Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37ffdb04-7b66-334b-a71a-63a22de03f99.roa
File:                     37ffdb04-7b66-334b-a71a-63a22de03f99.roa (raw, json)
Hash identifier:          h0pOwLaWX0zoZSfErPqWpakV/8UoGzC/h248so+/Srs=
Subject key identifier:   EB:95:ED:8D:31:53:C4:5F:F6:86:9F:D4:46:6D:68:82:D2:95:29:9A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DB52F24E27D8C7B6F6B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37ffdb04-7b66-334b-a71a-63a22de03f99.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:b5:2f:24:e2:7d:8c:7b:6f:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8348783c-01a4-4297-bf40-11aeae658d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:d1:25:b8:cb:76:3e:1b:ab:20:34:99:d8:
                    e6:0b:5e:d8:9a:6d:89:82:90:6d:38:1c:93:41:4e:
                    71:b0:56:a8:be:e7:21:9f:c0:c0:e8:b7:69:09:10:
                    76:d2:c0:12:b2:c6:5f:0d:77:1e:bd:c3:4c:58:af:
                    37:16:f1:df:df:8d:46:52:04:39:f4:d1:de:01:91:
                    34:c8:9e:10:08:e7:76:be:68:5f:96:0e:53:80:f7:
                    84:30:54:bd:d7:a6:1d:e9:41:4d:94:0e:70:5b:3d:
                    b6:02:fc:62:d2:c1:84:4e:57:6e:b7:a5:c0:06:db:
                    38:29:fc:f1:ea:2a:a1:d9:01:21:aa:84:d4:f8:8f:
                    d9:15:5a:20:81:b5:df:d5:1a:68:07:ea:d3:c2:96:
                    6e:be:4c:3b:ae:93:56:cc:2f:e7:98:a0:b6:04:c1:
                    0d:3d:28:0d:9f:7a:7e:c2:d9:dd:c1:c7:e0:84:ef:
                    27:f2:be:a0:31:11:c5:c9:0f:93:bb:17:2a:29:99:
                    64:89:0d:a0:98:fa:ee:f4:74:26:92:b1:bf:85:ea:
                    87:c7:65:13:ba:97:f6:8d:45:54:83:21:36:3c:0e:
                    6e:19:07:88:eb:c3:fa:39:28:7c:39:fa:52:39:f2:
                    4f:9b:2a:fc:82:2f:43:e0:f8:e1:d1:f1:3d:c6:94:
                    71:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:95:ED:8D:31:53:C4:5F:F6:86:9F:D4:46:6D:68:82:D2:95:29:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37ffdb04-7b66-334b-a71a-63a22de03f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c1:3d:02:ef:10:58:49:64:96:5a:7a:1f:15:bf:e0:4a:b7:
         44:db:50:08:0c:ce:f3:a6:c3:ce:33:06:2b:11:9e:49:fa:19:
         dc:21:89:98:bc:5b:a1:ff:a2:fb:71:33:5f:62:1d:e5:df:eb:
         35:d7:40:ce:0c:fd:ba:6f:81:41:d4:56:c2:10:d7:6a:00:26:
         3d:10:7d:67:bb:c9:b6:cd:5f:c6:cd:ef:59:80:f3:af:ad:2d:
         33:be:e3:06:d5:8f:53:5c:ae:45:9c:b8:ef:88:e8:90:8e:38:
         3a:aa:b5:16:b0:3e:0c:78:ae:90:d7:83:f2:41:f2:82:0c:55:
         ee:81:2a:58:61:7a:31:fc:73:52:55:71:ec:6d:70:2d:5d:41:
         4e:2a:8e:26:0e:53:11:e1:fb:33:14:f2:92:53:4a:9f:55:04:
         5f:3e:3c:f6:48:51:52:31:b5:28:1c:d1:e0:73:70:7b:5c:18:
         e4:62:66:93:e2:3e:89:12:c3:f2:64:22:6f:b1:33:a5:78:d1:
         c9:41:94:54:2c:5d:cd:fb:86:4c:57:38:ee:87:69:2b:16:5f:
         1b:12:a0:2d:b7:d5:6a:71:53:4f:7d:1a:ab:68:e9:1b:d3:61:
         ee:3a:71:0a:c4:53:32:19:f3:3d:ff:22:cf:32:80:dd:6d:9f:
         9c:49:17:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPbUvJOJ9jHtva0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ODM0ODc4M2MtMDFhNC00Mjk3LWJmNDAtMTFhZWFlNjU4ZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W7RJbjLdj4bqyA0mdjmC17Ymm2JgpBtOByT
QU5xsFaovuchn8DA6LdpCRB20sASssZfDXcevcNMWK83FvHf341GUgQ59NHeAZE0
yJ4QCOd2vmhflg5TgPeEMFS916Yd6UFNlA5wWz22Avxi0sGETldut6XABts4Kfzx
6iqh2QEhqoTU+I/ZFVoggbXf1RpoB+rTwpZuvkw7rpNWzC/nmKC2BMENPSgNn3p+
wtndwcfghO8n8r6gMRHFyQ+TuxcqKZlkiQ2gmPru9HQmkrG/heqHx2UTupf2jUVU
gyE2PA5uGQeI68P6OSh8OfpSOfJPmyr8gi9D4Pjh0fE9xpRxuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuV7Y0xU8Rf9oaf1EZtaILSlSmaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzdmZmRiMDQtN2I2Ni0z
MzRiLWE3MWEtNjNhMjJkZTAzZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDBPQLvEFhJZJZaeh8Vv+BKt0TbUAgMzvOmw84zBisRnkn6GdwhiZi8
W6H/ovtxM19iHeXf6zXXQM4M/bpvgUHUVsIQ12oAJj0QfWe7ybbNX8bN71mA86+t
LTO+4wbVj1NcrkWcuO+I6JCOODqqtRawPgx4rpDXg/JB8oIMVe6BKlhhejH8c1JV
cextcC1dQU4qjiYOUxHh+zMU8pJTSp9VBF8+PPZIUVIxtSgc0eBzcHtcGORiZpPi
PokSw/JkIm+xM6V40clBlFQsXc37hkxXOO6HaSsWXxsSoC231WpxU099Gqto6RvT
Ye46cQrEUzIZ8z3/Is8ygN1tn5xJF3w=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org