Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa
File:                     2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa (raw, json)
Hash identifier:          k52/LO0ooi8QSo244PHh1Cx7Do5A3yqT4+6Oztt5/Gs=
Subject key identifier:   62:A5:1F:02:67:CC:0C:E7:9D:1A:30:31:5C:51:4B:10:D6:78:A9:B5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1EB6574F18DA1BC9B520
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:1e:b6:57:4f:18:da:1b:c9:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d14fb119-2c04-461c-9ac3-61be87ba5f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:4d:f8:26:48:a4:22:b6:da:0a:db:00:43:
                    59:82:96:49:e6:0b:d9:42:dd:87:f1:8f:7b:65:c3:
                    12:1e:c4:dc:a2:78:2e:d1:3c:6e:e6:a0:1e:83:c3:
                    81:44:b5:55:4b:10:14:91:75:70:8d:ee:a0:72:8b:
                    74:e5:87:b4:1a:82:b0:35:55:c8:45:15:a7:e7:3d:
                    64:46:cc:07:99:3a:f1:e4:f9:d5:70:c7:c4:37:9e:
                    1e:88:25:e0:14:ab:f5:6b:da:48:53:a5:2b:91:ec:
                    db:35:c4:94:cc:80:fc:c9:db:a0:b6:50:cc:c3:3c:
                    5c:ec:4a:c3:d3:0f:e4:62:ec:76:b5:40:65:ca:55:
                    41:d7:a8:af:71:66:82:6e:17:b8:af:3c:d0:1e:cc:
                    38:9e:3b:87:80:aa:90:32:0f:7d:66:04:e7:1f:05:
                    c5:66:fe:08:8d:6b:ab:12:a3:93:e1:63:5d:54:76:
                    a7:4c:9c:6d:67:d3:29:a8:36:eb:90:6a:bd:c0:6b:
                    57:52:1b:2f:b1:7b:b1:7a:0c:a5:f4:71:40:73:f7:
                    66:f4:3d:20:ec:c3:a1:f1:92:53:37:2b:11:0d:9d:
                    19:99:89:bb:20:f1:31:00:cc:d8:c7:72:ef:d9:57:
                    2e:c7:39:93:61:0c:e8:86:af:ec:4e:61:d3:e5:d2:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A5:1F:02:67:CC:0C:E7:9D:1A:30:31:5C:51:4B:10:D6:78:A9:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d3bdb23-29ba-3ed2-95db-087bd1ce079a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:7a:0d:ef:9e:b9:b9:62:3c:23:af:db:6c:97:f2:fb:21:
         b8:f8:72:4f:91:25:ce:f5:f3:eb:07:e3:a0:14:7a:08:2c:cb:
         aa:2f:ba:09:4c:fc:4b:3c:6d:b6:fc:ba:54:84:b9:61:90:6d:
         ae:d8:94:73:e9:57:ab:47:89:94:6c:e8:ce:c8:a0:a4:23:b5:
         e6:7b:61:f6:2d:b7:64:fb:dd:18:fa:c8:73:61:87:0a:e5:bb:
         6f:a0:6b:96:30:2e:86:db:e5:cf:5f:ac:68:d1:37:27:72:71:
         5a:08:c0:a8:78:5d:35:f0:da:33:9a:c3:39:ef:1c:09:09:30:
         4b:de:35:e5:21:27:63:b9:a3:91:78:14:01:f8:2f:f8:2b:35:
         cf:f3:1b:dd:42:02:01:77:86:a7:37:b7:67:d0:6f:ca:ad:ec:
         63:67:61:a4:01:ea:e5:bc:02:0b:a0:e6:8e:46:ed:69:20:b5:
         34:22:8e:00:b8:40:c1:eb:32:bd:5a:81:38:23:f8:40:54:74:
         a4:4e:62:29:b3:84:73:81:48:d4:b6:3c:f9:e6:a9:b1:f3:ff:
         0b:4c:98:19:00:75:86:86:d5:62:88:9a:96:9a:7c:08:9b:7c:
         d2:4c:f0:3e:e3:af:79:8f:b1:d7:6b:0a:6a:e3:44:dd:f9:f5:
         2a:53:ad:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkux62V08Y2hvJtSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZDE0ZmIxMTktMmMwNC00NjFjLTlhYzMtNjFiZTg3YmE1ZjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDJN+CZIpCK22grbAENZgpZJ5gvZQt2H8Y97
ZcMSHsTcongu0Txu5qAeg8OBRLVVSxAUkXVwje6gcot05Ye0GoKwNVXIRRWn5z1k
RswHmTrx5PnVcMfEN54eiCXgFKv1a9pIU6UrkezbNcSUzID8ydugtlDMwzxc7ErD
0w/kYux2tUBlylVB16ivcWaCbhe4rzzQHsw4njuHgKqQMg99ZgTnHwXFZv4IjWur
EqOT4WNdVHanTJxtZ9MpqDbrkGq9wGtXUhsvsXuxegyl9HFAc/dm9D0g7MOh8ZJT
NysRDZ0ZmYm7IPExAMzYx3Lv2VcuxzmTYQzohq/sTmHT5dJiLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKlHwJnzAznnRowMVxRSxDWeKm1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmQzYmRiMjMtMjliYS0z
ZWQyLTk1ZGItMDg3YmQxY2UwNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjpeg3vnrm5Yjwjr9tsl/L7Ibj4ck+RJc718+sH46AUeggsy6ovuglM
/Es8bbb8ulSEuWGQba7YlHPpV6tHiZRs6M7IoKQjteZ7YfYtt2T73Rj6yHNhhwrl
u2+ga5YwLobb5c9frGjRNydycVoIwKh4XTXw2jOawznvHAkJMEveNeUhJ2O5o5F4
FAH4L/grNc/zG91CAgF3hqc3t2fQb8qt7GNnYaQB6uW8Agug5o5G7WkgtTQijgC4
QMHrMr1agTgj+EBUdKROYimzhHOBSNS2PPnmqbHz/wtMmBkAdYaG1WKImpaafAib
fNJM8D7jr3mPsddrCmrjRN359SpTrXQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:18:20 2025 by rpki-client