Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173dec05-25b0-3c8c-99be-ceb9975978f7.roa
File:                     173dec05-25b0-3c8c-99be-ceb9975978f7.roa (raw, json)
Hash identifier:          TBJs70I/rpr/x+Plav7oC4sO3KOSBOkgMTJJ9ydO9c4=
Subject key identifier:   CD:96:EB:BC:CB:BA:AC:7B:B1:0E:4B:23:7A:41:3C:C2:04:10:30:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A64DC3405BF15745D20C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173dec05-25b0-3c8c-99be-ceb9975978f7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:64:dc:34:05:bf:15:74:5d:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=76742cd1-d243-4009-a992-0d7c5a51a2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:1f:c1:7f:6e:5c:e6:61:cc:68:d6:57:07:
                    50:50:e8:2b:91:2f:0e:33:4e:27:b6:4c:fa:25:45:
                    1c:15:8d:11:9b:3e:b3:4e:6d:3f:fb:55:3f:f9:cb:
                    1e:4e:f7:e1:60:6b:8b:51:9e:7f:28:71:73:20:55:
                    e7:57:70:25:9a:16:23:d8:9b:7b:2c:20:6e:53:e7:
                    29:ca:17:e5:9f:53:f8:be:ca:10:fc:a5:71:55:db:
                    9c:83:be:c8:65:53:46:9f:00:a0:ae:f2:09:6a:a2:
                    ac:87:41:34:1d:37:04:17:65:d8:ae:a0:fb:c1:2e:
                    29:24:65:92:1c:fd:02:21:5e:a4:5d:18:6d:8b:08:
                    89:17:c2:ea:66:0c:50:d5:51:c0:37:7f:b4:16:b6:
                    bb:e9:9a:f8:20:91:2b:5f:bf:1f:2e:fc:9b:1e:0f:
                    d3:9f:9d:2b:e5:de:21:5e:62:2a:b5:b5:9c:c6:a5:
                    85:80:9b:e5:7f:83:7e:79:3e:8d:c7:a8:7a:c3:bd:
                    8b:d7:80:19:b2:5e:2d:c3:5c:33:30:d5:d2:bf:5c:
                    94:57:0b:a1:1e:8b:f0:70:3b:76:b6:0d:94:80:81:
                    56:9f:66:d3:2f:9f:e1:5e:a9:62:21:36:45:d8:e4:
                    60:7c:62:65:f5:0f:4f:ab:47:1d:40:28:5d:4a:39:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:96:EB:BC:CB:BA:AC:7B:B1:0E:4B:23:7A:41:3C:C2:04:10:30:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173dec05-25b0-3c8c-99be-ceb9975978f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:67:cd:4e:fe:39:f9:57:42:55:da:e9:e9:27:a4:31:82:cb:
         53:0d:1f:0d:e1:98:e1:2d:23:79:94:a4:6c:fb:d8:96:97:79:
         d2:ec:ed:a8:78:f6:e6:86:03:e5:94:93:0e:d9:a7:b3:40:aa:
         5f:2a:5a:7e:85:2d:de:a7:07:da:dd:4a:a5:08:ae:98:25:79:
         0d:0f:28:ac:46:90:de:95:50:10:39:d1:75:34:2d:d1:91:cb:
         af:6a:b3:64:5e:31:b0:a1:97:4c:55:33:cc:4d:de:2d:f0:1d:
         8b:40:53:e1:19:44:0a:73:ab:97:83:b4:77:51:45:08:5a:e2:
         b5:a5:94:11:fe:93:cc:6b:f8:ba:71:80:85:36:0d:f2:bd:15:
         e9:cd:fb:93:36:84:55:1a:d4:c8:ed:01:d0:39:70:07:e9:7e:
         19:31:71:b6:c5:d0:aa:5a:42:c6:fb:c4:c8:c2:e9:66:4f:42:
         76:e5:ee:95:74:cd:15:2e:65:3c:6b:ed:80:e8:96:9b:0d:a0:
         3d:a4:da:72:e5:a3:3d:44:76:4c:34:7f:95:b3:69:b1:17:28:
         cd:65:4f:fd:45:ed:2d:78:3b:4c:e8:be:11:e9:d2:77:ed:9f:
         e1:f3:73:a5:2a:a8:75:3e:c9:b2:68:27:63:d7:12:b8:26:cf:
         24:28:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:14 2024 by rpki-client on console-ams.rpki-client.org