Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1527511c-3ec2-3287-86a0-6542e1167711.roa
File:                     1527511c-3ec2-3287-86a0-6542e1167711.roa (raw, json)
Hash identifier:          psHgZ+VpQXnrbwS68kM8TcW71wpSmsI/PmZAkmlJZTw=
Subject key identifier:   FE:89:30:94:1D:16:14:04:F6:2F:52:46:E6:4B:CD:84:A7:C3:E7:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A670A0815C01662796A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1527511c-3ec2-3287-86a0-6542e1167711.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:67:0a:08:15:c0:16:62:79:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ad3398df-fc09-497d-b5d0-ccf614b3bc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:95:28:39:61:8f:d0:f2:0f:a4:5f:61:fa:
                    fa:89:0b:66:7e:55:b4:8a:7c:f3:fa:7c:95:0e:22:
                    b8:f0:1f:cc:93:8b:5e:ff:a9:6e:f3:7e:38:52:9d:
                    c4:35:9b:f8:16:88:11:33:52:c8:09:d0:3b:f9:da:
                    7c:1d:84:62:54:6c:0b:af:af:26:d9:86:73:84:f3:
                    60:89:b0:ea:cb:74:6e:91:be:ad:a6:8f:98:45:d6:
                    58:63:9e:7c:c5:7d:63:ab:62:07:a7:52:7f:f9:47:
                    66:ca:6d:46:64:37:de:4b:e1:b1:11:2e:68:c2:2e:
                    79:0c:31:d7:d3:81:93:89:4a:df:e3:2a:ac:32:70:
                    a1:3b:77:5b:9a:ea:21:92:c7:66:80:76:3c:8a:30:
                    2d:1b:88:ad:59:40:68:a3:ce:54:0b:f8:a4:54:d3:
                    e4:c5:d9:ce:d5:56:94:18:73:4c:0e:d8:4c:6b:c5:
                    28:27:05:a3:47:de:cb:66:eb:90:25:19:b2:ca:35:
                    9b:5b:1d:9e:65:d6:a7:04:24:f0:1c:72:97:68:84:
                    55:10:20:bc:1f:81:99:52:da:89:3d:d0:9c:d7:25:
                    2d:a0:ae:7f:29:3d:97:73:c7:38:e9:4d:55:8b:3b:
                    6b:96:d7:32:be:b1:ed:52:a8:37:93:1a:3e:d4:8e:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:89:30:94:1D:16:14:04:F6:2F:52:46:E6:4B:CD:84:A7:C3:E7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1527511c-3ec2-3287-86a0-6542e1167711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:09:d1:e1:ef:75:ef:c6:40:f2:25:fe:91:0f:13:47:ce:
         95:ff:e8:8c:bc:3e:d5:77:a5:fc:80:61:83:a3:88:37:80:c7:
         72:dd:45:8e:a5:d8:ef:92:fa:86:98:23:41:ae:a3:5e:70:4c:
         9f:81:d6:c2:a1:89:ae:d3:74:f8:dd:22:15:5e:a5:8c:ef:57:
         ff:32:9b:a3:fe:83:71:7d:d8:9d:88:00:55:80:d3:4a:b8:8a:
         d9:f1:fb:8d:2b:51:6e:31:11:62:fc:08:36:21:47:63:94:19:
         47:92:84:a8:fd:b2:4d:87:09:f3:4d:91:bc:e0:61:22:4e:27:
         6f:a3:81:8b:d9:4b:e8:ff:df:ee:b8:e2:57:2c:4e:8d:6c:52:
         a6:bd:22:01:39:c9:d1:cf:d4:89:72:75:ee:ac:36:c1:de:b1:
         2c:9b:16:f9:ec:36:aa:29:51:b3:67:39:e7:7a:1d:21:34:ba:
         ab:7e:d3:59:2c:2d:97:ef:72:76:6a:9c:85:00:e6:80:d1:dc:
         2e:2f:2e:2d:79:5d:9e:34:6f:d8:97:af:44:8b:7b:16:d7:4b:
         14:ae:d3:de:24:94:49:9c:f6:dc:3f:d7:56:ef:65:14:bf:15:
         d4:a4:03:94:95:02:b6:76:b4:84:4e:20:cb:ee:c0:85:fb:92:
         17:af:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:02 2024 by rpki-client on console-fra.rpki-client.org