Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/24112cc7-f392-37f3-9721-601134534796.roa
File:                     24112cc7-f392-37f3-9721-601134534796.roa (raw, json)
Hash identifier:          KIA5JQA+VmFqdjsUNQTHTNxNPca52Q1oMlCazsOn1bc=
Subject key identifier:   AD:15:71:DE:7B:EB:A6:EB:F1:80:D8:20:AC:C6:3C:81:DC:E0:56:60
Certificate issuer:       /CN=12de60db-ef00-4011-ac2b-057362ea0602
Certificate serial:       010D0C9F432858496EB2CF92CE45903A7BA5E900
Authority key identifier: 34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/24112cc7-f392-37f3-9721-601134534796.roa
Signing time:             Sun 06 Apr 2025 04:33:01 +0000
ROA not before:           Sun 06 Apr 2025 04:33:01 +0000
ROA not after:            Sat 05 Jul 2025 04:33:01 +0000
asID:                     36849
IP address blocks:        96.9.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:b2:cf:92:ce:45:90:3a:7b:a5:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12de60db-ef00-4011-ac2b-057362ea0602
        Validity
            Not Before: Apr  6 04:33:01 2025 GMT
            Not After : Jul  5 04:33:01 2025 GMT
        Subject: CN=ccbf04c6-b960-4b39-8d42-78aaf65a3683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:15:e6:30:0c:6c:db:32:21:76:db:5f:2f:
                    2a:81:de:28:b0:cb:1f:a9:46:81:03:f3:88:30:40:
                    46:d8:ea:7e:35:d8:88:cd:5c:38:82:c3:3d:28:44:
                    eb:d8:32:1b:53:bf:19:24:6c:47:83:a1:77:9b:bf:
                    11:ab:13:43:0d:6f:cc:95:80:1e:3c:5c:2b:93:5c:
                    7a:27:22:eb:2c:5b:0e:53:2e:99:02:8f:d0:46:38:
                    38:77:8e:c9:c0:2c:14:19:38:66:c2:90:f8:4e:d1:
                    e8:b7:e7:9a:de:4b:ac:b9:94:e2:1e:6b:33:6a:d6:
                    f0:53:77:49:fc:26:61:fa:25:c0:dc:33:a8:23:42:
                    55:14:d0:9a:20:5c:10:c2:cd:a9:4a:b0:00:8e:48:
                    e9:00:24:fb:38:eb:01:98:70:3d:88:50:d6:7e:89:
                    60:a3:5f:bb:63:4c:9e:16:95:68:88:d3:a3:fe:ea:
                    79:5b:49:71:6a:11:ea:84:3d:12:5a:2e:bb:d7:e0:
                    00:4e:96:7d:55:d8:37:9a:72:e5:c4:b4:4e:da:ea:
                    27:0f:97:cb:3c:65:bc:b6:21:93:d8:30:10:b8:ca:
                    38:23:bb:3a:d5:d5:d4:4e:0c:76:78:fa:21:3b:8c:
                    f0:9e:57:60:34:b8:d7:84:f1:66:67:ec:02:08:cd:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:71:DE:7B:EB:A6:EB:F1:80:D8:20:AC:C6:3C:81:DC:E0:56:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/24112cc7-f392-37f3-9721-601134534796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e9:79:83:f4:9f:e9:c7:8e:1d:58:8e:44:f1:52:ae:dc:16:
