Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa
File:                     6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa (raw, json)
Hash identifier:          maOixVEh2dYpx3mKzTWYQH482EEyR4kY0IvogmPKT4E=
Subject key identifier:   ED:B8:68:E3:04:29:49:C5:F8:F3:48:21:02:B0:E4:A8:86:CD:24:06
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285847362B5C121F22006AC15A5480
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        198.73.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5c:12:1f:22:00:6a:c1:5a:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=83508fa7-b808-4126-b641-d8ae742e51d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:91:2c:4d:09:fb:e4:0c:18:37:c9:bb:91:
                    ac:f3:df:52:d4:6f:1a:6b:45:e7:4f:6e:aa:28:c9:
                    31:9d:39:e7:0f:d5:55:02:b3:d5:5f:2b:ea:98:00:
                    7d:de:ec:0d:14:9b:7f:43:14:35:5f:69:f4:37:d5:
                    be:ab:9e:be:33:0e:8b:6e:7e:d8:ad:c8:3e:4e:58:
                    f1:5b:80:b7:53:77:73:0a:96:b0:d4:77:c0:d9:be:
                    b3:51:40:e2:71:24:04:16:48:47:ba:31:4d:e6:37:
                    6e:15:f4:09:44:77:54:99:94:6b:43:d6:97:e9:d8:
                    ab:a4:85:26:2c:43:37:31:26:2c:bc:88:8b:1c:11:
                    49:e9:96:c4:23:e7:f6:cc:c7:8a:33:10:90:f1:31:
                    b7:f1:e1:cf:00:44:3b:30:3c:b8:13:cd:69:27:9d:
                    7d:dc:58:c9:df:89:2b:39:b8:49:d7:3f:96:7c:68:
                    be:40:91:75:b4:b9:5b:72:0e:6e:bf:ea:37:a1:cf:
                    a3:05:20:c0:d1:74:36:cd:cb:d8:d1:2f:9e:96:cf:
                    14:b3:5a:14:15:81:7c:ea:ca:e2:38:ae:ec:6b:46:
                    f4:3a:28:d0:3d:8f:6c:42:19:50:8b:8a:f2:fe:47:
                    e2:12:cf:73:34:a1:9d:f7:e7:eb:be:4e:65:93:32:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:68:E3:04:29:49:C5:F8:F3:48:21:02:B0:E4:A8:86:CD:24:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:8b:3c:8d:68:22:c7:bf:a9:e4:58:dd:82:4e:bc:cb:0c:
         9c:e4:62:49:f4:4f:0e:6a:34:64:55:c2:1a:bf:fa:f2:5d:19:
         24:97:79:3a:fc:18:94:e4:0c:55:00:fe:92:8d:53:84:e1:b6:
         c2:dc:6e:12:57:2a:3a:a1:0d:14:39:cc:56:31:93:fc:ff:0e:
         ec:9d:25:83:2a:d9:2c:4d:62:68:b3:6e:19:cd:17:7f:81:6c:
         c4:91:08:7d:b6:4c:fa:d0:1c:6c:60:57:2b:ef:a4:da:a0:eb:
         55:f9:85:7b:a1:da:c1:49:d9:be:c6:a1:7f:fb:87:a7:ef:70:
         e8:de:e9:5e:4e:1b:0b:e8:d8:be:66:cb:d6:a0:0f:71:f8:b1:
         d2:b2:82:f7:94:d8:82:c6:7a:f6:97:53:0c:d0:53:a7:c7:f8:
         15:66:ce:62:28:6e:9e:ae:3d:99:3c:96:bb:69:ff:0d:6a:20:
         d5:eb:d5:60:55:54:1e:f1:9c:ce:22:df:83:cd:9c:76:46:4b:
         cd:7b:be:fd:03:01:fb:d7:96:42:8a:f8:8d:8c:20:f0:1e:18:
         dc:14:3d:18:83:54:6f:74:18:28:0e:95:0b:c4:b5:f8:cd:e5:
         6b:d1:5f:5f:c6:4c:cd:0a:5f:32:5f:06:e8:73:22:bc:17:24:
         9f:b1:24:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K1wSHyIAasFaVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
ODM1MDhmYTctYjgwOC00MTI2LWI2NDEtZDhhZTc0MmU1MWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5mRLE0J++QMGDfJu5Gs899S1G8aa0XnT26q
KMkxnTnnD9VVArPVXyvqmAB93uwNFJt/QxQ1X2n0N9W+q56+Mw6Lbn7Yrcg+Tljx
W4C3U3dzCpaw1HfA2b6zUUDicSQEFkhHujFN5jduFfQJRHdUmZRrQ9aX6dirpIUm
LEM3MSYsvIiLHBFJ6ZbEI+f2zMeKMxCQ8TG38eHPAEQ7MDy4E81pJ5193FjJ34kr
ObhJ1z+WfGi+QJF1tLlbcg5uv+o3oc+jBSDA0XQ2zcvY0S+els8Us1oUFYF86sri
OK7sa0b0OijQPY9sQhlQi4ry/kfiEs9zNKGd9+frvk5lkzIdGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO24aOMEKUnF+PNIIQKw5KiGzSQGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvNmNiZjY5ZDItYWFiNC0z
NWIxLTgxYmUtOGY3NDIwMmM0ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkk6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADa6izyNaCLHv6nkWN2CTrzLDJzkYkn0Tw5qNGRVwhq/+vJdGSSXeTr8
GJTkDFUA/pKNU4ThtsLcbhJXKjqhDRQ5zFYxk/z/DuydJYMq2SxNYmizbhnNF3+B
bMSRCH22TPrQHGxgVyvvpNqg61X5hXuh2sFJ2b7GoX/7h6fvcOje6V5OGwvo2L5m
y9agD3H4sdKygveU2ILGevaXUwzQU6fH+BVmzmIobp6uPZk8lrtp/w1qINXr1WBV
VB7xnM4i34PNnHZGS817vv0DAfvXlkKK+I2MIPAeGNwUPRiDVG90GCgOlQvEtfjN
5WvRX1/GTM0KXzJfBuhzIrwXJJ+xJJA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:42 2024 by rpki-client on console-ams.rpki-client.org