Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9f41a90-a344-38d6-b227-90798632d6d1.roa
File:                     e9f41a90-a344-38d6-b227-90798632d6d1.roa (raw, json)
Hash identifier:          XGeNKJwxFGGUuIJdB3ZE1rK0gwRArLE/eICqRpx1MnY=
Subject key identifier:   D4:C6:16:F3:62:2D:13:6B:87:F9:F7:9D:9D:0C:55:4F:49:CC:A9:86
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C1CA84E314ED9F87B200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9f41a90-a344-38d6-b227-90798632d6d1.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c1:ca:84:e3:14:ed:9f:87:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f3d724ab-a582-4454-aebd-d2a30102520e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:a4:97:fe:53:1f:72:c9:b5:36:e9:9a:55:
                    3a:a4:00:8c:61:ab:57:67:98:49:91:e7:8d:05:1e:
                    9e:33:06:4d:18:8c:73:36:15:6e:d1:23:53:b7:6e:
                    e8:70:31:4f:65:58:02:b6:c0:68:ac:7f:8b:22:cd:
                    6e:67:69:c0:20:4c:de:d7:8e:dd:d4:d9:3c:ec:4f:
                    7b:97:2b:44:c4:1f:f1:74:e9:b8:c7:c5:10:2b:6c:
                    eb:6d:27:e3:a4:5a:9e:ea:aa:3b:1a:8b:12:28:6e:
                    fe:79:fe:11:75:64:3b:06:c7:61:8c:40:00:61:6f:
                    a4:a9:af:c1:26:ff:5f:f0:76:f3:24:97:08:b4:6e:
                    5d:b4:93:5c:fb:b9:43:03:b4:5e:cc:ac:70:38:4c:
                    52:51:00:79:96:41:92:82:21:3f:11:4f:48:a9:90:
                    96:a8:3b:fa:61:e8:2a:bd:f0:68:1f:2a:28:96:23:
                    ed:df:b4:b7:02:8d:39:52:ba:e0:5b:d1:27:e8:17:
                    5c:64:53:3f:8a:bb:c0:40:17:45:55:5e:47:dc:62:
                    67:b6:7f:cb:bf:42:b5:62:45:d6:fd:18:ed:b0:ef:
                    18:5d:1b:b6:53:5b:c6:4a:45:81:b4:1a:da:b6:f7:
                    7b:52:9a:76:f9:14:4a:a6:9d:bf:aa:08:43:3c:f9:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:16:F3:62:2D:13:6B:87:F9:F7:9D:9D:0C:55:4F:49:CC:A9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9f41a90-a344-38d6-b227-90798632d6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:ec:11:d5:c3:db:9f:c4:0c:b0:7b:29:27:fc:56:89:57:e7:
         ce:67:28:19:c7:74:83:5e:23:d4:51:79:10:fb:5c:14:27:99:
         7e:bb:bf:d4:14:c7:33:9c:0b:78:ca:47:96:2d:a4:dc:7a:a9:
         72:d3:92:b3:99:f9:eb:52:e7:49:48:b6:7a:cd:b8:6e:65:1d:
         6d:2c:9f:c7:43:ee:43:3b:13:13:04:bb:e8:b2:7f:96:0b:9b:
         a6:f8:33:ae:09:c9:82:4c:6e:ba:b2:ce:91:54:2b:49:df:be:
         4e:b4:2a:de:76:f7:29:91:1d:30:45:cf:e8:2d:0d:49:54:84:
         ad:a8:33:47:4c:fc:81:fa:42:74:67:9e:2e:d4:9c:35:20:dd:
         cf:4e:64:3e:47:b7:47:fc:79:75:2a:e5:8d:78:05:66:ed:82:
         15:4b:40:c8:4e:86:5e:12:30:f9:52:76:d9:34:ff:1f:d0:3b:
         81:bd:aa:7d:ff:bc:7b:0d:99:8f:9d:fe:82:1e:56:a7:b9:27:
         07:71:71:9b:31:59:d3:50:67:26:32:44:dc:78:ce:c4:97:a7:
         92:49:c5:ac:ba:40:c9:df:18:ff:c9:32:50:e4:da:81:76:00:
         53:49:e3:7f:d2:e6:da:cf:ff:67:fa:4e:42:d6:8c:d0:02:9f:
         1a:5e:56:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcHKhOMU7Z+HsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjNkNzI0YWItYTU4Mi00NDU0LWFlYmQtZDJhMzAxMDI1MjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc6kl/5TH3LJtTbpmlU6pACMYatXZ5hJkeeN
BR6eMwZNGIxzNhVu0SNTt27ocDFPZVgCtsBorH+LIs1uZ2nAIEze147d1Nk87E97
lytExB/xdOm4x8UQK2zrbSfjpFqe6qo7GosSKG7+ef4RdWQ7BsdhjEAAYW+kqa/B
Jv9f8HbzJJcItG5dtJNc+7lDA7RezKxwOExSUQB5lkGSgiE/EU9IqZCWqDv6Yegq
vfBoHyooliPt37S3Ao05UrrgW9En6BdcZFM/irvAQBdFVV5H3GJntn/Lv0K1YkXW
/RjtsO8YXRu2U1vGSkWBtBratvd7Upp2+RRKpp2/qghDPPl7swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTGFvNiLRNrh/n3nZ0MVU9JzKmGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTlmNDFhOTAtYTM0NC0z
OGQ2LWIyMjctOTA3OTg2MzJkNmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANjsEdXD25/EDLB7KSf8VolX585nKBnHdINeI9RReRD7XBQnmX67v9QU
xzOcC3jKR5YtpNx6qXLTkrOZ+etS50lItnrNuG5lHW0sn8dD7kM7ExMEu+iyf5YL
m6b4M64JyYJMbrqyzpFUK0nfvk60Kt529ymRHTBFz+gtDUlUhK2oM0dM/IH6QnRn
ni7UnDUg3c9OZD5Ht0f8eXUq5Y14BWbtghVLQMhOhl4SMPlSdtk0/x/QO4G9qn3/
vHsNmY+d/oIeVqe5JwdxcZsxWdNQZyYyRNx4zsSXp5JJxay6QMnfGP/JMlDk2oF2
AFNJ43/S5trP/2f6TkLWjNACnxpeVjw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:11 2025 by rpki-client