Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa
File:                     12b40f97-543d-3383-8955-a199391a3d00.roa (raw, json)
Hash identifier:          00tNGI6W8+RfhmdAu3zCoAJ9Vnai1KS76Gj4GI2/I4Q=
Subject key identifier:   EC:E3:4B:89:B9:CC:02:50:DF:98:5B:1C:A8:E6:81:2B:2C:0C:B4:20
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F43285849C904D4A3714357E17F022A00
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     979
IP address blocks:        96.43.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:d4:a3:71:43:57:e1:7f:02:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=efd7192b-6a2c-45a2-b8a2-cb8a85683856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:92:79:e5:bb:cf:94:89:84:a5:94:93:d2:
                    c5:64:18:dc:d3:d6:0d:71:14:2e:5a:1d:92:8c:af:
                    00:06:41:82:cb:bc:70:14:a8:b8:61:fc:76:c0:9a:
                    1e:eb:cf:92:f3:b3:0b:a5:5a:5c:57:54:03:3b:64:
                    a8:7d:d6:ca:75:60:e1:c9:b4:b3:4c:5b:27:ba:e8:
                    ad:44:c9:e0:a0:82:2c:bd:d5:e1:d9:82:79:52:01:
                    cb:c5:16:a4:25:27:c9:33:ae:d7:1c:da:cc:31:ba:
                    22:be:e1:f8:d6:40:c3:5c:ce:35:03:70:c6:19:9e:
                    0d:f5:3b:b8:f1:6d:07:28:4d:62:52:2f:dc:87:95:
                    11:1e:0e:ae:b9:0c:e8:d1:1a:3b:81:28:7e:5b:c0:
                    28:f8:e2:ed:ce:32:a7:44:2f:06:ec:68:e0:50:41:
                    35:8e:42:d2:6d:c1:31:96:18:40:8a:70:a4:10:74:
                    93:2e:5d:02:5d:45:ff:3b:98:b7:b0:08:3b:d5:9f:
                    d4:56:ca:8f:60:f9:08:e5:b7:6d:2c:11:03:e8:de:
                    cf:04:ce:cd:72:58:9c:69:fe:47:27:7b:42:cd:77:
                    dd:60:5f:21:82:6b:11:40:3a:dd:0a:23:41:a4:ed:
                    15:8c:c8:ad:74:0c:d2:83:27:08:90:d8:df:dd:d5:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E3:4B:89:B9:CC:02:50:DF:98:5B:1C:A8:E6:81:2B:2C:0C:B4:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:50:d6:84:bc:2c:43:8c:e0:3d:b1:90:a7:5e:53:35:18:
         54:91:10:2e:ec:f4:2a:0d:f6:f5:f3:2c:f2:34:ae:c3:ba:18:
         1c:1a:97:d4:7c:0b:e8:bf:de:bc:92:89:6e:07:81:2a:e5:f7:
         d9:ec:dd:18:f5:c2:13:db:af:78:17:2d:12:fd:af:78:f6:00:
         14:49:9b:ea:ba:98:77:69:56:5c:f5:9a:0a:22:c1:c2:96:26:
         f2:2d:92:71:68:64:2d:04:26:16:b8:dd:73:05:9e:ec:8a:1e:
         11:79:fb:26:c0:fe:ac:21:a7:e9:87:9c:fa:1c:d6:15:d4:da:
         ca:f1:90:ee:95:2f:d5:01:f5:7f:d3:fb:0a:11:af:29:c6:64:
         72:a6:d1:af:71:14:8f:2e:4b:d2:74:6e:49:ff:3e:b1:c2:c8:
         80:3a:b2:0c:ad:36:b2:8b:6a:83:a5:bf:ab:87:22:ac:7d:9a:
         4d:16:55:51:25:65:3e:a1:fb:25:e4:e9:14:ab:ff:9e:e9:ff:
         0c:16:3a:b1:41:ef:76:ed:3c:35:ea:c3:02:cb:d2:eb:3d:e4:
         a8:62:1d:1d:3b:45:d6:50:98:00:fb:c7:06:49:44:71:28:de:
         50:4f:04:da:85:d8:5c:36:a2:92:ad:24:99:cd:15:7a:8e:a0:
         d6:73:b3:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBNSjcUNX4X8CKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZWZkNzE5MmItNmEyYy00NWEyLWI4YTItY2I4YTg1NjgzODU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncOSeeW7z5SJhKWUk9LFZBjc09YNcRQuWh2S
jK8ABkGCy7xwFKi4Yfx2wJoe68+S87MLpVpcV1QDO2SofdbKdWDhybSzTFsnuuit
RMngoIIsvdXh2YJ5UgHLxRakJSfJM67XHNrMMboivuH41kDDXM41A3DGGZ4N9Tu4
8W0HKE1iUi/ch5URHg6uuQzo0Ro7gSh+W8Ao+OLtzjKnRC8G7GjgUEE1jkLSbcEx
lhhAinCkEHSTLl0CXUX/O5i3sAg71Z/UVsqPYPkI5bdtLBED6N7PBM7Nclicaf5H
J3tCzXfdYF8hgmsRQDrdCiNBpO0VjMitdAzSgycIkNjf3dWEIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzjS4m5zAJQ35hbHKjmgSssDLQgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMTJiNDBmOTctNTQzZC0z
MzgzLTg5NTUtYTE5OTM5MWEzZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHUUNaEvCxDjOA9sZCnXlM1GFSREC7s9CoN9vXzLPI0rsO6GBwal9R8
C+i/3rySiW4HgSrl99ns3Rj1whPbr3gXLRL9r3j2ABRJm+q6mHdpVlz1mgoiwcKW
JvItknFoZC0EJha43XMFnuyKHhF5+ybA/qwhp+mHnPoc1hXU2srxkO6VL9UB9X/T
+woRrynGZHKm0a9xFI8uS9J0bkn/PrHCyIA6sgytNrKLaoOlv6uHIqx9mk0WVVEl
ZT6h+yXk6RSr/57p/wwWOrFB73btPDXqwwLL0us95KhiHR07RdZQmAD7xwZJRHEo
3lBPBNqF2Fw2opKtJJnNFXqOoNZzs5I=
-----END CERTIFICATE-----
Generated at Sun May 11 15:16:28 2025 by rpki-client