         18:a6:b7:9b:90:3f:a5:9d:c9:36:d0:db:d3:da:7e:b1:72:00:
         41:31:ba:91:70:68:b9:8f:d0:f9:85:4d:0d:a7:23:5b:ab:4d:
         63:94:49:a3:74:d5:01:1d:76:c8:d6:e2:ea:cd:1c:dd:96:24:
         e5:de:49:b3:0e:ff:fb:90:dd:3e:99:c0:53:be:92:2d:d1:15:
         ef:e0:a1:b3:34:62:87:a1:7c:a2:76:d9:a8:ff:fd:ce:7d:c0:
         42:c1:bb:57:89:2d:a2:6b:78:1f:ed:86:9c:fe:92:53:e4:ff:
         d0:27:57:5e:7a:b1:89:5a:0d:50:b8:ff:98:0c:3a:ea:ac:48:
         b9:e3:65:ff:52:be:41:e4:52:c0:ca:e7:b9:9a:08:04:4d:6b:
         4c:71:2f:4b:ec:e4:07:66:74:cc:9f:5b:f5:ba:ad:10:58:19:
         a4:a0:3a:b9:14:05:8e:44:bf:30:f7:8d:94:ca:44:e2:7e:e2:
         ed:9f:8c:46:51:b3:9d:f8:ad:ba:76:54:dc:0c:bf:67:b2:f6:
         30:53:17:8b:60:1a:ae:be:18:81:c0:bb:7e:f7:ad:0c:4b:d3:
         16:1f:8f:e1:25:89:60:2e:08:b5:1d:89:ec:61:3a:a8:59:5b:
         4c:41:a7:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluss+SzkWQOnul6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJkZTYwZGItZWYwMC00MDExLWFjMmItMDU3MzYyZWEw
NjAyMB4XDTI1MDQwNjA0MzMwMVoXDTI1MDcwNTA0MzMwMVowLzEtMCsGA1UEAxMk
Y2NiZjA0YzYtYjk2MC00YjM5LThkNDItNzhhYWY2NWEzNjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVwV5jAMbNsyIXbbXy8qgd4osMsfqUaBA/OI
MEBG2Op+NdiIzVw4gsM9KETr2DIbU78ZJGxHg6F3m78RqxNDDW/MlYAePFwrk1x6
JyLrLFsOUy6ZAo/QRjg4d47JwCwUGThmwpD4TtHot+ea3kusuZTiHmszatbwU3dJ
/CZh+iXA3DOoI0JVFNCaIFwQws2pSrAAjkjpACT7OOsBmHA9iFDWfolgo1+7Y0ye
FpVoiNOj/up5W0lxahHqhD0SWi671+AATpZ9Vdg3mnLlxLRO2uonD5fLPGW8tiGT
2DAQuMo4I7s61dXUTgx2ePohO4zwnldgNLjXhPFmZ+wCCM0LzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0Vcd5766br8YDYIKzGPIHc4FZgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMmRl
NjBkYi1lZjAwLTQwMTEtYWMyYi0wNTczNjJlYTA2MDIvMjQxMTJjYzctZjM5Mi0z
N2YzLTk3MjEtNjAxMTM0NTM0Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTJkZTYwZGItZWYwMC00MDExLWFj
MmItMDU3MzYyZWEwNjAyLzEyZGU2MGRiLWVmMDAtNDAxMS1hYzJiLTA1NzM2MmVh
MDYwMi5jcmwwHwYDVR0jBBgwFoAUNO2lGPcXDoqeCqs0cB5HzQBQtHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMmRlNjBkYi1lZjAwLTQwMTEtYWMyYi0wNTcz
NjJlYTA2MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAliMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHpeYP0n+nHjh1YjkTxUq7cFhimt5uQP6WdyTbQ29PafrFyAEExupFw
aLmP0PmFTQ2nI1urTWOUSaN01QEddsjW4urNHN2WJOXeSbMO//uQ3T6ZwFO+ki3R
Fe/gobM0YoehfKJ22aj//c59wELBu1eJLaJreB/thpz+klPk/9AnV156sYlaDVC4
/5gMOuqsSLnjZf9SvkHkUsDK57maCARNa0xxL0vs5AdmdMyfW/W6rRBYGaSgOrkU
BY5EvzD3jZTKROJ+4u2fjEZRs534rbp2VNwMv2ey9jBTF4tgGq6+GIHAu373rQxL
0xYfj+EliWAuCLUdiexhOqhZW0xBp0w=
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:31 2025 by rpki-client