Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa
File:                     42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa (raw, json)
Hash identifier:          uFiI2+JrgSblQ6woHlmzpZ80MUU1K46St1xtbPOpLEU=
Subject key identifier:   65:B8:28:4A:34:29:0E:CE:E3:39:B4:1F:F6:BA:84:00:F2:5D:BE:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E280F91FE3E7261868091
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:28:0f:91:fe:3e:72:61:86:80:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f50a87e5-7914-4b83-a017-cda0d2f59cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:91:eb:7e:37:2f:7e:96:97:7b:c1:af:7e:
                    a8:77:e0:76:16:6e:1c:82:f0:8d:f1:03:5b:e0:31:
                    f5:41:e9:ee:86:ff:42:49:f4:cb:aa:56:b8:2c:41:
                    00:b8:78:cd:3a:05:5c:7c:76:88:6a:76:44:7b:c0:
                    65:1f:b3:f5:66:2e:8e:94:91:1d:53:f1:1e:cd:c5:
                    63:75:a9:b8:c0:48:95:80:af:02:24:1d:cb:88:22:
                    e1:bc:2c:ba:23:9e:46:f5:dc:6a:b1:68:53:dd:8a:
                    78:5c:90:a7:d4:38:6e:bf:2c:c5:1c:2e:07:bd:0b:
                    93:6c:67:a0:3d:2c:87:74:e0:2d:72:e5:c9:6b:5f:
                    e6:53:16:f0:5d:4e:86:a9:73:6d:eb:d6:19:11:1e:
                    b5:03:81:44:2e:59:69:4e:ef:3c:15:e6:74:b2:11:
                    e3:8c:e9:5b:78:4b:bf:18:5a:59:8c:b5:ce:ae:c4:
                    93:c3:54:15:6f:88:49:89:30:27:b7:c6:3f:c3:b3:
                    10:af:70:70:e8:fb:32:5b:bc:eb:50:a7:1e:b3:b2:
                    54:6e:5c:40:3e:4c:12:6d:db:60:5a:06:cb:9e:3a:
                    3d:08:9f:47:f2:e6:94:16:cc:3a:24:d0:7c:ef:9e:
                    52:97:e2:72:d9:d9:25:c6:cc:ed:26:0a:95:4a:0a:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B8:28:4A:34:29:0E:CE:E3:39:B4:1F:F6:BA:84:00:F2:5D:BE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42ad79bb-fa0d-3ed4-8d81-57c913a2e429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:54:52:e2:ca:53:21:f2:25:c2:e4:8e:b3:88:97:40:6e:fd:
         f1:90:95:6b:ea:48:36:f9:d6:29:f5:b8:10:b1:16:4a:ed:3c:
         e0:f9:5b:19:04:a9:82:b2:fd:5d:82:13:66:53:ff:84:49:d5:
         9b:ee:36:35:b8:1e:a5:73:f1:e9:da:2a:d4:6b:eb:95:d4:95:
         99:e7:0e:8b:5a:36:2c:3e:8c:9d:f5:d3:c2:cb:3e:10:a2:64:
         28:51:cc:ab:41:a6:fc:c1:57:48:1f:7d:72:9d:d7:9a:44:af:
         af:77:bb:88:f2:5e:db:0f:da:83:f1:16:15:08:38:c1:36:f9:
         b9:25:35:25:db:11:ee:0e:20:51:7c:e4:cc:a4:a0:e1:73:8d:
         10:56:63:7b:a7:e7:d1:eb:4b:45:f1:61:0f:95:93:68:98:e6:
         eb:43:c2:b9:fc:08:58:e9:fb:c8:0e:41:bb:b7:a5:13:66:14:
         cb:b0:00:af:77:35:83:40:e1:ed:70:2f:89:de:51:24:85:6a:
         1a:fa:2c:2e:61:f7:bd:5a:8b:10:12:eb:33:41:a2:0e:09:67:
         94:93:0c:32:2c:5e:13:ba:34:38:63:38:52:2e:d5:58:bc:c4:
         44:87:3d:f3:f9:7f:e7:24:fa:71:80:8a:14:9b:0b:18:c3:af:
         4c:c9:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:21 2024 by rpki-client on console-ams.rpki-client.org