Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa
File:                     40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa (raw, json)
Hash identifier:          tpX19GhRJMK4/PlFn1GDB5ZHEj2Px1vT9TuT3vrtwmY=
Subject key identifier:   F9:43:DE:EC:0B:2E:B3:45:83:C0:65:B1:1A:3E:59:3D:6B:F3:66:A8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3118C30CAC271F1A7300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:31:18:c3:0c:ac:27:1f:1a:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a2e37ebf-89c3-48c7-83e0-cb43fe5b02fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:21:53:97:9e:7d:0b:d8:7c:1c:bb:99:99:
                    20:f5:4f:aa:ff:76:c5:34:0f:9f:03:b6:b5:24:fd:
                    3e:91:12:87:f2:f5:70:2e:8e:f4:e4:d0:08:00:82:
                    80:87:28:63:22:44:cd:a5:4f:fa:d5:41:72:8d:98:
                    32:e1:c6:8e:14:3e:0c:aa:a5:16:d7:2e:6b:ab:2b:
                    5e:ac:39:25:ae:0d:94:48:3a:75:29:a0:bd:83:88:
                    f4:9a:7b:42:a2:15:4e:0e:d1:f6:8f:6c:f5:79:17:
                    cb:34:69:cd:f7:82:9b:96:7e:6b:02:72:2e:01:41:
                    a3:f7:b3:44:2f:91:1a:f7:f2:9c:23:1a:c8:15:6d:
                    f8:90:6d:22:45:22:e8:d1:ad:46:96:77:0b:5a:89:
                    b5:5a:8f:07:89:d1:64:25:9c:69:51:27:94:db:14:
                    b9:7e:a0:4c:67:2f:4a:9e:81:cf:61:bc:09:65:61:
                    4e:7f:98:b4:a6:29:07:74:14:70:1e:a5:3f:6e:51:
                    a0:27:db:a9:25:fb:c7:ce:5a:d7:af:d6:25:c0:0b:
                    f8:6a:3b:96:c8:02:7e:29:69:4a:81:f5:d9:69:f0:
                    ef:21:3b:ae:d1:e1:76:10:ab:76:53:aa:a8:fa:5f:
                    ca:a4:58:5b:c8:99:0b:84:99:51:43:c1:db:52:db:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:DE:EC:0B:2E:B3:45:83:C0:65:B1:1A:3E:59:3D:6B:F3:66:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:f6:a5:39:d0:9a:87:8e:22:fc:9e:0d:03:68:cc:46:b9:
         ee:f5:89:76:ce:be:b7:52:8d:03:bd:51:70:67:32:e7:f1:cf:
         9d:fc:25:7d:cb:9e:9f:b4:18:34:05:02:cd:15:92:39:8a:73:
         fd:69:a2:fb:fb:94:85:1b:4b:fe:26:3c:b3:f4:47:85:05:b0:
         c9:2d:18:4d:36:a9:0e:70:d8:ba:a2:27:7a:94:80:d4:18:20:
         71:dd:6d:91:91:93:2f:7b:2d:87:f4:40:fb:c8:35:27:ae:89:
         37:81:99:58:42:58:43:21:ea:de:3b:30:25:3a:04:c8:e9:02:
         11:6e:07:2d:45:7b:58:3f:be:2b:76:28:c8:9e:40:84:cd:0e:
         f9:00:01:12:fa:52:6b:66:42:f1:68:58:bf:91:83:95:fa:13:
         49:fb:c4:f5:f1:25:79:bf:1f:66:f3:7f:22:4c:8c:ab:3a:68:
         e8:ef:4d:1b:a5:3d:05:10:4d:64:0d:9a:bf:33:46:39:44:df:
         52:99:f0:b3:07:5a:55:8a:1f:27:e2:81:e3:c0:90:8d:e1:d0:
         63:e0:71:9c:1a:3a:a9:59:94:75:52:1b:3a:ee:dc:33:3c:dd:
         43:bc:5c:cb:ec:83:ff:83:81:c2:8e:ec:14:cf:a1:f3:8f:a9:
         b4:fb:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org