Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37c443d3-fbf5-3206-bdda-77c9f181196e.roa
File:                     37c443d3-fbf5-3206-bdda-77c9f181196e.roa (raw, json)
Hash identifier:          EANHq+9W5cpOaJ5aDELgnFVF66tFPoRda7FmkpUBYPM=
Subject key identifier:   0D:89:60:3F:4D:00:BB:5B:D6:4C:ED:46:69:8F:C2:0F:01:D3:62:BC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DAAE9666AA29AD96DCBE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37c443d3-fbf5-3206-bdda-77c9f181196e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:aa:e9:66:6a:a2:9a:d9:6d:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f309feaa-3504-4262-9647-8f3c7281ce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:cb:a0:7c:4b:35:33:8e:8f:41:75:86:e2:
                    83:09:b8:ca:dc:6e:1b:96:52:92:f3:22:ac:45:88:
                    ce:e3:ed:21:57:25:59:fb:af:19:98:23:4f:0e:1e:
                    9f:9d:4d:32:92:d6:1d:35:14:83:95:bc:09:7b:41:
                    50:9a:ac:73:09:16:56:0a:00:a2:81:2f:e7:bf:34:
                    49:15:a0:be:51:0f:4f:69:07:a5:b1:75:3c:d5:4f:
                    f7:13:18:ad:75:dd:3c:73:c6:15:64:db:78:35:00:
                    db:e7:81:25:a2:00:a1:7b:bc:31:d8:1d:6a:48:90:
                    70:37:d5:92:ca:8c:b8:da:43:40:2c:31:eb:f4:01:
                    b3:03:26:c7:93:c7:59:88:5a:3e:82:e3:cb:b3:7b:
                    bc:f2:03:41:8c:57:3a:ce:a8:d1:ef:aa:95:ce:0b:
                    c2:12:e4:14:9e:b1:e5:36:c3:f3:3d:99:eb:d2:ca:
                    fb:71:de:c5:b0:03:e8:83:f5:69:95:02:e9:78:0b:
                    36:53:45:0b:17:39:59:be:c8:ba:39:84:e6:16:8a:
                    d4:cc:97:15:f4:2c:0f:2d:d6:22:93:ef:cb:cb:96:
                    62:36:ce:10:81:89:51:0d:37:32:b7:5d:78:84:e6:
                    df:cb:a6:9a:03:ed:a4:19:42:77:66:5f:03:7a:16:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:60:3F:4D:00:BB:5B:D6:4C:ED:46:69:8F:C2:0F:01:D3:62:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37c443d3-fbf5-3206-bdda-77c9f181196e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fa:87:d6:92:7a:83:4d:55:1b:83:6b:18:ec:05:0b:bc:c1:
         95:22:f9:23:ec:5d:5b:d0:63:a1:24:c7:7e:0c:da:e9:aa:f5:
         90:3d:c5:cf:9b:58:d2:94:ef:e8:9e:f5:21:60:3e:92:c1:78:
         06:73:ec:16:1d:50:f2:73:67:fb:ee:d0:8a:93:05:fc:23:bd:
         79:c3:17:8d:83:44:4d:db:9a:43:89:62:bc:32:b6:42:e2:a2:
         4f:90:ff:03:e1:48:55:66:2e:90:45:73:1f:7e:a7:02:a3:cf:
         12:2a:ab:71:24:c3:97:45:56:e0:52:9c:f1:e6:72:cb:ac:c9:
         74:b6:83:51:6b:80:1f:9e:ed:2a:57:8d:3c:62:85:0a:b2:c8:
         0a:0c:f1:bd:bb:43:e5:02:46:b6:9c:1e:58:59:f4:eb:43:af:
         de:03:fa:f6:a0:03:7d:fc:6e:fb:5a:49:eb:72:76:15:f1:a9:
         ef:ab:d9:dd:47:bb:fb:94:22:bc:c0:79:81:d5:2a:08:c0:66:
         a4:11:2a:f2:2a:0a:82:47:ce:c9:7b:8e:f0:a6:e3:4f:b7:35:
         11:6b:44:1d:72:b3:0d:b6:d3:f5:d1:bb:3e:bd:f2:10:d3:43:
         1f:b2:6e:4c:d5:73:60:ac:b9:be:9f:7c:78:ff:a2:45:a8:fb:
         d7:60:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org