Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa
File:                     8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa (raw, json)
Hash identifier:          wiBaRLVPQrCe0LabMH2OooSazOPHtFOXJSzs6X0Ssuw=
Subject key identifier:   87:D1:FB:C7:6F:65:CA:79:BA:91:FA:A1:BC:D8:9C:F1:AB:46:8E:B8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF12CE5EE283320E59C88
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f1:2c:e5:ee:28:33:20:e5:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a200a78b-86ee-4928-99b1-cd903a01b2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:8d:0d:de:65:f9:a3:00:ca:b2:ca:84:f2:
                    f9:f9:60:44:a7:61:68:84:0b:df:10:3c:94:f3:35:
                    83:14:54:52:21:60:59:9c:1b:96:9c:29:e5:e1:c0:
                    9b:17:31:33:4d:ba:6b:ba:d0:5b:e3:7a:4a:f8:9e:
                    bc:0b:99:17:2b:ea:45:c2:af:77:9b:54:06:a2:57:
                    26:df:ff:3f:d2:90:9d:9f:f4:5d:26:76:ee:4d:e0:
                    46:4c:5d:e5:36:76:1c:53:7a:60:37:b2:22:20:56:
                    de:e9:a5:30:1e:98:f5:df:f6:4c:93:1d:17:47:08:
                    93:46:24:f9:32:2c:ac:ee:8f:ac:30:54:87:7b:2f:
                    43:f2:57:d1:26:f2:9e:a3:3d:85:9a:be:8f:ad:3d:
                    b5:16:71:4f:15:51:8a:97:84:6f:05:c2:13:86:19:
                    e6:9d:3f:8c:45:d2:da:ff:13:92:f9:48:ab:d7:8a:
                    bf:dc:7c:5c:fc:dd:6b:1e:c3:3f:9e:2c:c4:f9:c9:
                    de:e8:1e:63:97:ae:76:4e:39:0f:64:71:45:30:23:
                    e2:c6:61:db:dd:de:d1:a2:d4:f8:b1:fc:5a:dd:2c:
                    b9:6c:81:fd:19:60:80:60:b8:6b:da:3a:9b:5b:95:
                    4e:3f:d8:4d:01:28:25:18:e6:b6:9e:19:c2:77:72:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D1:FB:C7:6F:65:CA:79:BA:91:FA:A1:BC:D8:9C:F1:AB:46:8E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:58:e5:3d:cc:02:81:b7:af:5e:b0:77:29:7b:13:62:d3:
         0a:23:41:c9:5a:f7:f2:29:24:5c:96:f3:b3:ea:d3:f7:ae:4c:
         af:21:15:ad:2e:87:44:59:24:f9:79:19:b0:fc:9d:20:79:d1:
         13:f2:7c:76:99:30:be:f5:f1:e3:68:c1:92:fe:b6:eb:6c:9c:
         62:d5:09:44:10:a9:33:56:bb:25:b2:18:ce:d1:bf:fc:b5:4a:
         7e:bf:6e:8d:05:bb:6b:e4:35:24:8f:83:93:d3:18:bd:b2:af:
         3c:16:e2:69:cf:05:a9:6a:35:6b:7e:a0:7d:2c:af:fa:1b:a4:
         f3:26:36:2f:93:be:13:2a:33:8f:cd:dc:8f:b0:ef:45:78:16:
         69:a0:99:be:03:61:20:3c:b0:60:9c:9b:da:31:07:2b:6c:a0:
         cb:99:33:97:9e:09:fb:56:02:ca:28:38:9e:f1:3d:7c:07:ad:
         f5:d4:5b:c8:23:98:d8:52:0a:b7:06:e1:ab:2f:75:01:26:4d:
         40:ba:f9:bf:2d:31:50:df:e7:f6:58:89:a5:4a:15:01:5b:5c:
         bb:d9:7e:a8:00:58:ff:8b:64:98:0c:c0:64:25:8f:01:0f:83:
         73:9b:b2:6e:30:bd:10:c8:1f:ac:9f:68:48:15:c6:ee:71:85:
         b9:72:f9:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKvEs5e4oMyDlnIgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YTIwMGE3OGItODZlZS00OTI4LTk5YjEtY2Q5MDNhMDFiMmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugaNDd5l+aMAyrLKhPL5+WBEp2FohAvfEDyU
8zWDFFRSIWBZnBuWnCnl4cCbFzEzTbprutBb43pK+J68C5kXK+pFwq93m1QGolcm
3/8/0pCdn/RdJnbuTeBGTF3lNnYcU3pgN7IiIFbe6aUwHpj13/ZMkx0XRwiTRiT5
Miys7o+sMFSHey9D8lfRJvKeoz2Fmr6PrT21FnFPFVGKl4RvBcIThhnmnT+MRdLa
/xOS+Uir14q/3Hxc/N1rHsM/nizE+cne6B5jl652TjkPZHFFMCPixmHb3d7RotT4
sfxa3Sy5bIH9GWCAYLhr2jqbW5VOP9hNASglGOa2nhnCd3LetwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfR+8dvZcp5upH6obzYnPGrRo64MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODgxNGZhNjUtN2I4OC0z
M2IzLTgwNTMtY2E3ZWE5NmUwYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQoWOU9zAKBt69esHcpexNi0wojQcla9/IpJFyW87Pq0/euTK8hFa0u
h0RZJPl5GbD8nSB50RPyfHaZML718eNowZL+tutsnGLVCUQQqTNWuyWyGM7Rv/y1
Sn6/bo0Fu2vkNSSPg5PTGL2yrzwW4mnPBalqNWt+oH0sr/obpPMmNi+TvhMqM4/N
3I+w70V4Fmmgmb4DYSA8sGCcm9oxBytsoMuZM5eeCftWAsooOJ7xPXwHrfXUW8gj
mNhSCrcG4asvdQEmTUC6+b8tMVDf5/ZYiaVKFQFbXLvZfqgAWP+LZJgMwGQljwEP
g3Obsm4wvRDIH6yfaEgVxu5xhbly+d4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:08 2024 by rpki-client on console-ams.rpki-client.org