Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa
File:                     f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa (raw, json)
Hash identifier:          4XH/JF+GHXq3aoTFOiJuH91E3YM+/sZQUH9AZNYS464=
Subject key identifier:   56:8A:FB:F2:49:54:E3:45:08:F3:91:77:6E:21:8F:90:AE:1D:F2:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581CAE9E4204088F6AAB480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ca:e9:e4:20:40:88:f6:aa:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=58123e3d-b410-4744-b0cf-a1b7485ed6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:6d:37:e9:b2:80:43:0e:55:72:62:42:36:
                    01:21:18:09:56:98:62:ab:cc:1b:c1:77:8e:a0:5d:
                    70:c5:71:ec:0c:b9:55:23:d9:d7:c1:65:c6:32:d4:
                    63:23:70:54:82:ec:ff:98:1e:c4:a5:aa:63:7d:63:
                    c0:03:f5:04:02:05:3e:d7:87:2b:4d:bf:1e:fe:a8:
                    14:65:5c:3a:33:45:74:30:b1:50:6e:32:73:e2:bc:
                    66:40:69:a7:13:e6:7b:2b:d1:3f:8c:2b:9d:d6:78:
                    05:c9:e9:85:9b:35:12:76:09:30:5a:20:49:af:49:
                    5c:c3:c5:f9:8d:b5:4c:c6:37:20:d0:b2:26:64:be:
                    49:27:2b:b1:37:df:b2:75:2a:46:4e:ff:d7:27:2a:
                    e8:f5:71:39:ca:ab:f1:3c:cf:b1:cd:18:d1:25:f9:
                    87:90:34:ae:34:b6:74:ec:86:fe:15:65:cc:bf:9e:
                    17:6a:0e:b9:25:d9:05:34:55:e5:b0:30:a2:b3:ab:
                    96:54:51:27:e2:fb:34:73:4a:19:0b:94:a7:0a:d9:
                    22:18:6d:c3:5d:12:b7:dd:a7:16:a6:97:f4:1b:0d:
                    fa:04:5e:94:bc:60:5b:92:38:c6:d4:a2:56:1a:57:
                    90:e4:61:3f:b7:6b:cf:ee:8a:79:b1:d9:67:49:b0:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:FB:F2:49:54:E3:45:08:F3:91:77:6E:21:8F:90:AE:1D:F2:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:05:bd:21:99:77:54:19:fd:5a:04:f2:59:89:48:96:cc:
         5d:a2:f5:21:77:85:8d:67:f0:ef:02:ca:8c:b6:22:41:56:fa:
         8a:ff:43:75:5f:40:c0:51:c9:6e:bb:87:8b:56:ef:cf:44:c9:
         73:4d:c2:09:9d:eb:40:81:0a:0a:ae:10:ec:52:82:fe:53:1a:
         0c:1f:b9:ae:e6:8c:33:db:79:86:e6:4c:4e:67:90:79:6f:ac:
         57:d3:d4:76:a1:5d:f2:06:69:88:32:a1:61:09:e9:5e:6b:e7:
         0e:0d:5e:dc:c0:e9:34:90:41:c6:f2:54:35:87:a6:32:29:6c:
         9f:ea:6a:2a:7d:2c:6f:b0:b0:ff:43:d8:52:c3:e0:f0:65:07:
         33:7c:e9:97:f1:d0:03:18:d5:fb:c9:bc:ac:ec:83:10:c9:ab:
         5d:16:2e:a3:92:41:69:8c:6e:43:e9:a3:88:ed:9e:54:e2:71:
         80:ac:43:60:e2:66:fc:46:c6:c9:dd:09:33:b0:a9:c3:d5:ff:
         53:c2:10:b0:7c:e9:c1:53:7c:42:39:23:02:13:cd:c2:42:27:
         24:86:74:78:3c:fe:cc:e0:01:b5:0d:9b:7e:90:ad:da:f3:46:
         02:dd:68:53:0e:0a:d5:e4:5d:47:14:93:cb:69:1a:c5:db:ed:
         fe:63:7d:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcrp5CBAiPaqtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTgxMjNlM2QtYjQxMC00NzQ0LWIwY2YtYTFiNzQ4NWVkNmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQhtN+mygEMOVXJiQjYBIRgJVphiq8wbwXeO
oF1wxXHsDLlVI9nXwWXGMtRjI3BUguz/mB7EpapjfWPAA/UEAgU+14crTb8e/qgU
ZVw6M0V0MLFQbjJz4rxmQGmnE+Z7K9E/jCud1ngFyemFmzUSdgkwWiBJr0lcw8X5
jbVMxjcg0LImZL5JJyuxN9+ydSpGTv/XJyro9XE5yqvxPM+xzRjRJfmHkDSuNLZ0
7Ib+FWXMv54Xag65JdkFNFXlsDCis6uWVFEn4vs0c0oZC5SnCtkiGG3DXRK33acW
ppf0Gw36BF6UvGBbkjjG1KJWGleQ5GE/t2vP7op5sdlnSbD3KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaK+/JJVONFCPORd24hj5CuHfJCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjVmMGFkODYtNDdkNC0z
YWY2LWE1YWItMjM5Yzc0OTYzNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXlBb0hmXdUGf1aBPJZiUiWzF2i9SF3hY1n8O8Cyoy2IkFW+or/Q3Vf
QMBRyW67h4tW789EyXNNwgmd60CBCgquEOxSgv5TGgwfua7mjDPbeYbmTE5nkHlv
rFfT1HahXfIGaYgyoWEJ6V5r5w4NXtzA6TSQQcbyVDWHpjIpbJ/qaip9LG+wsP9D
2FLD4PBlBzN86Zfx0AMY1fvJvKzsgxDJq10WLqOSQWmMbkPpo4jtnlTicYCsQ2Di
ZvxGxsndCTOwqcPV/1PCELB86cFTfEI5IwITzcJCJySGdHg8/szgAbUNm36Qrdrz
RgLdaFMOCtXkXUcUk8tpGsXb7f5jfe4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:05 2025 by rpki-client