Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa
File:                     14b2c634-3c52-31a5-b354-a6a662443b39.roa (raw, json)
Hash identifier:          USnh7zSusMDtXKG8f5sGdMYUqb5oGBvEIOGzJLtq4CY=
Subject key identifier:   C6:5D:6E:99:6F:EE:98:5A:79:23:74:1D:C9:DE:EC:DA:C8:26:1F:5E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A67F5DC653BF00A40A440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:67:f5:dc:65:3b:f0:0a:40:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=139e774c-be9f-4b2a-be6a-6256d2b34015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:dc:c0:06:ed:35:39:55:6c:18:83:41:b4:
                    f1:e1:62:3e:56:b0:ac:7d:a0:19:74:71:6b:b4:58:
                    f1:0e:1a:33:73:a4:c1:40:43:8a:17:e1:c1:4e:de:
                    82:bd:23:4a:92:4c:1b:49:0d:cc:4a:ba:c6:e0:19:
                    b1:e9:eb:f8:8c:0d:6e:1c:46:a3:2f:ea:79:a0:89:
                    c3:f2:d8:5d:9b:a7:f7:f2:a6:e3:05:6a:1b:1d:40:
                    be:27:79:6d:d3:f9:8c:9d:44:35:df:22:26:fc:07:
                    9d:a1:00:1a:3c:04:7c:45:4e:23:6d:0c:9a:63:30:
                    d9:e8:55:2a:7e:47:0d:d9:80:91:68:a4:b2:42:5a:
                    b4:ad:58:14:76:b5:cb:5c:5d:d9:27:da:41:fc:2c:
                    05:3b:7a:bf:2a:e1:4b:c6:f8:76:43:ae:92:73:cc:
                    03:9e:8b:25:a0:2c:34:a1:87:24:ac:37:0b:7f:9c:
                    14:4b:04:14:c3:1f:4e:ab:60:c5:e6:75:ba:1f:d6:
                    3b:20:d2:fe:46:0d:f2:da:29:b2:da:1c:a3:35:27:
                    08:9e:ce:25:79:a9:67:c2:ba:e0:72:7a:56:12:a5:
                    20:43:09:26:fb:32:04:68:3a:d7:d4:74:53:dc:3b:
                    3e:e5:d8:8b:e2:2f:48:81:da:ac:1e:69:2d:cb:29:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:6E:99:6F:EE:98:5A:79:23:74:1D:C9:DE:EC:DA:C8:26:1F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e6:e5:2d:09:36:78:e6:e2:87:63:28:0a:a8:17:0b:d2:af:
         87:3f:57:a1:48:75:be:1d:39:67:36:5f:e5:de:f6:96:e3:f9:
         93:1b:25:1e:87:2e:d3:a7:79:ab:82:93:dc:5a:c1:a1:ce:fe:
         16:24:6a:df:7e:3b:96:a5:69:09:b6:03:d4:8e:dc:aa:c6:f1:
         ea:b6:b1:6d:6b:84:39:2a:f5:cc:c0:d3:1a:be:a7:5d:74:ef:
         85:19:16:86:69:91:0f:8a:d3:2d:fe:47:fe:46:df:18:f2:9e:
         7d:ce:e9:82:7f:fc:78:e6:24:79:6c:c2:a9:e8:a6:4d:f5:e1:
         d9:54:7c:b9:a4:a2:b5:3f:19:af:ba:e7:a4:77:8a:03:9e:a9:
         50:a1:45:02:69:09:a7:7e:5a:dd:56:0d:7b:e9:5d:43:29:60:
         a2:31:de:93:8e:a1:df:32:4f:5e:24:02:4f:21:67:3d:56:e2:
         c6:7e:d6:de:34:ea:39:20:0f:aa:ab:cc:1a:59:b0:a7:6b:3d:
         bb:fc:09:0f:e4:31:95:e7:7b:48:ac:77:99:ec:59:0f:99:28:
         32:6b:53:04:41:f5:c1:59:3f:12:3f:3c:8a:c4:4b:0f:c9:8a:
         4f:94:89:2b:b6:18:97:4e:50:6c:17:3a:10:66:a7:c6:23:f8:
         43:09:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:42 2024 by rpki-client on console-ams.rpki-client.org