Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa
File:                     5f996186-08c9-30f8-8f9d-644e0acea188.roa (raw, json)
Hash identifier:          5Hx3xAt4GtJe3PWI9E+dsEjY/6Br7YGXe1iqi5ex9Ec=
Subject key identifier:   4F:F4:9A:26:8D:89:B0:31:E8:B6:A9:3E:94:85:ED:2E:5E:35:11:DA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E348FA3676FB2081F2580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.198.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:34:8f:a3:67:6f:b2:08:1f:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=491afac5-e9f7-42fa-b0d7-91e2a9988ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:38:13:bf:c2:4b:a3:6c:0b:82:54:99:20:
                    8a:60:63:f3:c8:dc:c9:25:27:54:9f:81:4d:cf:54:
                    ee:22:58:f1:bb:6d:47:db:52:8d:a8:12:05:4e:db:
                    3f:a9:cc:90:af:0b:ba:e9:c7:85:eb:e1:66:99:08:
                    32:5c:fe:74:e6:26:d1:59:9b:f7:7f:18:aa:0c:e4:
                    ae:25:df:06:b9:f4:57:14:fb:95:00:17:ff:07:05:
                    c5:41:f7:e4:0f:c8:61:d2:ba:71:a0:d3:c4:14:06:
                    c3:79:cb:fb:b3:7c:a2:36:f4:58:48:01:18:b8:5e:
                    8e:f4:ec:c4:de:6b:79:95:bc:ee:ef:bf:9d:7a:6a:
                    10:97:f2:23:d5:15:88:d8:3f:a4:9c:92:4c:3c:9b:
                    45:9b:0a:1d:53:80:1b:fd:fe:b3:da:aa:96:b8:10:
                    c7:90:b0:51:d8:38:8a:18:e8:30:b8:1b:7a:7c:a7:
                    54:55:cb:04:75:69:59:a6:40:59:6f:fc:da:8c:eb:
                    8a:3b:84:c3:87:a1:6d:55:7e:c8:24:16:a8:b0:98:
                    cb:b9:47:35:e6:f1:83:ca:1c:0e:29:9c:d2:03:e7:
                    e2:5d:e1:48:ea:f6:7b:90:40:dd:a4:fa:e1:c7:f0:
                    20:8b:5f:14:1d:ad:b5:23:26:f1:c6:72:56:5a:78:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F4:9A:26:8D:89:B0:31:E8:B6:A9:3E:94:85:ED:2E:5E:35:11:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:4c:59:64:a9:ca:ac:14:f0:bd:2c:c2:38:3a:62:eb:88:30:
         ad:ad:dc:5f:86:fe:6e:a3:29:27:a8:80:36:b8:6f:51:41:c5:
         37:ce:50:68:fb:79:75:d5:14:db:d4:43:fc:25:03:38:e2:7c:
         95:a4:d7:72:52:30:86:ba:97:14:68:ef:38:ab:b5:6d:7c:58:
         58:a0:70:4b:97:82:2c:47:35:2b:36:41:a0:2e:e5:6e:ab:bc:
         fc:f9:ba:e8:9c:67:db:96:d2:38:9d:bd:c6:aa:89:dc:40:13:
         8f:d4:56:94:64:16:7c:aa:a7:e8:d8:08:19:73:6a:4b:af:c5:
         7b:6c:a6:e7:d6:aa:d3:83:ef:ef:de:8b:cd:70:19:2d:66:b5:
         5c:8b:b3:77:1d:53:13:00:c2:ce:3c:59:2e:54:37:84:cb:ed:
         f2:af:ed:17:92:df:f5:42:f2:7d:67:69:10:e5:32:91:37:6d:
         5f:ae:41:51:62:77:9e:23:32:6e:02:e9:09:59:0c:da:8a:9f:
         ea:16:60:8a:d2:5a:d7:d5:b0:4c:6f:aa:37:56:fc:b4:ea:71:
         ec:6a:9a:05:20:59:aa:6c:c5:12:b4:80:e4:8f:d3:ce:80:dd:
         e3:ce:21:34:97:d1:c2:91:96:b5:d7:d2:0c:b3:11:a4:40:69:
         b3:35:18:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPjSPo2dvsggfJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
NDkxYWZhYzUtZTlmNy00MmZhLWIwZDctOTFlMmE5OTg4Y2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlI4E7/CS6NsC4JUmSCKYGPzyNzJJSdUn4FN
z1TuIljxu21H21KNqBIFTts/qcyQrwu66ceF6+FmmQgyXP505ibRWZv3fxiqDOSu
Jd8GufRXFPuVABf/BwXFQffkD8hh0rpxoNPEFAbDecv7s3yiNvRYSAEYuF6O9OzE
3mt5lbzu77+demoQl/Ij1RWI2D+knJJMPJtFmwodU4Ab/f6z2qqWuBDHkLBR2DiK
GOgwuBt6fKdUVcsEdWlZpkBZb/zajOuKO4TDh6FtVX7IJBaosJjLuUc15vGDyhwO
KZzSA+fiXeFI6vZ7kEDdpPrhx/Agi18UHa21IybxxnJWWnhTGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/0miaNibAx6LapPpSF7S5eNRHaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY5OTYxODYtMDhjOS0z
MGY4LThmOWQtNjQ0ZTBhY2VhMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALhMWWSpyqwU8L0swjg6YuuIMK2t3F+G/m6jKSeogDa4b1FBxTfOUGj7
eXXVFNvUQ/wlAzjifJWk13JSMIa6lxRo7zirtW18WFigcEuXgixHNSs2QaAu5W6r
vPz5uuicZ9uW0jidvcaqidxAE4/UVpRkFnyqp+jYCBlzakuvxXtspufWqtOD7+/e
i81wGS1mtVyLs3cdUxMAws48WS5UN4TL7fKv7ReS3/VC8n1naRDlMpE3bV+uQVFi
d54jMm4C6QlZDNqKn+oWYIrSWtfVsExvqjdW/LTqcexqmgUgWapsxRK0gOSP086A
3ePOITSX0cKRlrXX0gyzEaRAabM1GJo=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:04 2024 by rpki-client on console-fra.rpki-client.org