Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/05d2044b-b8f0-3fd2-8f04-790f81d0349d.roa
File:                     05d2044b-b8f0-3fd2-8f04-790f81d0349d.roa (raw, json)
Hash identifier:          M51GQ+fV15St5ig24gx1LGdM9k7UwlmkJ1sLMdimFh8=
Subject key identifier:   F6:3B:01:18:DF:AA:F7:3F:A3:E7:3B:02:32:21:30:14:24:03:B9:D0
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F4328584891DB2E36CC174367C952E580
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/05d2044b-b8f0-3fd2-8f04-790f81d0349d.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        199.47.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:2e:36:cc:17:43:67:c9:52:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=f05df5fc-b41d-4e8e-bae2-642d0a5d0389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:f0:42:fc:23:f3:7d:20:5d:f5:f2:1a:45:
                    bf:98:3d:38:32:57:47:73:29:00:a8:d6:c3:5e:03:
                    53:85:63:d4:5b:1a:4b:6a:2b:18:36:f9:14:8c:fc:
                    57:04:10:6a:13:b7:7e:70:49:62:58:52:d4:30:12:
                    6d:61:9c:36:33:1b:c9:35:d1:38:b4:c1:8c:10:61:
                    fc:18:20:b4:75:ef:08:37:4b:84:22:a0:9d:12:98:
                    14:97:cb:5a:b8:ef:04:f9:bd:d6:9d:47:76:13:a6:
                    61:5c:e7:8a:7a:bb:44:54:97:ee:c0:ea:a8:18:b3:
                    90:71:0a:4a:5c:44:c4:06:a6:8f:cb:5d:5f:18:1f:
                    dd:3e:64:95:06:74:9a:14:9b:e9:d4:20:34:a9:54:
                    39:82:7d:dd:13:65:a3:b4:af:dc:b9:7a:77:51:76:
                    50:6c:ef:28:c6:c6:7a:da:48:9d:20:4c:34:64:e2:
                    bd:a7:a7:41:0e:ee:1d:b3:10:88:d5:2d:03:a1:a4:
                    43:24:5f:6b:d8:f3:6a:f6:83:f8:74:9a:d8:dd:8a:
                    b5:4f:51:aa:98:e3:a5:a0:82:03:54:6b:d0:20:e9:
                    8b:8e:39:a8:ad:2d:40:94:32:02:94:7b:4f:6c:3b:
                    5b:bc:35:97:77:c8:3c:ef:6c:be:77:17:9d:1a:15:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3B:01:18:DF:AA:F7:3F:A3:E7:3B:02:32:21:30:14:24:03:B9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/05d2044b-b8f0-3fd2-8f04-790f81d0349d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:a6:88:59:31:7d:22:b2:27:b6:35:12:0c:73:33:01:68:
         08:48:d8:d4:af:e3:63:7e:63:ba:2a:28:46:9d:2a:ac:bc:99:
         35:8a:24:8a:f1:a0:1c:04:ee:82:93:07:b5:43:a2:50:21:f5:
         1b:65:b7:c0:7c:8c:de:ff:7f:d4:af:1a:d9:a3:7d:ce:97:f4:
         de:78:76:18:3c:fc:45:e8:b9:3f:c9:dd:85:f7:7b:ef:0e:39:
         1e:6f:d0:e7:f1:7b:20:a9:07:55:c1:de:46:d5:31:21:a5:72:
         62:d7:25:23:8f:cb:c8:65:50:ba:58:25:70:d8:24:04:a4:e0:
         e5:db:e5:46:9b:68:9c:22:35:90:b7:c1:43:b2:8d:8e:e0:43:
         3a:6d:6a:58:f9:33:65:45:f3:42:4c:d1:14:61:0c:43:d5:e7:
         68:1b:d5:67:2b:73:b2:f2:99:68:25:d3:24:aa:d6:ad:94:38:
         7a:44:c4:b7:41:4a:57:9f:13:8e:5d:62:9e:dc:b8:af:db:78:
         57:bd:37:d5:a8:03:05:e7:cf:66:a6:ea:4b:2b:0b:99:31:54:
         b2:d0:bc:44:04:e9:e7:f3:74:75:3d:ba:62:44:ff:27:a3:5e:
         13:22:79:e8:79:12:02:1c:b0:31:e9:a3:27:66:be:81:d3:af:
         da:90:1a:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2y42zBdDZ8lS5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw
OTZlMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjA1ZGY1ZmMtYjQxZC00ZThlLWJhZTItNjQyZDBhNWQwMzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMjwQvwj830gXfXyGkW/mD04MldHcykAqNbD
XgNThWPUWxpLaisYNvkUjPxXBBBqE7d+cEliWFLUMBJtYZw2MxvJNdE4tMGMEGH8
GCC0de8IN0uEIqCdEpgUl8tauO8E+b3WnUd2E6ZhXOeKertEVJfuwOqoGLOQcQpK
XETEBqaPy11fGB/dPmSVBnSaFJvp1CA0qVQ5gn3dE2WjtK/cuXp3UXZQbO8oxsZ6
2kidIEw0ZOK9p6dBDu4dsxCI1S0DoaRDJF9r2PNq9oP4dJrY3Yq1T1GqmOOloIID
VGvQIOmLjjmorS1AlDIClHtPbDtbvDWXd8g872y+dxedGhX6swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPY7ARjfqvc/o+c7AjIhMBQkA7nQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh
MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMDVkMjA0NGItYjhmMC0z
ZmQyLThmMDQtNzkwZjgxZDAzNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh
YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl
MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz
OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXxpohZMX0isie2NRIMczMBaAhI2NSv42N+Y7oqKEadKqy8mTWKJIrx
oBwE7oKTB7VDolAh9Rtlt8B8jN7/f9SvGtmjfc6X9N54dhg8/EXouT/J3YX3e+8O
OR5v0OfxeyCpB1XB3kbVMSGlcmLXJSOPy8hlULpYJXDYJASk4OXb5UabaJwiNZC3
wUOyjY7gQzptalj5M2VF80JM0RRhDEPV52gb1Wcrc7LymWgl0ySq1q2UOHpExLdB
SlefE45dYp7cuK/beFe9N9WoAwXnz2am6ksrC5kxVLLQvEQE6efzdHU9umJE/yej
XhMieeh5EgIcsDHpoydmvoHTr9qQGgs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:10 2025 by rpki-client