Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/2c08f8b6-b286-3631-96f0-1489439c26e7.roa
File:                     2c08f8b6-b286-3631-96f0-1489439c26e7.roa (raw, json)
Hash identifier:          QKiCWFJsPQyrLYC+kz/+E4wFQFqeyNZac4opsxM+7dQ=
Subject key identifier:   D4:04:1B:00:29:52:B7:36:F4:3B:10:1D:57:E2:D8:F1:F0:03:4E:D1
Certificate issuer:       /CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
Certificate serial:       010D0C9F43285844F5CAA1CD067A5328B96491E0
Authority key identifier: 91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/2c08f8b6-b286-3631-96f0-1489439c26e7.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     396982
IP address blocks:        199.244.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:a1:cd:06:7a:53:28:b9:64:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=7564e388-cdf8-4fe9-a6d2-dd59ee4b2ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:d5:50:2c:cf:06:ee:b5:2f:ee:ff:f3:ea:
                    65:20:40:f5:b0:95:61:f8:02:f3:55:f4:90:dd:8c:
                    c8:9f:09:1d:96:63:ec:90:0d:c2:1e:e3:8e:8f:16:
                    2c:2a:e7:5c:40:0c:f3:0a:79:b8:05:79:29:12:65:
                    71:f9:7d:6a:5b:93:c5:ba:64:2d:f5:69:f9:c4:da:
                    d7:2d:f2:bf:e0:c0:01:e5:06:cb:44:c9:6e:de:6c:
                    9b:03:55:04:ff:e8:ee:ba:73:d3:e8:73:fa:e2:c2:
                    65:6d:c2:60:d5:0e:82:f8:37:f8:bc:68:7c:0f:d0:
                    a6:4f:a2:17:e2:c3:2e:a5:45:38:cb:bd:7d:ea:ed:
                    c1:77:a5:0c:16:4d:7c:a3:22:42:b5:f3:a9:9f:91:
                    a7:42:66:f7:d6:89:e4:b0:69:49:9d:13:fa:f1:5b:
                    c1:c8:cd:41:91:80:16:0d:b0:0a:ea:12:63:44:9d:
                    9a:1e:49:22:98:81:43:b4:a8:40:83:63:32:a6:30:
                    e2:89:43:ad:f0:d5:d8:f7:ce:9a:af:5a:e2:c0:41:
                    ab:28:bf:61:79:f1:9b:a0:8d:0b:9e:3b:4f:53:5f:
                    f5:3c:c6:bf:b7:8a:fa:16:fd:1a:4c:26:03:5e:7c:
                    e7:39:5f:4b:33:1c:33:31:56:5b:c0:a4:46:16:8a:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:1B:00:29:52:B7:36:F4:3B:10:1D:57:E2:D8:F1:F0:03:4E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/2c08f8b6-b286-3631-96f0-1489439c26e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl

            X509v3 Authority Key Identifier:
                keyid:91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:ad:3b:8a:19:b1:4e:ea:0d:a3:c9:d7:2f:95:c8:85:9e:
         71:59:02:22:1f:9e:f2:00:af:d5:23:44:e4:9a:fb:9b:29:d2:
         6c:1b:72:cb:e1:b4:09:ed:fa:03:5b:3a:1a:ed:2e:5e:59:6a:
         06:38:73:0d:db:78:dc:d0:3a:9c:25:c2:fd:d0:9f:89:56:1a:
         6a:43:d6:25:da:a9:b9:eb:e4:83:2a:45:73:46:4c:80:09:13:
         fa:71:15:fb:45:84:68:0a:ea:38:ee:d9:d4:42:bd:99:60:ae:
         b9:7b:fb:cb:75:0b:d6:52:8f:09:17:0a:9e:15:fb:d7:88:b5:
         ac:8f:62:31:4d:a1:1e:aa:ef:9e:37:a0:23:79:8e:fc:ce:84:
         e4:41:23:58:31:e5:7c:d8:a9:bd:ad:b8:0a:bb:ca:f6:ce:c8:
         10:61:4d:2e:0a:00:26:3a:54:02:40:cf:94:64:0e:70:9f:f1:
         b5:38:5b:18:d4:01:8f:c3:c0:6c:4f:6b:a6:54:43:3b:f1:99:
         44:ef:f2:5e:6e:87:8c:cd:a1:37:03:a9:24:76:1a:cf:e8:f9:
         29:12:b9:3a:e7:e5:bb:16:d7:c1:d6:b5:52:8c:75:80:4c:8e:
         34:f8:00:37:34:15:64:1b:50:ae:fe:82:ca:1a:5a:f2:98:ab:
         dd:f2:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:50 2024 by rpki-client on console-fra.rpki-client.org