Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dd4721d-7cb3-3458-9d72-8a777844df02.roa
File:                     4dd4721d-7cb3-3458-9d72-8a777844df02.roa (raw, json)
Hash identifier:          PPjNZA/L+Ur16OyouCBO4togGntvFZ0YDir30twqDb4=
Subject key identifier:   62:BF:FF:83:96:3A:85:28:6B:55:F2:CB:A6:1C:A6:61:56:BE:C6:62
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7E79038228D211C5D600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dd4721d-7cb3-3458-9d72-8a777844df02.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7e:79:03:82:28:d2:11:c5:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=37ffaefb-b8af-4776-b387-1e1e0bb69bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:18:ee:e2:2e:e7:03:e6:ca:9a:41:19:4b:
                    30:60:61:e5:6f:fb:32:35:b8:4d:e7:f9:d9:0c:7f:
                    13:96:1a:c7:45:85:26:fa:89:bf:1b:a1:6d:5a:91:
                    93:81:44:79:47:23:aa:27:04:ff:2c:a7:0a:64:16:
                    74:f3:74:c3:72:a6:9b:e1:2d:c3:14:87:a0:56:32:
                    8b:e8:b3:6c:c6:17:a2:48:b7:ae:32:32:c2:13:af:
                    28:e2:57:dd:f8:c7:4f:8d:d8:bb:31:d8:df:f7:93:
                    ba:c9:5f:47:95:c6:4f:1a:85:29:57:be:25:cb:d1:
                    a2:2c:f2:dd:b6:f3:a0:36:3c:1d:b0:73:6c:dd:c6:
                    2e:5a:7a:3c:f3:19:35:fc:6e:ff:74:2a:e4:76:be:
                    2a:fd:4f:77:4b:61:14:7a:d3:d3:6d:d8:fa:2f:c2:
                    54:08:c5:de:9e:2c:6c:e7:03:1b:03:e0:41:9b:66:
                    4e:d1:2a:2d:0f:4c:6e:51:d5:03:97:e5:21:0a:5e:
                    5d:65:05:03:82:fb:f3:a9:53:f5:84:9a:02:0f:ad:
                    41:d0:dd:40:36:36:5b:40:e8:55:51:e2:12:a9:c4:
                    4f:f4:f4:04:13:57:d2:f7:8b:de:9c:6e:5c:94:e8:
                    b9:f6:a2:68:a2:24:cc:20:81:03:3c:e8:b1:e2:d8:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:FF:83:96:3A:85:28:6B:55:F2:CB:A6:1C:A6:61:56:BE:C6:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dd4721d-7cb3-3458-9d72-8a777844df02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:18:25:b2:50:bd:e6:37:14:4c:a5:61:92:40:c6:15:5a:63:
         c7:4e:06:b1:16:fb:d7:db:54:9c:e1:0f:5e:63:b9:1f:8f:d4:
         0a:77:40:2f:f4:a5:14:59:a7:15:1c:53:b5:62:41:9e:2d:01:
         46:06:5b:af:b1:a2:34:a4:76:6f:48:c3:b6:42:28:88:5b:0a:
         3f:dd:e5:91:c1:32:e9:60:24:a3:c2:9e:9f:56:0e:aa:95:65:
         67:86:07:92:62:a7:a8:41:f9:06:ee:49:91:b2:c0:09:60:40:
         59:20:97:b6:76:33:39:44:52:5e:e8:76:5d:21:f7:93:be:1a:
         4b:02:95:61:0f:fc:2a:d4:af:ba:1c:86:f1:4c:51:04:17:ce:
         31:3a:54:df:2c:81:c8:37:4e:6c:a7:6a:24:d9:d2:90:4e:3b:
         68:ba:a7:81:fe:06:5d:d6:a6:71:bc:d2:4b:8f:3a:74:ea:a1:
         dd:8a:6d:25:08:e7:79:c5:92:a8:4e:a2:c4:61:bd:e3:90:37:
         0a:ce:1f:31:c4:e1:42:fb:7d:07:1b:07:f1:f0:7f:4c:5e:26:
         85:bb:80:87:6e:62:39:52:fa:71:02:68:f2:51:e5:09:10:f6:
         09:f6:89:28:b9:07:24:e5:4a:6e:9d:d6:6c:ca:7b:7e:b9:39:
         2a:94:65:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkun55A4Io0hHF1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MzdmZmFlZmItYjhhZi00Nzc2LWIzODctMWUxZTBiYjY5YmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvUY7uIu5wPmyppBGUswYGHlb/syNbhN5/nZ
DH8TlhrHRYUm+om/G6FtWpGTgUR5RyOqJwT/LKcKZBZ083TDcqab4S3DFIegVjKL
6LNsxheiSLeuMjLCE68o4lfd+MdPjdi7Mdjf95O6yV9HlcZPGoUpV74ly9GiLPLd
tvOgNjwdsHNs3cYuWno88xk1/G7/dCrkdr4q/U93S2EUetPTbdj6L8JUCMXenixs
5wMbA+BBm2ZO0SotD0xuUdUDl+UhCl5dZQUDgvvzqVP1hJoCD61B0N1ANjZbQOhV
UeISqcRP9PQEE1fS94venG5clOi59qJooiTMIIEDPOix4tjKwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGK//4OWOoUoa1Xyy6YcpmFWvsZiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGRkNDcyMWQtN2NiMy0z
NDU4LTlkNzItOGE3Nzc4NDRkZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALgYJbJQveY3FEylYZJAxhVaY8dOBrEW+9fbVJzhD15juR+P1Ap3QC/0
pRRZpxUcU7ViQZ4tAUYGW6+xojSkdm9Iw7ZCKIhbCj/d5ZHBMulgJKPCnp9WDqqV
ZWeGB5Jip6hB+QbuSZGywAlgQFkgl7Z2MzlEUl7odl0h95O+GksClWEP/CrUr7oc
hvFMUQQXzjE6VN8sgcg3TmynaiTZ0pBOO2i6p4H+Bl3WpnG80kuPOnTqod2KbSUI
53nFkqhOosRhveOQNwrOHzHE4UL7fQcbB/Hwf0xeJoW7gIduYjlS+nECaPJR5QkQ
9gn2iSi5ByTlSm6d1mzKe365OSqUZTQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:38:37 2025 by rpki-client