Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9e5e5c-5164-3359-bd8e-49ea44b37370.roa
File:                     2a9e5e5c-5164-3359-bd8e-49ea44b37370.roa (raw, json)
Hash identifier:          GaK2FJitoPJ9VrLkSQvKVk3WR/FHZRkojpxf3IHRtzY=
Subject key identifier:   98:7B:39:4D:2E:13:6B:EA:F0:3D:81:47:3C:51:46:D7:26:D7:1D:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E284AB5779BCEFDB9F300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9e5e5c-5164-3359-bd8e-49ea44b37370.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:28:4a:b5:77:9b:ce:fd:b9:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=4d0f6bb2-97d9-4d24-8a38-eb9e07640d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:ab:ed:5b:0e:1b:c7:e9:d8:b6:80:dc:3b:
                    82:67:03:f4:18:9e:55:0c:7b:97:8e:de:06:8c:1f:
                    4d:80:ce:a7:86:e0:b0:9f:21:da:ba:8a:6c:b4:1a:
                    4a:7b:5f:d5:98:fc:03:cf:0b:f7:ab:bd:23:39:e4:
                    d9:d1:6e:b9:4c:3b:3c:f8:15:3b:26:08:74:dc:7f:
                    2f:a3:05:89:9d:cf:87:0e:ef:de:d7:2a:fc:b2:88:
                    48:73:89:eb:aa:8a:11:a9:28:13:72:98:c4:70:cf:
                    23:d5:4b:d8:4d:f6:1e:5c:94:40:ce:64:c6:6d:c9:
                    06:14:2d:c2:25:92:e3:b4:9a:4a:1d:1f:4d:00:38:
                    32:80:09:d6:83:7f:a8:17:2f:39:cc:56:c5:18:30:
                    23:77:f8:cf:a9:4d:de:17:60:c3:79:69:5b:df:0e:
                    26:df:f9:ad:a6:ec:b3:1e:0c:67:98:eb:e2:29:65:
                    a1:49:d4:8e:13:9e:18:66:84:5d:a1:3f:a8:29:f5:
                    1f:0d:19:a2:d9:81:f6:92:ab:2d:94:d3:b7:04:b8:
                    6c:37:b2:76:bd:38:31:e4:4f:01:82:e2:40:ff:c3:
                    74:54:19:4c:5c:4c:38:87:1a:59:9d:2e:9e:0e:2c:
                    b4:6f:b3:8e:38:99:e2:0d:33:27:af:b0:cb:e9:e9:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7B:39:4D:2E:13:6B:EA:F0:3D:81:47:3C:51:46:D7:26:D7:1D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9e5e5c-5164-3359-bd8e-49ea44b37370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:f3:41:83:1f:dd:5d:dd:79:42:90:6d:f6:e0:6a:ba:91:
         fd:ee:2d:3a:47:f0:4c:74:ad:54:dd:5c:ba:db:e4:70:1f:78:
         13:b5:9f:dd:c6:75:7f:5b:ba:99:41:06:f4:06:c5:92:84:d2:
         2d:5a:34:66:23:c0:04:94:61:f2:d8:f3:99:d6:22:28:cd:8d:
         7f:51:68:47:d2:f7:86:fc:da:63:f2:e9:70:70:e9:63:0e:e2:
         82:98:d5:4e:95:1f:c1:a8:57:dc:80:3f:45:64:f5:b6:1d:73:
         d9:6d:69:c7:c0:2e:02:56:4e:c0:f4:6b:7d:1f:72:dc:7f:79:
         31:61:9c:27:25:e4:f5:8f:a2:77:ba:8f:22:0a:c4:a0:23:0b:
         3c:b1:4e:69:1d:f1:95:90:8b:96:c3:55:72:18:e5:5d:ff:21:
         30:66:aa:15:37:61:ea:68:7f:2a:9f:66:95:ef:36:c3:e1:c0:
         b0:07:c6:a7:da:4f:d1:12:77:63:c5:69:8f:91:ad:e3:1d:a2:
         2c:0d:8b:d3:bf:02:96:95:4f:95:44:c3:4b:78:85:52:63:87:
         89:60:fd:67:7a:b0:66:59:35:37:94:9c:4e:c7:25:71:64:27:
         0b:e8:9f:a6:bd:af:a9:70:9b:2e:d6:8b:d6:73:0e:fc:26:d9:
         21:fe:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:33 2024 by rpki-client on console-ams.rpki-client.org