Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa
File:                     fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa (raw, json)
Hash identifier:          Y6o1h3ZG0h9FMO3gZfyA29MyCr1SMaKZVbMCkqRRCPA=
Subject key identifier:   18:99:C5:D3:04:25:F7:D3:9E:87:DF:35:F9:34:A3:13:88:E2:00:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A612C6B5EEEFF1B21E3C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:61:2c:6b:5e:ee:ff:1b:21:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=7050bdd9-a6ab-47d5-b4e5-8bd5dda1c9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:e1:21:70:d4:6e:4d:fb:c7:c6:98:c5:58:
                    28:22:fa:38:83:f5:9c:63:05:0e:f7:7b:ec:61:47:
                    8e:31:e4:e8:43:0d:b1:d7:e6:08:d8:a6:67:49:43:
                    8e:66:1b:f8:46:59:83:f9:34:0c:a9:68:7e:f8:bd:
                    54:36:26:23:e3:5e:f6:9e:67:e6:51:cd:fb:f5:fa:
                    c9:b5:81:61:12:a9:72:65:6f:83:2a:4f:e8:cc:b9:
                    74:23:f4:69:9f:e2:f7:8f:2d:5d:18:fe:9d:f4:19:
                    5a:ca:93:0b:09:1f:b1:56:10:e0:1f:fa:50:68:3c:
                    b6:2c:62:a2:dd:26:02:28:ba:20:06:7c:69:2e:8c:
                    2e:22:18:e7:84:cb:8b:70:31:9b:3e:60:52:a2:62:
                    ba:b3:31:3c:c3:e7:53:dd:12:5b:f2:a0:60:7f:ed:
                    c3:cc:b9:aa:c7:26:be:61:f4:5d:95:32:09:cc:42:
                    4a:cb:d0:da:e5:35:c7:dd:36:93:c7:d8:43:67:de:
                    da:94:c2:36:99:bc:e2:16:08:0b:25:8b:71:80:82:
                    47:64:3b:73:77:27:62:06:e0:1a:57:23:13:69:ba:
                    7b:5a:00:84:83:a6:ed:95:5a:2f:dc:f6:73:63:7c:
                    d8:1c:01:d5:89:86:16:3d:f5:81:2d:80:bf:9e:77:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:99:C5:D3:04:25:F7:D3:9E:87:DF:35:F9:34:A3:13:88:E2:00:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc16991d-c9bf-3d15-b3b1-efea754d9e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ba:74:a2:14:75:90:2d:92:09:54:e1:1b:fd:0a:52:c9:9b:
         55:f1:45:e2:e4:7c:57:3b:fa:12:9d:f7:c5:ba:6b:fc:8a:22:
         08:48:b1:17:84:8c:6f:bc:73:fe:8b:c8:0a:e4:48:47:78:4f:
         62:29:7d:aa:a0:ac:ce:01:3a:64:a0:b7:36:a8:22:15:58:a4:
         60:44:84:af:03:19:7d:20:8a:66:f4:e8:b4:32:73:cb:94:22:
         ed:8b:ac:04:41:d7:16:67:63:fe:92:ad:4d:f0:6b:ae:9f:a8:
         cc:69:c8:e1:74:fd:5c:41:8e:e0:fa:3c:63:5a:41:47:93:97:
         e6:32:f3:d5:f3:b4:e4:4d:ce:dc:fb:26:be:55:29:80:40:91:
         a4:48:7e:8a:29:c1:6a:2e:b5:d5:78:de:ea:ac:cb:03:7a:7e:
         b1:91:61:28:6a:5e:94:e6:90:85:df:7a:c1:80:81:42:55:50:
         97:95:13:24:bf:01:e6:3f:74:5e:b0:78:34:22:26:41:a7:1f:
         04:49:0c:a6:06:1e:30:87:0d:35:b6:e5:90:0a:fe:36:db:36:
         86:18:2c:53:ad:7e:9b:1c:f8:fb:c6:bc:8f:90:82:71:a3:bd:
         15:86:69:0d:4c:9c:1f:60:cf:47:41:3b:ab:50:64:1d:32:f1:
         57:f2:02:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKmEsa17u/xsh48AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzA1MGJkZDktYTZhYi00N2Q1LWI0ZTUtOGJkNWRkYTFjOWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwThIXDUbk37x8aYxVgoIvo4g/WcYwUO93vs
YUeOMeToQw2x1+YI2KZnSUOOZhv4RlmD+TQMqWh++L1UNiYj4172nmfmUc379frJ
tYFhEqlyZW+DKk/ozLl0I/Rpn+L3jy1dGP6d9BlaypMLCR+xVhDgH/pQaDy2LGKi
3SYCKLogBnxpLowuIhjnhMuLcDGbPmBSomK6szE8w+dT3RJb8qBgf+3DzLmqxya+
YfRdlTIJzEJKy9Da5TXH3TaTx9hDZ97alMI2mbziFggLJYtxgIJHZDtzdydiBuAa
VyMTabp7WgCEg6btlVov3PZzY3zYHAHViYYWPfWBLYC/nnd/BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiZxdMEJffTnoffNfk0oxOI4gA1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmMxNjk5MWQtYzliZi0z
ZDE1LWIzYjEtZWZlYTc1NGQ5ZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ScMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+6dKIUdZAtkglU4Rv9ClLJm1XxReLkfFc7+hKd98W6a/yKIghIsReE
jG+8c/6LyArkSEd4T2IpfaqgrM4BOmSgtzaoIhVYpGBEhK8DGX0gimb06LQyc8uU
Iu2LrARB1xZnY/6SrU3wa66fqMxpyOF0/VxBjuD6PGNaQUeTl+Yy89XztORNztz7
Jr5VKYBAkaRIfoopwWoutdV43uqsywN6frGRYShqXpTmkIXfesGAgUJVUJeVEyS/
AeY/dF6weDQiJkGnHwRJDKYGHjCHDTW25ZAK/jbbNoYYLFOtfpsc+PvGvI+QgnGj
vRWGaQ1MnB9gz0dBO6tQZB0y8VfyAis=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:19 2024 by rpki-client on console-ams.rpki-client.org