Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff4079e5-9935-3f7f-8354-8b4eb1eafab1.roa
File:                     ff4079e5-9935-3f7f-8354-8b4eb1eafab1.roa (raw, json)
Hash identifier:          ExnOlOG/6EoKq8bRo0ha3ZayUbjFPeDt/xxxN01NOaw=
Subject key identifier:   9A:2F:85:BB:CD:39:AA:6F:77:3A:20:29:2A:FE:0E:20:7A:18:47:43
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF8EF32EFEA567CEF9000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff4079e5-9935-3f7f-8354-8b4eb1eafab1.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f8:ef:32:ef:ea:56:7c:ef:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=45c6addb-519b-4919-8c3d-2185471f1d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:14:99:fb:f5:da:25:5e:33:26:02:1f:05:
                    1b:e0:a4:70:39:fb:3c:71:e6:9f:3e:8f:ef:90:46:
                    d5:5e:27:f2:63:df:c1:68:6f:c7:92:10:21:25:03:
                    f6:6b:9b:06:25:ad:8d:09:40:38:1c:e2:a0:ff:99:
                    a0:f7:c5:d5:8c:e5:d4:fa:c0:51:3b:38:3d:db:64:
                    50:4e:9d:db:7b:ff:0b:c9:56:81:ad:ff:e0:29:39:
                    23:ba:c5:32:32:f8:95:37:5a:a4:cc:eb:af:2c:b0:
                    5f:90:33:cf:16:9f:53:b2:63:ad:7b:8e:57:ae:d2:
                    48:75:6c:63:c3:e9:d7:e7:64:78:04:b4:7a:1b:c7:
                    2f:0a:98:87:66:1c:ed:1a:df:1e:8f:b7:76:16:d6:
                    88:37:18:14:53:3a:55:76:37:63:53:7c:32:e8:5e:
                    f4:47:cc:41:13:e5:77:17:f1:6b:f2:b3:cf:a2:65:
                    e5:a0:ad:5c:30:ad:06:7c:7b:16:82:83:6a:75:0a:
                    11:ae:af:fc:2c:dd:8c:11:e1:68:11:73:59:74:78:
                    ad:53:1f:b9:03:4c:6c:2c:24:94:2e:4f:7e:35:79:
                    1a:69:69:f0:c7:15:db:a7:66:16:74:98:8b:47:34:
                    df:d8:1c:83:38:8f:d9:37:ee:c8:d0:a1:2a:e5:84:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2F:85:BB:CD:39:AA:6F:77:3A:20:29:2A:FE:0E:20:7A:18:47:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff4079e5-9935-3f7f-8354-8b4eb1eafab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:88:0d:c8:3a:fa:4b:7d:87:39:e4:ce:9d:d9:e7:f4:02:
         b7:1f:95:2a:e3:dd:66:55:4a:8c:2e:c9:a7:ad:49:40:bb:ae:
         08:d8:7c:74:38:2c:4a:15:57:f2:2a:18:9f:86:6a:66:16:fb:
         34:02:1e:26:ea:f0:f7:a3:11:f7:13:da:aa:7c:57:dd:78:88:
         78:de:48:4b:fa:30:05:bb:2f:27:d6:01:bd:a0:23:ac:60:18:
         90:6c:c2:54:72:3f:d8:2e:e3:cb:50:0b:72:fb:14:68:53:ac:
         e4:5a:7c:2d:cc:30:f1:b8:e1:c2:39:6f:00:ca:57:e1:b2:47:
         1c:3e:17:a7:e9:90:a8:8a:e1:04:6c:fe:f3:74:7e:b4:ce:65:
         ae:ad:4a:f7:ac:ca:ec:6f:f5:71:7e:82:c4:3b:69:34:b2:13:
         bc:e5:4b:36:a1:b8:09:6b:98:7e:43:04:ca:ee:38:59:29:c5:
         e4:f7:b5:ac:76:47:27:ad:2d:e9:74:36:bd:0e:8c:96:9d:32:
         ea:43:9a:19:77:f2:8c:0b:46:45:81:f2:fb:12:17:a3:f7:dd:
         e7:62:cd:39:da:4c:b9:dd:d7:15:48:50:c1:44:da:cd:4a:cf:
         c7:2d:16:ae:81:c8:11:cc:7e:68:0c:4f:df:32:fb:78:c3:78:
         b4:53:2e:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKvjvMu/qVnzvkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NDVjNmFkZGItNTE5Yi00OTE5LThjM2QtMjE4NTQ3MWYxZDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCUUmfv12iVeMyYCHwUb4KRwOfs8ceafPo/v
kEbVXifyY9/BaG/HkhAhJQP2a5sGJa2NCUA4HOKg/5mg98XVjOXU+sBROzg922RQ
Tp3be/8LyVaBrf/gKTkjusUyMviVN1qkzOuvLLBfkDPPFp9TsmOte45XrtJIdWxj
w+nX52R4BLR6G8cvCpiHZhztGt8ej7d2FtaINxgUUzpVdjdjU3wy6F70R8xBE+V3
F/Fr8rPPomXloK1cMK0GfHsWgoNqdQoRrq/8LN2MEeFoEXNZdHitUx+5A0xsLCSU
Lk9+NXkaaWnwxxXbp2YWdJiLRzTf2ByDOI/ZN+7I0KEq5YSHbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJovhbvNOapvdzogKSr+DiB6GEdDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmY0MDc5ZTUtOTkzNS0z
ZjdmLTgzNTQtOGI0ZWIxZWFmYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKkZiA3IOvpLfYc55M6d2ef0ArcflSrj3WZVSowuyaetSUC7rgjYfHQ4
LEoVV/IqGJ+GamYW+zQCHibq8PejEfcT2qp8V914iHjeSEv6MAW7LyfWAb2gI6xg
GJBswlRyP9gu48tQC3L7FGhTrORafC3MMPG44cI5bwDKV+GyRxw+F6fpkKiK4QRs
/vN0frTOZa6tSvesyuxv9XF+gsQ7aTSyE7zlSzahuAlrmH5DBMruOFkpxeT3tax2
RyetLel0Nr0OjJadMupDmhl38owLRkWB8vsSF6P33edizTnaTLnd1xVIUMFE2s1K
z8ctFq6ByBHMfmgMT98y+3jDeLRTLhY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:48 2024 by rpki-client on console-fra.rpki-client.org