Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa
File:                     6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa (raw, json)
Hash identifier:          9616nZYNhkNxfv6Sy5gqD/2O6YqbPkDxVseQHnN+ETc=
Subject key identifier:   55:15:DF:90:93:89:C2:F3:AC:05:4D:2E:F1:63:17:2B:AE:62:6F:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2CF9CCE5E57171FBB7C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2c:f9:cc:e5:e5:71:71:fb:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1c5075de-fb7f-4ee7-81a1-2011b29d3aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:5c:27:53:c2:35:c8:1d:10:bf:68:74:38:
                    38:3a:8f:e3:08:bf:73:8c:c3:41:0a:9f:81:c3:0e:
                    10:87:23:25:ee:f2:84:15:7f:5c:b6:6a:6f:fa:ef:
                    69:65:1d:96:33:32:af:be:8c:c4:15:91:c6:99:b4:
                    e4:db:fa:7d:83:d5:e1:18:eb:54:8c:21:0c:2f:e5:
                    7d:8f:a8:10:79:7b:cc:e1:f8:0b:b6:d9:51:6a:13:
                    9e:4d:49:45:ee:85:b2:8f:b6:53:3c:ad:04:32:1f:
                    02:c8:1a:5d:60:76:25:cb:65:0c:c5:0a:37:a8:52:
                    22:8f:2f:43:11:f0:da:83:ec:3b:4b:11:24:bb:34:
                    59:77:e5:d5:a9:3c:b6:c6:a2:f3:f6:c5:c6:89:77:
                    89:c4:4e:18:a6:fd:e7:2a:9d:53:14:65:33:62:7e:
                    b4:bd:b8:db:b2:2e:25:f3:be:c5:db:2d:f6:f8:e3:
                    ab:34:0f:f4:a2:b1:9b:21:aa:31:ce:22:d5:a7:e9:
                    13:8c:53:f4:c7:ac:89:ba:69:ae:03:a1:8e:72:68:
                    bd:b7:8b:8b:15:96:00:00:eb:68:13:5a:0a:f1:eb:
                    8d:a4:88:94:5a:2d:b2:95:6d:60:1b:82:35:16:4e:
                    8a:bf:c6:f3:20:af:16:16:bf:96:f4:b7:01:2b:db:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:15:DF:90:93:89:C2:F3:AC:05:4D:2E:F1:63:17:2B:AE:62:6F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:13:c7:f4:da:5f:a2:a4:7b:ef:11:39:bf:2b:59:f0:5d:5e:
         77:82:88:ba:54:50:de:08:7a:84:40:64:43:b5:16:7a:28:ee:
         eb:56:47:d3:c2:35:44:ac:27:29:0b:e8:89:2f:17:a2:81:b4:
         c3:f7:05:01:1c:0f:f2:3a:f8:8b:60:06:82:f1:f6:ca:d4:7a:
         c2:94:eb:b4:09:40:6e:de:2b:bd:40:e0:8d:da:3c:c2:62:59:
         e1:bf:ad:62:d6:2e:0b:37:03:b4:c4:cc:86:05:61:d4:dc:37:
         2c:2c:c7:55:f6:28:8e:a0:62:af:09:c5:b2:e5:6b:11:45:5e:
         9b:ef:ff:ec:32:99:7a:2e:26:b6:1e:b4:69:9c:ed:dc:0b:45:
         3d:01:1b:27:3e:ba:6f:fc:f2:ee:47:e6:24:23:fc:9f:0e:3d:
         a5:f3:64:33:08:c7:29:d9:a3:23:76:2e:05:77:26:63:93:ff:
         a4:35:45:b2:cd:6a:c7:9c:84:a6:42:02:0a:2e:d4:43:fc:ad:
         53:93:b1:a1:bf:11:f0:39:d6:bb:e5:9e:d4:50:63:de:bc:01:
         a2:d0:bf:81:05:a1:8b:c7:c5:c8:d1:52:52:33:d6:a9:36:15:
         d7:c5:31:43:42:13:58:d6:23:a6:8a:0b:3e:86:ab:70:33:e2:
         b4:12:ce:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPiz5zOXlcXH7t8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
MWM1MDc1ZGUtZmI3Zi00ZWU3LTgxYTEtMjAxMWIyOWQzYWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYlcJ1PCNcgdEL9odDg4Oo/jCL9zjMNBCp+B
ww4QhyMl7vKEFX9ctmpv+u9pZR2WMzKvvozEFZHGmbTk2/p9g9XhGOtUjCEML+V9
j6gQeXvM4fgLttlRahOeTUlF7oWyj7ZTPK0EMh8CyBpdYHYly2UMxQo3qFIijy9D
EfDag+w7SxEkuzRZd+XVqTy2xqLz9sXGiXeJxE4Ypv3nKp1TFGUzYn60vbjbsi4l
877F2y32+OOrNA/0orGbIaoxziLVp+kTjFP0x6yJummuA6GOcmi9t4uLFZYAAOto
E1oK8euNpIiUWi2ylW1gG4I1Fk6Kv8bzIK8WFr+W9LcBK9sScQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUV35CTicLzrAVNLvFjFyuuYm9dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmJmNzViODktNGNlMC0z
ZDFkLTk1YzMtMmJhYjMxODJjNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYTx/TaX6Kke+8ROb8rWfBdXneCiLpUUN4IeoRAZEO1Fnoo7utWR9PC
NUSsJykL6IkvF6KBtMP3BQEcD/I6+ItgBoLx9srUesKU67QJQG7eK71A4I3aPMJi
WeG/rWLWLgs3A7TEzIYFYdTcNywsx1X2KI6gYq8JxbLlaxFFXpvv/+wymXouJrYe
tGmc7dwLRT0BGyc+um/88u5H5iQj/J8OPaXzZDMIxynZoyN2LgV3JmOT/6Q1RbLN
asechKZCAgou1EP8rVOTsaG/EfA51rvlntRQY968AaLQv4EFoYvHxcjRUlIz1qk2
FdfFMUNCE1jWI6aKCz6Gq3Az4rQSzuo=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org