Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e38056d-c8c0-3983-b8a9-ee3cb31feb8d.roa
File:                     0e38056d-c8c0-3983-b8a9-ee3cb31feb8d.roa (raw, json)
Hash identifier:          ZVfeg6eEzzzpvSq1HQqElXgMHkH/8SJagfDJOHi0GX4=
Subject key identifier:   10:AC:BB:A2:ED:BB:27:12:E8:04:1C:D8:0B:54:35:E5:0F:07:2F:FA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DB41BCA21F4C7CA1CE000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e38056d-c8c0-3983-b8a9-ee3cb31feb8d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:b4:1b:ca:21:f4:c7:ca:1c:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6f1091c2-868c-4d7f-8567-aeffd2b4a98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:b8:54:b6:8f:5a:b6:b1:89:fc:ac:ef:c7:
                    e8:c2:18:fe:3a:fd:cc:27:e2:cb:05:91:78:c1:ae:
                    04:8d:b0:8a:4d:4d:dc:1a:09:22:72:da:be:3e:03:
                    5a:0e:96:01:99:98:36:b2:da:20:2a:88:aa:63:9f:
                    7c:38:34:76:7c:3c:55:91:17:cd:34:5c:14:53:b8:
                    b5:b5:bc:18:a3:9d:2a:f4:39:d7:b1:16:3a:87:eb:
                    01:a0:cb:82:63:0e:8f:7e:e8:7b:27:a4:74:2f:43:
                    92:ab:3e:d8:81:ad:43:36:49:dc:e8:ce:f4:23:2e:
                    6b:f0:7e:ce:ae:2c:1d:79:08:e2:4f:dc:88:16:76:
                    3a:3c:27:09:f6:af:49:40:82:e6:6e:55:e7:af:10:
                    eb:32:10:4f:ab:61:66:22:c0:5e:ed:1c:64:35:61:
                    01:4b:39:bc:71:3f:f0:0c:18:bb:df:53:b7:4d:d5:
                    a4:fb:ce:7c:ca:a5:3e:b1:61:0e:33:53:1b:e8:4c:
                    bf:d0:1f:0f:d8:6d:6c:00:d3:93:c4:f9:1f:8f:cf:
                    39:49:24:e6:2a:17:0f:9a:e2:1d:3d:29:48:72:b7:
                    b9:c0:ac:34:f6:22:59:c3:26:88:49:ae:36:49:aa:
                    4a:78:5d:b9:75:f1:c8:bf:8d:e3:60:d6:cf:a5:fa:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:BB:A2:ED:BB:27:12:E8:04:1C:D8:0B:54:35:E5:0F:07:2F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e38056d-c8c0-3983-b8a9-ee3cb31feb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:b3:29:9e:da:1e:a8:29:78:b4:67:8e:fd:b9:21:0b:53:
         fe:de:ab:d7:cb:63:a2:51:b7:0a:5b:7a:7c:f5:22:ca:fb:3b:
         8b:01:45:91:7e:e6:20:0c:e5:3b:6a:4d:22:74:b2:10:fe:bd:
         0e:f5:12:34:b8:55:77:6b:95:a7:db:2c:f5:6b:bc:52:95:00:
         a3:c6:57:5f:ab:13:a9:1b:24:4e:1b:12:b0:2e:eb:97:0b:51:
         d3:6d:0a:b7:83:bb:0e:9c:2e:05:d5:4e:1b:18:0e:2d:15:1a:
         57:02:2e:cb:b0:38:f0:12:3e:ff:c2:37:0f:4c:fe:84:83:2f:
         a7:9f:c0:d7:5e:63:4c:ec:6d:1f:86:e4:b1:71:5a:af:1d:3a:
         45:e7:16:51:69:52:b0:49:3f:3a:17:0d:70:84:dc:c6:5a:47:
         4d:1f:b1:48:cd:70:a6:a1:f2:e4:70:78:4c:75:fe:46:84:0c:
         2d:78:bd:56:a2:f3:e2:b1:34:4a:eb:88:cd:59:0d:77:9e:ba:
         5e:38:bb:0f:57:77:23:3e:56:10:6b:ec:51:67:3a:ab:9e:fa:
         78:b5:5c:f4:88:5b:ce:02:7a:0d:92:7a:61:5a:e4:b7:a0:4d:
         e3:0c:69:71:6f:3c:30:2d:b5:1c:1e:12:18:d0:81:30:47:94:
         e4:7a:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:00 2024 by rpki-client on console-fra.rpki-client.org