Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
File:                     06d3bb9c-8eeb-3028-a2b3-be307d608810.roa (raw, json)
Hash identifier:          Mqg2bQeR7EQZ+ARu/FpCfejXwKhaImSOHpQEgKpFj4s=
Subject key identifier:   77:64:C0:21:A4:BD:27:5D:66:B2:B2:39:32:6E:41:FD:DF:E2:BC:77
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F432858475910C7F430D2F853938AAC00
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     16276
IP address blocks:        192.99.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c7:f4:30:d2:f8:53:93:8a:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=3d68cffb-caad-4e8c-9c99-db0fb2647d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:b4:ee:03:f0:17:8b:0e:41:40:51:3b:e2:
                    be:ac:17:ff:80:b0:cc:46:4a:bf:7d:bc:0c:d5:38:
                    70:17:83:62:b2:8f:04:79:78:37:af:3c:8d:d9:fb:
                    93:cf:b1:7e:87:e4:7a:05:b4:40:60:db:d7:2a:b3:
                    ac:82:d3:fb:f9:e4:69:17:65:f4:fe:ea:47:d5:ae:
                    f2:7c:52:98:36:95:e6:12:22:ef:98:d7:0f:f8:f1:
                    5e:58:e7:47:56:62:03:b3:09:1f:75:93:6c:1a:d6:
                    66:c0:e0:6b:eb:2c:4d:af:fe:72:6f:3c:38:3e:c9:
                    c3:52:32:19:c8:46:76:40:4a:fe:99:1e:33:41:17:
                    44:7f:c4:eb:c3:fe:0e:ee:bc:b0:ea:ec:dd:d4:c1:
                    86:7c:bc:17:d4:34:ab:96:1e:3d:01:31:2b:00:76:
                    09:be:45:fb:af:7d:17:03:e5:2d:8f:3a:ec:99:97:
                    82:bc:93:5c:6e:4a:c8:e2:2a:46:9a:48:d5:b6:02:
                    c4:10:9d:38:d0:c2:97:ef:15:d2:ed:50:5c:c8:aa:
                    65:22:e6:6d:73:cb:6e:70:51:a0:08:62:6a:34:b3:
                    76:f7:61:14:83:bc:3c:97:15:0f:40:c3:63:3b:c1:
                    9b:18:40:48:12:f1:2e:d8:bb:8a:67:2d:81:ea:a6:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:64:C0:21:A4:BD:27:5D:66:B2:B2:39:32:6E:41:FD:DF:E2:BC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:66:b1:f1:8f:6f:09:86:c9:20:17:26:bb:3d:df:fb:4b:0d:
         2e:41:aa:3b:01:0a:e5:d1:02:42:d9:0b:db:d0:c9:57:93:c4:
         87:90:95:2e:cf:5a:a5:3c:e9:8c:e1:33:0d:cd:68:a5:ed:e4:
         8c:a9:b1:36:8f:9f:f4:be:45:3f:b5:1c:28:70:3d:a0:10:b4:
         5f:4e:ae:1a:ed:47:85:da:09:94:9f:0b:62:4f:a4:09:72:90:
         87:5c:dd:a9:12:f2:a5:1f:7b:d9:40:24:84:1f:1e:c9:32:1b:
         cc:70:b1:6b:38:e2:22:26:cc:c1:43:cd:2b:46:8c:76:27:28:
         2e:08:9d:37:d8:47:89:f7:85:8e:0e:cf:df:cc:f0:a2:a8:fc:
         ca:65:12:d0:39:fe:78:12:3e:26:26:c7:a8:f0:92:7b:76:f6:
         b4:28:f6:6c:59:71:91:69:e7:3d:f6:39:d5:89:9f:71:e8:2c:
         90:b2:2a:76:5e:5a:9f:14:96:e3:88:16:30:05:1e:d6:da:1a:
         0b:96:56:10:10:a3:47:b4:55:5b:a4:65:84:72:fe:6e:86:b6:
         4b:b8:43:75:83:9a:ca:4c:a8:a9:7e:78:e6:bb:69:51:a0:a2:
         09:9f:31:46:dc:00:83:2d:46:e3:0f:bd:84:a0:83:c5:9d:00:
         95:94:71:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdZEMf0MNL4U5OKrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3ZmI1NDctODExYi00ZGRmLWFjNTEtZjNkNmE0OTI1
NTE1MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
M2Q2OGNmZmItY2FhZC00ZThjLTljOTktZGIwZmIyNjQ3ZDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuau07gPwF4sOQUBRO+K+rBf/gLDMRkq/fbwM
1ThwF4Niso8EeXg3rzyN2fuTz7F+h+R6BbRAYNvXKrOsgtP7+eRpF2X0/upH1a7y
fFKYNpXmEiLvmNcP+PFeWOdHVmIDswkfdZNsGtZmwOBr6yxNr/5ybzw4PsnDUjIZ
yEZ2QEr+mR4zQRdEf8Trw/4O7ryw6uzd1MGGfLwX1DSrlh49ATErAHYJvkX7r30X
A+UtjzrsmZeCvJNcbkrI4ipGmkjVtgLEEJ040MKX7xXS7VBcyKplIuZtc8tucFGg
CGJqNLN292EUg7w8lxUPQMNjO8GbGEBIEvEu2LuKZy2B6qYxIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHdkwCGkvSddZrKyOTJuQf3f4rx3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lZTdm
YjU0Ny04MTFiLTRkZGYtYWM1MS1mM2Q2YTQ5MjU1MTUvMDZkM2JiOWMtOGVlYi0z
MDI4LWEyYjMtYmUzMDdkNjA4ODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWU3ZmI1NDctODExYi00ZGRmLWFj
NTEtZjNkNmE0OTI1NTE1L2VlN2ZiNTQ3LTgxMWItNGRkZi1hYzUxLWYzZDZhNDky
NTUxNS5jcmwwHwYDVR0jBBgwFoAU/Fbg525LaqB8ftMz+QbeFjJb9bYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lZTdmYjU0Ny04MTFiLTRkZGYtYWM1MS1mM2Q2
YTQ5MjU1MTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAwGMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA3Gax8Y9vCYbJIBcmuz3f+0sNLkGqOwEK5dECQtkL29DJV5PEh5CVLs9a
pTzpjOEzDc1ope3kjKmxNo+f9L5FP7UcKHA9oBC0X06uGu1HhdoJlJ8LYk+kCXKQ
h1zdqRLypR972UAkhB8eyTIbzHCxazjiIibMwUPNK0aMdicoLgidN9hHifeFjg7P
38zwoqj8ymUS0Dn+eBI+JibHqPCSe3b2tCj2bFlxkWnnPfY51YmfcegskLIqdl5a
nxSW44gWMAUe1toaC5ZWEBCjR7RVW6RlhHL+boa2S7hDdYOaykyoqX545rtpUaCi
CZ8xRtwAgy1G4w+9hKCDxZ0AlZRxIA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org