Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c2f6f10-dc0c-3482-808a-1125f862c559.roa
File:                     2c2f6f10-dc0c-3482-808a-1125f862c559.roa (raw, json)
Hash identifier:          2EDkKcEx1bQzEWwE4dkazG0mrzXnA4v396PAY/2wvZ4=
Subject key identifier:   EF:F3:3E:67:94:85:F4:B1:98:E3:15:8D:2D:A1:E5:B0:CC:F4:53:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A5EC1511BC777FB53F79C
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c2f6f10-dc0c-3482-808a-1125f862c559.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:5e:c1:51:1b:c7:77:fb:53:f7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ad388778-2671-4323-96fb-07bd79ee7c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:b3:30:e0:f3:80:d8:da:b8:8f:d3:bb:1c:
                    6c:cb:55:8e:4d:81:d5:5d:e2:4e:ba:59:69:5f:4c:
                    32:a6:34:83:f1:38:ff:70:2b:ae:b6:d0:bc:59:fe:
                    a0:4d:ac:b5:21:fc:13:01:38:af:29:a4:ac:b3:43:
                    6e:55:34:e5:3a:1b:3a:51:10:f6:85:c6:a1:0f:78:
                    20:47:5d:45:ae:2d:e4:e7:a7:17:95:1e:57:c5:1e:
                    02:d9:80:2b:3c:a1:11:12:ac:48:17:c0:f1:2c:e0:
                    6d:d2:41:b6:66:c9:ff:b1:ec:7f:b6:f5:68:72:0e:
                    91:5c:11:44:ba:4d:65:8b:ff:f3:7c:9d:08:50:cb:
                    81:0c:26:0e:0d:51:50:53:ed:21:70:24:1d:93:6d:
                    e8:1a:72:ba:f6:49:f5:78:4a:e1:4d:c7:ab:75:c7:
                    38:87:3d:5a:b6:31:cf:9e:c9:64:8d:70:ae:89:6c:
                    eb:dc:0e:94:f6:7b:3d:7f:e3:65:35:e6:30:07:65:
                    e8:6b:71:b7:40:29:80:91:a1:bb:ac:cd:43:43:ce:
                    fd:5a:47:f2:21:53:ed:75:75:db:58:33:ff:52:ca:
                    ad:71:4e:3f:15:3e:bb:5f:e9:08:51:15:f4:a2:09:
                    b3:7c:82:5d:34:e2:97:77:26:33:e5:f3:85:d5:c5:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F3:3E:67:94:85:F4:B1:98:E3:15:8D:2D:A1:E5:B0:CC:F4:53:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c2f6f10-dc0c-3482-808a-1125f862c559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:b8:c9:37:07:2f:c7:f0:e5:5e:23:d0:31:75:a9:96:38:93:
         9f:3b:64:d3:95:0c:c4:aa:f2:d2:de:18:34:40:0c:dd:38:b0:
         03:3d:19:37:40:c1:9c:bb:c0:58:b9:c9:d5:b5:d3:db:73:f2:
         2b:99:01:da:c7:28:ac:c4:e0:e4:66:78:2a:cf:51:51:47:e1:
         81:84:45:30:1b:26:f0:c3:bd:6b:82:35:e6:72:24:22:f1:dc:
         5b:c2:d8:b9:bd:68:15:d7:f3:b7:94:1c:f4:69:00:22:a8:2e:
         a8:77:d3:72:77:a2:90:45:b6:d2:2a:3b:fa:db:ef:1a:70:8d:
         30:82:f5:26:d2:2c:b0:62:f0:0b:91:6f:f3:7a:e7:7c:92:2f:
         23:07:12:d7:d2:5d:79:a2:5c:44:ff:30:db:ad:6b:bb:d4:1d:
         c0:cb:e4:a2:78:d1:32:89:28:1f:a4:5b:3e:9c:09:65:66:00:
         11:e8:bf:99:d8:9c:c3:e4:9d:55:16:ce:a9:a3:47:69:d9:0b:
         c8:db:5e:7b:ce:52:d4:4b:aa:8e:fa:45:67:5f:20:e1:5c:62:
         4f:1a:16:2b:9e:c0:31:02:49:b0:82:7e:3a:2b:92:4c:a7:7a:
         cf:1a:cb:27:d8:e7:5d:54:b2:4b:ee:ae:68:2d:e2:78:78:fe:
         69:06:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:14 2024 by rpki-client on console-fra.rpki-client.org