Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4db2647-0872-314d-bbb9-efb990f0ee39.roa
File:                     f4db2647-0872-314d-bbb9-efb990f0ee39.roa (raw, json)
Hash identifier:          X0lledpCipH8X0Qu2/aNuH7Qxw70QfQM7+H6rOOngC8=
Subject key identifier:   04:A5:3B:64:D9:ED:DF:6F:F8:E8:4B:18:76:39:14:09:11:02:1C:EC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2800F95DB44ECFB50100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4db2647-0872-314d-bbb9-efb990f0ee39.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:28:00:f9:5d:b4:4e:cf:b5:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=74faeb39-8195-4329-a6d4-1a2f3ffc644a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2d:4b:63:39:2c:90:ce:b9:55:b2:4a:0c:21:
                    81:a2:b4:a7:7e:26:1a:4f:6b:65:95:1f:b8:f4:03:
                    45:cd:ce:4d:cc:93:25:07:fd:b0:17:c1:51:57:71:
                    04:6e:39:dd:4e:f8:31:dc:f5:bc:b8:95:4b:4c:a5:
                    9d:f9:bd:c8:99:9c:40:fb:a4:5a:f3:67:db:22:80:
                    58:3f:ca:1c:c9:a7:25:b0:13:35:f3:bb:f3:5b:d0:
                    b7:0d:a3:6e:47:af:d3:18:d4:89:88:08:30:7c:04:
                    3d:12:ff:ff:c9:35:fb:ac:62:10:9d:56:fc:d9:98:
                    08:18:d0:db:90:34:2e:7f:97:96:f9:6f:e9:4a:68:
                    9d:55:2d:4f:92:57:75:94:5c:50:dd:29:cb:ee:b1:
                    ae:f2:41:87:8e:ef:14:62:ed:43:d9:0d:a7:02:4f:
                    6c:cf:46:e5:51:1a:98:7b:de:57:f4:fb:cc:55:31:
                    a8:bc:2c:66:95:9b:0b:d3:28:e4:38:42:25:b7:19:
                    78:f0:58:d6:83:ee:ba:62:11:b4:b9:ec:3a:f3:da:
                    59:c4:39:9e:4e:c6:5b:e7:64:ea:3c:7d:b3:98:49:
                    3b:42:45:fd:2a:fa:43:4b:97:03:d5:8c:87:3d:2d:
                    c8:d8:89:5e:9d:c4:c0:26:bf:a9:53:b5:15:10:6a:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A5:3B:64:D9:ED:DF:6F:F8:E8:4B:18:76:39:14:09:11:02:1C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4db2647-0872-314d-bbb9-efb990f0ee39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:57:53:53:2f:c4:6e:39:4a:21:b5:54:d6:70:bf:8e:da:22:
         bd:64:33:07:8c:d0:d1:b2:4b:7c:7c:22:3f:3c:12:3d:19:b5:
         2b:db:2c:29:1c:8b:ed:13:13:5b:16:51:f5:97:9a:d8:89:a7:
         06:5a:11:46:cd:8b:a0:2e:0a:bd:66:e7:fc:4a:84:8a:73:4f:
         23:49:7e:8a:9e:cd:88:cb:4a:f3:4e:ec:31:dd:bc:3a:41:dc:
         2f:cb:d3:e4:59:fe:3a:1e:f1:d7:07:06:3a:78:93:5a:39:53:
         ab:8b:87:9a:7c:df:9a:49:34:b1:3d:20:7a:6a:56:10:cd:b2:
         87:25:76:b4:fc:c8:6f:79:07:d3:23:4d:4c:c3:92:5d:7c:66:
         27:a3:6a:93:23:26:da:e5:cb:1e:94:23:33:39:72:5b:48:23:
         26:a8:03:9a:57:66:61:04:78:aa:81:d8:33:4c:b3:c7:f0:43:
         59:f8:77:64:b2:10:ca:d6:a3:47:99:d9:9b:f5:63:ca:c0:4f:
         e8:93:d8:63:da:85:bc:34:4a:b9:8c:1c:3f:b4:33:c2:00:87:
         df:1b:fe:12:c9:4f:1d:ea:26:31:0f:b3:78:22:2b:ab:c5:eb:
         b1:42:11:67:05:d4:8b:42:32:a7:9b:58:d4:a6:41:1d:c3:f6:
         f5:6b:3b:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPigA+V20Ts+1AQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
NzRmYWViMzktODE5NS00MzI5LWE2ZDQtMWEyZjNmZmM2NDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy1LYzkskM65VbJKDCGBorSnfiYaT2tllR+4
9ANFzc5NzJMlB/2wF8FRV3EEbjndTvgx3PW8uJVLTKWd+b3ImZxA+6Ra82fbIoBY
P8ocyaclsBM187vzW9C3DaNuR6/TGNSJiAgwfAQ9Ev//yTX7rGIQnVb82ZgIGNDb
kDQuf5eW+W/pSmidVS1Pkld1lFxQ3SnL7rGu8kGHju8UYu1D2Q2nAk9sz0blURqY
e95X9PvMVTGovCxmlZsL0yjkOEIltxl48FjWg+66YhG0uew689pZxDmeTsZb52Tq
PH2zmEk7QkX9KvpDS5cD1YyHPS3I2IlencTAJr+pU7UVEGoZjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASlO2TZ7d9v+OhLGHY5FAkRAhzsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjRkYjI2NDctMDg3Mi0z
MTRkLWJiYjktZWZiOTkwZjBlZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8S/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlXU1MvxG45SiG1VNZwv47aIr1kMweM0NGyS3x8Ij88Ej0ZtSvbLCkc
i+0TE1sWUfWXmtiJpwZaEUbNi6AuCr1m5/xKhIpzTyNJfoqezYjLSvNO7DHdvDpB
3C/L0+RZ/joe8dcHBjp4k1o5U6uLh5p835pJNLE9IHpqVhDNsocldrT8yG95B9Mj
TUzDkl18ZiejapMjJtrlyx6UIzM5cltIIyaoA5pXZmEEeKqB2DNMs8fwQ1n4d2Sy
EMrWo0eZ2Zv1Y8rAT+iT2GPahbw0SrmMHD+0M8IAh98b/hLJTx3qJjEPs3giK6vF
67FCEWcF1ItCMqebWNSmQR3D9vVrO6E=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org