Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa
File:                     99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa (raw, json)
Hash identifier:          pBiA37tSQBkUqewqOFpPZGgFtvQbUR52qffpuKH1Ln0=
Subject key identifier:   2C:02:01:0D:64:37:B6:B4:07:92:79:04:78:2B:F2:E5:BD:9D:B3:6A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285848D21107D95D368FEC4C3634A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     19905
IP address blocks:        184.179.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:07:d9:5d:36:8f:ec:4c:36:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=76c36d73-d3a0-4294-8e5c-03e7bebc382e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:5b:11:96:db:55:8b:ce:46:87:ec:8d:30:
                    7b:68:fa:41:e6:0d:dc:dc:db:a2:b8:ba:e8:40:32:
                    45:5c:93:db:ab:fe:72:7b:72:71:d7:dd:d7:8d:1c:
                    02:ca:c7:b9:3b:21:36:b1:64:e1:08:75:46:18:0f:
                    6c:6d:9a:33:07:0f:a2:e7:fb:b4:f7:f3:b2:b3:dc:
                    bc:48:96:a8:1b:74:e9:70:9c:8e:b8:4d:36:ff:ac:
                    7e:b5:13:b5:5b:aa:9b:5e:06:f2:fb:2d:c7:3b:4e:
                    82:14:17:cf:cb:b5:77:76:c3:2c:7a:76:e7:89:6f:
                    17:32:89:ab:5e:b9:98:6c:fa:bd:fa:bb:ca:9d:53:
                    4b:41:77:1e:8a:72:6b:e7:0b:98:de:84:f3:5b:21:
                    aa:1c:8f:06:ac:4b:de:77:49:eb:5f:7c:50:25:27:
                    e1:1a:d9:9f:32:a2:da:10:55:ed:88:2c:3f:a9:af:
                    b4:2f:6b:41:45:e8:9c:ac:ca:51:87:62:0b:8d:44:
                    6f:87:49:08:64:18:3a:c3:cf:b3:b4:2b:86:4f:c1:
                    17:99:44:72:d8:8e:f2:75:56:af:d6:71:39:5c:90:
                    6c:90:fd:82:f8:04:07:a0:5f:62:03:22:18:9b:fe:
                    01:8d:e4:45:13:9a:6c:50:56:e8:fa:ea:d6:8b:6b:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:02:01:0D:64:37:B6:B4:07:92:79:04:78:2B:F2:E5:BD:9D:B3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.179.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:ba:16:ac:54:ce:11:89:76:c0:a0:13:1e:2d:07:db:61:
         36:15:b3:fc:67:30:ae:ca:12:42:03:7d:5a:f1:05:a8:e0:62:
         24:74:f2:f5:38:8d:37:9a:b2:a6:cc:7e:5e:b3:c6:21:26:6e:
         7f:ea:08:35:56:6f:db:c9:91:f5:36:4a:99:02:20:d4:2d:ae:
         c2:f9:e5:d5:28:83:5d:fc:11:12:3a:53:8d:ed:2b:de:49:6a:
         c0:ea:80:69:ea:f0:ac:34:33:db:e1:17:be:df:53:d4:e7:38:
         9c:2f:f4:54:f1:40:89:a2:36:6e:14:06:8e:7a:67:64:6b:62:
         53:cc:80:d9:f6:73:63:6d:95:4c:e0:e1:13:f2:c5:b6:59:86:
         92:50:ab:3f:2a:a6:57:9c:18:2f:00:d0:27:47:ae:7e:e7:23:
         77:1c:08:ad:22:8f:8c:aa:c5:c7:6d:65:27:9d:68:e5:3a:00:
         32:90:a7:36:3b:53:77:f2:88:1e:da:28:53:fe:17:df:76:42:
         5a:f9:9f:73:8d:7a:6f:90:ef:d4:f8:7d:3d:ee:dc:14:93:8a:
         32:ff:9c:9c:e7:e7:a3:d8:53:2d:8c:8b:8b:cd:7e:b3:df:4c:
         7d:4d:00:09:13:31:38:35:67:94:82:14:d3:84:5e:80:7d:f2:
         a8:a7:65:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQfZXTaP7Ew2NKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NzZjMzZkNzMtZDNhMC00Mjk0LThlNWMtMDNlN2JlYmMzODJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67VbEZbbVYvORofsjTB7aPpB5g3c3NuiuLro
QDJFXJPbq/5ye3Jx193XjRwCyse5OyE2sWThCHVGGA9sbZozBw+i5/u09/Oys9y8
SJaoG3TpcJyOuE02/6x+tRO1W6qbXgby+y3HO06CFBfPy7V3dsMsenbniW8XMomr
XrmYbPq9+rvKnVNLQXceinJr5wuY3oTzWyGqHI8GrEved0nrX3xQJSfhGtmfMqLa
EFXtiCw/qa+0L2tBReicrMpRh2ILjURvh0kIZBg6w8+ztCuGT8EXmURy2I7ydVav
1nE5XJBskP2C+AQHoF9iAyIYm/4BjeRFE5psUFbo+urWi2vqlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwCAQ1kN7a0B5J5BHgr8uW9nbNqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTllMDA1NzEtYTNmNy0z
YmQ4LThjM2UtYzdlOTNjNmIwMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuLN8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJKuhasVM4RiXbAoBMeLQfbYTYVs/xnMK7KEkIDfVrxBajgYiR08vU4
jTeasqbMfl6zxiEmbn/qCDVWb9vJkfU2SpkCINQtrsL55dUog138ERI6U43tK95J
asDqgGnq8Kw0M9vhF77fU9TnOJwv9FTxQImiNm4UBo56Z2RrYlPMgNn2c2NtlUzg
4RPyxbZZhpJQqz8qplecGC8A0CdHrn7nI3ccCK0ij4yqxcdtZSedaOU6ADKQpzY7
U3fyiB7aKFP+F992Qlr5n3ONem+Q79T4fT3u3BSTijL/nJzn56PYUy2Mi4vNfrPf
TH1NAAkTMTg1Z5SCFNOEXoB98qinZUQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:52 2025 by rpki-client