Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30691290-f9ee-37a5-a28a-88cd30d8abf8.roa
File:                     30691290-f9ee-37a5-a28a-88cd30d8abf8.roa (raw, json)
Hash identifier:          03VrjJZ7dyd1n0C2cHH3l8mNIoBgcv8vBJpccgbnoZM=
Subject key identifier:   39:82:6D:A3:6D:9A:B8:B8:50:D8:43:9A:B9:D1:29:30:CA:2E:87:FF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1C113E67DE8AFDF17248
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30691290-f9ee-37a5-a28a-88cd30d8abf8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:1c:11:3e:67:de:8a:fd:f1:72:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=77b3a16b-29ab-413f-b00e-bf3aa3a4ec7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:41:80:19:cb:10:7e:9b:89:87:27:c0:d2:72:
                    fc:30:8e:40:65:8b:51:25:00:22:b4:59:e4:7f:ef:
                    e8:2f:c8:09:f4:a9:26:59:4b:c6:8f:8a:1d:37:05:
                    05:21:36:00:a8:a5:43:ee:50:6b:13:47:4f:5c:3d:
                    ac:7c:58:90:95:cf:da:18:00:4d:a2:54:2c:d6:61:
                    28:56:bd:95:bd:83:60:88:6c:30:7f:1c:d3:6f:bc:
                    cd:6f:5a:9f:0c:dc:c8:e2:91:f9:a6:b3:40:d7:84:
                    3c:a6:ba:95:07:6a:2f:3e:1a:04:c7:ed:f4:46:5f:
                    81:78:ac:f0:27:d4:d7:86:2f:d4:09:04:bc:e3:f0:
                    5c:57:90:fb:30:6b:ba:fd:ff:46:ed:cf:29:eb:d4:
                    5a:89:57:86:a4:e9:6e:c7:24:4a:7a:6b:73:0b:63:
                    e4:a3:94:b7:23:54:86:92:d8:d5:5e:aa:c7:54:eb:
                    a7:93:59:8e:cc:87:cc:72:1d:64:a3:bf:d1:0a:5a:
                    89:10:b5:6a:fd:10:ab:c8:5d:27:8e:f0:a3:67:d9:
                    0f:bf:ff:5c:cd:4a:d0:5f:95:0f:cb:a3:4f:ca:b9:
                    cb:a5:99:e2:3c:a3:53:d7:5b:87:96:3e:51:91:37:
                    e6:b3:fc:90:4e:57:44:a6:f7:11:29:f2:a1:e2:98:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:82:6D:A3:6D:9A:B8:B8:50:D8:43:9A:B9:D1:29:30:CA:2E:87:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30691290-f9ee-37a5-a28a-88cd30d8abf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:38:45:df:bc:11:d6:2b:68:7d:0e:97:c1:68:74:af:3e:
         bc:c4:70:8d:29:8f:da:46:17:3b:e9:c0:06:90:fe:f9:af:4e:
         69:73:a5:22:3a:3a:d8:9a:93:3b:ab:03:b4:d8:a9:eb:d2:71:
         23:8e:db:d1:ae:f9:63:6c:1a:28:68:c0:14:29:79:c5:80:09:
         8b:92:19:19:76:03:00:b7:2f:53:ee:d0:dc:1f:dc:de:83:d2:
         38:e1:91:64:07:10:5e:4e:f0:6c:28:5c:37:d2:f2:09:65:94:
         75:68:95:0b:fd:36:16:66:e0:f0:48:a1:8d:62:dc:65:f1:e4:
         95:3a:aa:41:82:13:62:86:0e:22:68:bf:99:fa:73:c4:62:0f:
         4b:cc:17:91:13:70:05:8f:9b:49:08:84:ee:9d:56:be:57:bd:
         a2:d8:28:88:11:53:f2:04:b4:00:2d:83:b0:4b:a3:5e:95:0d:
         57:8a:be:b8:92:7c:6b:6b:be:f9:15:3f:01:11:b7:e9:c4:2f:
         5d:0e:55:0c:34:a0:9b:a7:ef:29:87:76:f6:12:14:b4:76:80:
         90:2f:b1:d8:c8:b6:46:22:4a:03:d3:8b:11:42:ac:d1:3a:42:
         3d:b2:7b:9c:cc:a5:4d:01:10:1c:b8:57:d0:27:57:03:c8:63:
         f4:72:58:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuxwRPmfeiv3xckgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NzdiM2ExNmItMjlhYi00MTNmLWIwMGUtYmYzYWEzYTRlYzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUGAGcsQfpuJhyfA0nL8MI5AZYtRJQAitFnk
f+/oL8gJ9KkmWUvGj4odNwUFITYAqKVD7lBrE0dPXD2sfFiQlc/aGABNolQs1mEo
Vr2VvYNgiGwwfxzTb7zNb1qfDNzI4pH5prNA14Q8prqVB2ovPhoEx+30Rl+BeKzw
J9TXhi/UCQS84/BcV5D7MGu6/f9G7c8p69RaiVeGpOluxyRKemtzC2Pko5S3I1SG
ktjVXqrHVOunk1mOzIfMch1ko7/RClqJELVq/RCryF0njvCjZ9kPv/9czUrQX5UP
y6NPyrnLpZniPKNT11uHlj5RkTfms/yQTldEpvcRKfKh4phzDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmCbaNtmri4UNhDmrnRKTDKLof/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzA2OTEyOTAtZjllZS0z
N2E1LWEyOGEtODhjZDMwZDhhYmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1EOEXfvBHWK2h9DpfBaHSvPrzEcI0pj9pGFzvpwAaQ/vmvTmlzpSI6
OtiakzurA7TYqevScSOO29Gu+WNsGihowBQpecWACYuSGRl2AwC3L1Pu0Nwf3N6D
0jjhkWQHEF5O8GwoXDfS8glllHVolQv9NhZm4PBIoY1i3GXx5JU6qkGCE2KGDiJo
v5n6c8RiD0vMF5ETcAWPm0kIhO6dVr5XvaLYKIgRU/IEtAAtg7BLo16VDVeKvriS
fGtrvvkVPwERt+nEL10OVQw0oJun7ymHdvYSFLR2gJAvsdjItkYiSgPTixFCrNE6
Qj2ye5zMpU0BEBy4V9AnVwPIY/RyWIg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:10:33 2025 by rpki-client