Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb89af5d-680f-3086-850d-7eb8dc349054.roa
File:                     eb89af5d-680f-3086-850d-7eb8dc349054.roa (raw, json)
Hash identifier:          G2tLBhxX99IItoETkYy6UQWY4G+yZfAlAKKDgDA0Yw0=
Subject key identifier:   62:2A:B3:7A:DA:9C:2B:9B:31:6F:3C:A9:9A:FA:6E:61:27:20:92:3A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2CEBBD9738180A8B0B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb89af5d-680f-3086-850d-7eb8dc349054.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2c:eb:bd:97:38:18:0a:8b:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=02ceec34-9521-43e8-8c2c-10452937b9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:34:ae:f4:b0:bc:ef:dd:56:64:55:77:aa:
                    3a:3f:54:a7:a2:70:08:43:17:7a:e8:4f:28:76:c4:
                    03:87:47:ce:79:2c:f4:a1:52:56:3b:c5:77:a2:1e:
                    31:82:e6:20:90:ba:6b:90:11:43:07:e8:5e:1e:7a:
                    b8:62:1e:2c:f2:0c:3b:80:bf:01:a5:28:cc:2b:93:
                    36:20:1d:12:ee:6d:7b:7a:bc:6a:bf:39:90:78:dc:
                    71:8b:d5:8e:5a:58:55:a7:77:e1:c5:2e:65:97:b8:
                    11:91:06:93:08:a6:9e:5c:5d:d6:d5:31:77:05:10:
                    d4:58:f5:83:b8:b4:57:8b:d8:67:5c:e8:5f:cc:d6:
                    a9:70:1b:86:1b:a5:b2:af:51:dc:a1:59:e1:9f:3c:
                    13:e5:fc:ef:4c:5f:01:cd:1c:ac:56:0b:71:ad:2e:
                    2b:69:02:c4:1f:07:3e:7b:15:30:40:70:27:1f:a8:
                    e5:ad:3b:3b:f6:b2:0e:d5:b1:a6:de:9c:b3:66:1f:
                    96:b9:06:49:03:e0:0c:22:fc:ad:9e:c0:18:f1:df:
                    65:66:d3:c0:34:1b:6f:2f:c4:3a:3d:1d:31:b8:68:
                    1f:37:54:61:64:65:5d:0a:48:9f:a6:5a:b0:6e:6d:
                    52:12:cd:63:e9:04:71:b9:f5:57:d2:80:b3:7b:9d:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2A:B3:7A:DA:9C:2B:9B:31:6F:3C:A9:9A:FA:6E:61:27:20:92:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb89af5d-680f-3086-850d-7eb8dc349054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:6d:21:54:8e:5e:06:8c:d2:c0:d8:5d:5c:77:26:5c:78:2f:
         de:f3:e8:90:7b:64:85:58:3b:fa:1b:f8:1c:72:f3:21:b1:ae:
         22:c4:ed:b4:0f:fb:53:bd:92:e0:b9:76:c9:76:6b:ea:04:21:
         b8:96:81:e2:e0:92:7c:c8:e0:95:43:59:d2:3f:1d:26:04:87:
         69:8b:7c:f0:4e:9e:3d:c9:22:a2:61:cd:3b:6b:a3:b8:dc:40:
         79:fd:e6:99:a7:49:c9:53:95:f6:ea:b8:a9:7e:ef:ab:cc:77:
         78:74:71:8d:32:66:d1:27:83:3e:c2:5f:a8:e7:fc:77:46:f6:
         c4:66:46:c1:9c:9d:12:8b:98:b8:4f:86:b8:6b:25:98:26:31:
         80:46:6e:50:89:48:e1:3d:7a:7f:38:58:28:9e:8e:d1:4a:cc:
         b6:8c:99:42:03:0e:96:6e:a2:d8:cf:11:db:5a:b3:34:05:bf:
         4a:27:7b:e5:a1:3d:af:15:0a:8a:e8:55:2a:7a:09:69:cb:41:
         c7:7e:36:2a:8f:f9:b2:8b:08:a3:e7:8b:c8:c5:23:ef:8d:88:
         4b:1d:ea:11:bd:d7:33:b7:19:db:ab:c8:52:d5:fc:6f:4f:d9:
         bb:77:9d:ab:22:14:f0:f9:c2:49:13:3d:17:bb:5c:b0:86:dd:
         2f:25:e3:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPizrvZc4GAqLC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
MDJjZWVjMzQtOTUyMS00M2U4LThjMmMtMTA0NTI5MzdiOWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pw0rvSwvO/dVmRVd6o6P1SnonAIQxd66E8o
dsQDh0fOeSz0oVJWO8V3oh4xguYgkLprkBFDB+heHnq4Yh4s8gw7gL8BpSjMK5M2
IB0S7m17erxqvzmQeNxxi9WOWlhVp3fhxS5ll7gRkQaTCKaeXF3W1TF3BRDUWPWD
uLRXi9hnXOhfzNapcBuGG6Wyr1HcoVnhnzwT5fzvTF8BzRysVgtxrS4raQLEHwc+
exUwQHAnH6jlrTs79rIO1bGm3pyzZh+WuQZJA+AMIvytnsAY8d9lZtPANBtvL8Q6
PR0xuGgfN1RhZGVdCkifplqwbm1SEs1j6QRxufVX0oCze52HTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIqs3ranCubMW88qZr6bmEnIJI6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWI4OWFmNWQtNjgwZi0z
MDg2LTg1MGQtN2ViOGRjMzQ5MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMVtIVSOXgaM0sDYXVx3Jlx4L97z6JB7ZIVYO/ob+Bxy8yGxriLE7bQP
+1O9kuC5dsl2a+oEIbiWgeLgknzI4JVDWdI/HSYEh2mLfPBOnj3JIqJhzTtro7jc
QHn95pmnSclTlfbquKl+76vMd3h0cY0yZtEngz7CX6jn/HdG9sRmRsGcnRKLmLhP
hrhrJZgmMYBGblCJSOE9en84WCiejtFKzLaMmUIDDpZuotjPEdtaszQFv0one+Wh
Pa8VCoroVSp6CWnLQcd+NiqP+bKLCKPni8jFI++NiEsd6hG91zO3GduryFLV/G9P
2bt3nasiFPD5wkkTPRe7XLCG3S8l40Y=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org