:32:49 2025 by rpki-client