Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54146332-c765-3c5c-97d2-9ddda152e44d.roa
File:                     54146332-c765-3c5c-97d2-9ddda152e44d.roa (raw, json)
Hash identifier:          gUOVDCokmvi9xThgxag9rV3dz4u52xyz8MT0x7deC2M=
Subject key identifier:   78:7C:57:6B:75:13:C0:FA:A1:41:E2:EC:40:FC:7C:76:43:E8:AD:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C01479C4A45048CF94C4
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54146332-c765-3c5c-97d2-9ddda152e44d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c0:14:79:c4:a4:50:48:cf:94:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=645fb420-951b-41c4-a7c0-cf28bc02eef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:db:8c:27:56:db:98:96:72:7b:1a:e7:c7:
                    17:b5:0b:92:28:a1:1b:5c:c4:c5:c1:d2:ac:b9:7c:
                    68:a3:be:f0:dc:24:df:93:40:75:de:ef:f8:0a:3d:
                    a4:fc:8d:d8:e1:59:77:30:38:f3:08:b6:f3:52:e8:
                    0b:3d:7d:97:02:b1:ad:a8:4e:5e:4e:e7:27:5a:cc:
                    c8:01:6a:bc:0c:21:b6:09:76:21:5e:4d:c1:da:5b:
                    ad:0f:7c:4c:f5:e6:15:39:66:fc:bc:42:47:49:12:
                    77:ba:26:26:c9:bd:a4:ac:a3:cf:ab:1a:c0:52:0c:
                    73:71:f0:af:01:18:b6:64:56:d8:40:44:e4:7c:d4:
                    1f:ca:f6:7b:6b:98:3f:86:35:cc:df:bd:c1:9e:1b:
                    f0:87:50:dc:3d:77:f7:c1:ca:49:bd:30:66:c6:47:
                    64:01:aa:b4:dd:04:70:07:76:2f:47:e5:d5:83:44:
                    f8:55:75:38:0b:00:b6:a4:0f:26:ae:e1:91:59:20:
                    e1:9c:ca:73:98:f0:24:46:d5:5a:52:c2:9c:26:71:
                    79:a5:32:e0:57:18:2d:f4:8c:ba:1a:0c:bd:61:d7:
                    66:7b:30:ee:1f:d1:24:e3:77:cc:c0:b5:be:e5:99:
                    48:00:2e:ee:ab:51:26:91:db:ec:ec:f4:9b:eb:75:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7C:57:6B:75:13:C0:FA:A1:41:E2:EC:40:FC:7C:76:43:E8:AD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54146332-c765-3c5c-97d2-9ddda152e44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:ab:df:38:5c:62:e5:03:d7:92:a7:59:a6:37:26:5e:d6:
         26:44:5e:70:dd:cd:ab:7b:45:f5:c1:4a:4b:f0:78:7b:a0:df:
         b6:2f:da:1e:7c:34:fb:52:b9:be:98:56:d5:2a:22:6d:f0:d9:
         d5:db:e0:ee:65:60:70:1f:d1:b9:b8:98:e9:fc:a6:bf:70:e1:
         0c:32:e7:cd:ab:9d:85:d8:02:b5:8f:3a:0c:6d:0a:68:96:ce:
         7e:cd:c7:75:b3:d8:3c:e1:1c:e8:12:da:16:0a:d9:dd:9d:5e:
         04:ad:84:36:bb:33:c1:80:75:dc:49:24:e9:33:63:23:f4:ef:
         b5:71:86:b8:b2:f3:1b:11:c3:9a:82:19:c2:5d:c9:7f:f6:2b:
         dd:3c:c4:e2:b7:b2:d6:3a:70:37:e2:f0:02:fe:d9:1f:a8:2c:
         63:23:da:db:da:8a:f5:3b:6e:1e:59:0b:71:e9:2d:85:e9:d6:
         74:dd:f3:30:98:11:82:19:52:07:0c:52:36:5c:36:c3:00:da:
         df:36:fc:4d:e1:70:a9:80:82:70:eb:f7:78:c4:17:94:8b:b3:
         7a:10:fa:c8:07:d2:fa:a6:7d:b3:c0:1d:64:30:7a:7b:3d:b1:
         72:c8:8e:f9:3a:bb:fb:81:36:39:b9:69:59:1f:28:35:eb:0e:
         89:58:da:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcAUecSkUEjPlMQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjQ1ZmI0MjAtOTUxYi00MWM0LWE3YzAtY2YyOGJjMDJlZWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7rbjCdW25iWcnsa58cXtQuSKKEbXMTFwdKs
uXxoo77w3CTfk0B13u/4Cj2k/I3Y4Vl3MDjzCLbzUugLPX2XArGtqE5eTucnWszI
AWq8DCG2CXYhXk3B2lutD3xM9eYVOWb8vEJHSRJ3uiYmyb2krKPPqxrAUgxzcfCv
ARi2ZFbYQETkfNQfyvZ7a5g/hjXM373Bnhvwh1DcPXf3wcpJvTBmxkdkAaq03QRw
B3YvR+XVg0T4VXU4CwC2pA8mruGRWSDhnMpzmPAkRtVaUsKcJnF5pTLgVxgt9Iy6
Ggy9YddmezDuH9Ek43fMwLW+5ZlIAC7uq1Emkdvs7PSb63XACwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHh8V2t1E8D6oUHi7ED8fHZD6K0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTQxNDYzMzItYzc2NS0z
YzVjLTk3ZDItOWRkZGExNTJlNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWmq984XGLlA9eSp1mmNyZe1iZEXnDdzat7RfXBSkvweHug37Yv2h58
NPtSub6YVtUqIm3w2dXb4O5lYHAf0bm4mOn8pr9w4Qwy582rnYXYArWPOgxtCmiW
zn7Nx3Wz2DzhHOgS2hYK2d2dXgSthDa7M8GAddxJJOkzYyP077Vxhriy8xsRw5qC
GcJdyX/2K908xOK3stY6cDfi8AL+2R+oLGMj2tvaivU7bh5ZC3HpLYXp1nTd8zCY
EYIZUgcMUjZcNsMA2t82/E3hcKmAgnDr93jEF5SLs3oQ+sgH0vqmfbPAHWQwens9
sXLIjvk6u/uBNjm5aVkfKDXrDolY2nc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:00 2025 by rpki-client