Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa5104e4-39cb-313d-bee2-af57ed7c9645.roa
File:                     aa5104e4-39cb-313d-bee2-af57ed7c9645.roa (raw, json)
Hash identifier:          SQxJifP809428atheaavMY1uG3Z0n2jJ8lvo8oMJoHo=
Subject key identifier:   D6:14:AB:E8:C9:CF:E7:94:53:86:CE:80:D7:C8:0C:33:2D:55:0C:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2F43D952ADB29D372C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa5104e4-39cb-313d-bee2-af57ed7c9645.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2f:43:d9:52:ad:b2:9d:37:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ea65d89e-b8cc-4117-b82b-8b1bc7f60c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:d5:3f:32:58:9c:7d:23:c2:82:b0:58:b7:
                    56:e5:d3:fa:02:da:95:25:ba:ff:5c:32:cd:24:d0:
                    00:d7:19:d3:c0:5d:0e:e3:63:7f:eb:8e:73:59:a2:
                    ef:a3:3f:13:9c:70:b2:3e:44:55:89:60:ea:24:7a:
                    2e:17:18:5f:12:a6:da:4f:54:9c:54:57:53:b5:8f:
                    8a:36:e6:3b:0f:8a:7d:c3:90:3b:8c:05:50:0b:48:
                    eb:75:fa:ca:01:eb:98:46:ed:47:e7:4a:65:88:00:
                    18:9b:79:39:e2:eb:1f:9a:19:53:34:6d:b4:86:74:
                    6e:93:f4:3b:20:3d:2d:b3:d8:05:b1:62:5f:82:9b:
                    42:00:0c:66:be:93:4d:25:9b:1e:8a:e7:d3:29:6d:
                    7b:da:ee:04:28:9c:f7:4c:d3:09:1d:7d:1d:5f:3a:
                    aa:55:41:e8:c3:35:52:7d:54:a6:2a:b7:c8:26:e2:
                    44:d2:ba:77:e2:a3:bf:96:c3:10:16:8e:f8:cb:77:
                    02:5a:0c:f2:97:1e:c2:64:40:cc:3f:eb:0a:13:e0:
                    04:af:e7:00:92:10:4b:3c:51:20:2b:b7:cd:f2:8e:
                    87:d7:20:6b:c6:a8:a1:0f:56:45:dd:00:2e:45:70:
                    e1:9a:8c:aa:5b:f1:e1:2c:f7:ad:f0:a1:0e:8f:a8:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:AB:E8:C9:CF:E7:94:53:86:CE:80:D7:C8:0C:33:2D:55:0C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa5104e4-39cb-313d-bee2-af57ed7c9645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:e3:d0:dc:f7:b2:e5:0c:ec:9c:ae:f9:33:85:e4:7c:1f:6d:
         aa:94:18:ec:1b:98:68:97:64:8d:97:62:9c:f5:27:d1:21:59:
         c8:c1:03:c1:38:d5:04:11:cd:26:fd:e9:1e:dd:44:96:26:68:
         35:b9:47:29:18:38:39:1e:f7:8e:b5:8a:a1:21:cc:40:bf:4b:
         6a:ec:08:08:72:76:83:7b:33:c5:e7:3b:10:89:a2:1f:d4:2a:
         51:16:80:c4:31:d3:3d:a5:10:e4:24:4d:4a:20:52:63:d2:5d:
         67:a7:ba:a2:20:1c:1f:c0:76:f9:22:ea:33:92:5e:5c:3c:3b:
         f1:2a:80:ec:22:03:6e:83:08:6a:ce:bb:d4:f3:63:99:b9:f3:
         95:9b:e3:67:42:75:ff:9a:7d:ba:64:d2:b4:f8:4a:d7:21:b8:
         0b:93:a1:c6:25:c0:ea:fb:53:70:18:7a:44:43:3e:75:f8:c5:
         61:cd:6c:fe:32:6c:3a:f2:b5:31:00:55:2c:58:92:b0:07:31:
         90:ad:d4:f1:e3:d1:ce:c0:f9:a2:9d:db:1b:3a:7d:46:60:9c:
         74:9e:dd:c7:1a:e8:a2:66:da:ff:db:bd:01:ad:07:60:85:bc:
         a2:ba:66:8c:0a:f2:95:df:a1:46:28:01:64:b2:4a:76:ca:99:
         9e:bf:e4:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPi9D2VKtsp03LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZWE2NWQ4OWUtYjhjYy00MTE3LWI4MmItOGIxYmM3ZjYwYzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7jVPzJYnH0jwoKwWLdW5dP6AtqVJbr/XDLN
JNAA1xnTwF0O42N/645zWaLvoz8TnHCyPkRViWDqJHouFxhfEqbaT1ScVFdTtY+K
NuY7D4p9w5A7jAVQC0jrdfrKAeuYRu1H50pliAAYm3k54usfmhlTNG20hnRuk/Q7
ID0ts9gFsWJfgptCAAxmvpNNJZseiufTKW172u4EKJz3TNMJHX0dXzqqVUHowzVS
fVSmKrfIJuJE0rp34qO/lsMQFo74y3cCWgzylx7CZEDMP+sKE+AEr+cAkhBLPFEg
K7fN8o6H1yBrxqihD1ZF3QAuRXDhmoyqW/HhLPet8KEOj6jE5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYUq+jJz+eUU4bOgNfIDDMtVQzfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE1MTA0ZTQtMzljYi0z
MTNkLWJlZTItYWY1N2VkN2M5NjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMzj0Nz3suUM7Jyu+TOF5HwfbaqUGOwbmGiXZI2XYpz1J9EhWcjBA8E4
1QQRzSb96R7dRJYmaDW5RykYODke9461iqEhzEC/S2rsCAhydoN7M8XnOxCJoh/U
KlEWgMQx0z2lEOQkTUogUmPSXWenuqIgHB/Advki6jOSXlw8O/EqgOwiA26DCGrO
u9TzY5m585Wb42dCdf+afbpk0rT4StchuAuTocYlwOr7U3AYekRDPnX4xWHNbP4y
bDrytTEAVSxYkrAHMZCt1PHj0c7A+aKd2xs6fUZgnHSe3cca6KJm2v/bvQGtB2CF
vKK6ZowK8pXfoUYoAWSySnbKmZ6/5PM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:08 2024 by rpki-client on console-fra.rpki-client.org