Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/481ef324-9506-3ea7-859f-042a1256e93d.roa
File:                     481ef324-9506-3ea7-859f-042a1256e93d.roa (raw, json)
Hash identifier:          WFlTf7ZLv6T4WJdMxaMGyf7z+zKhBF0F8k+/HUSBO4Q=
Subject key identifier:   95:2E:5B:49:E3:CC:54:B1:B4:99:CF:21:54:83:79:05:2B:6D:5B:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DAF41CB0325BBBCC55250
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/481ef324-9506-3ea7-859f-042a1256e93d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:af:41:cb:03:25:bb:bc:c5:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3c4ed4fc-4390-42f0-82c6-60ab61486cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:86:2d:bf:35:64:0d:e4:f0:87:cb:42:55:
                    48:b8:6d:f3:57:37:31:17:ea:f3:d1:7c:29:4c:df:
                    80:8b:26:5e:c8:40:8c:f9:92:1d:7f:5d:69:de:f1:
                    99:e6:af:31:25:f4:a5:84:a8:e7:aa:e2:31:df:24:
                    c1:ca:57:29:aa:c7:7e:02:e3:16:18:ee:b2:10:c7:
                    a7:f9:2f:83:24:d9:15:6a:a2:56:d0:6b:88:a9:57:
                    fd:0c:92:36:6a:9f:4b:a4:dc:ac:1c:42:ac:0b:c8:
                    a2:77:e1:02:52:d7:bf:0b:95:26:81:85:be:f6:e7:
                    86:af:7d:65:59:fc:23:19:99:a7:d2:60:28:92:75:
                    ac:51:ef:fa:4f:f0:05:2e:30:66:af:01:9d:22:e9:
                    2e:cf:78:c4:ea:97:78:32:6b:23:b6:a5:ea:07:ab:
                    69:b0:32:3c:c9:41:a4:55:cb:50:fe:1a:90:06:16:
                    7a:6f:bf:c8:72:68:5c:24:11:4e:99:d1:5b:2a:35:
                    58:b2:9e:ec:18:f7:65:b1:c2:f9:93:07:db:0e:c6:
                    85:39:ca:ad:b0:21:fc:91:bf:b3:72:4e:f0:ba:ee:
                    43:8f:b9:9c:04:bf:cf:2d:71:3d:d9:c7:7d:58:2d:
                    4e:34:bd:4b:62:36:e6:8f:9c:e3:eb:5f:63:42:16:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2E:5B:49:E3:CC:54:B1:B4:99:CF:21:54:83:79:05:2B:6D:5B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/481ef324-9506-3ea7-859f-042a1256e93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:43:eb:ee:bf:76:c8:1b:02:53:7d:a0:ae:36:76:b9:fa:
         33:6d:aa:f4:8c:fc:8b:22:8d:84:89:31:70:ad:90:5b:fd:98:
         48:1e:30:9a:b8:66:3c:c9:df:45:26:14:61:ea:76:81:14:81:
         ab:63:33:d0:18:2e:9d:7d:85:68:92:07:29:09:ac:63:ae:b3:
         16:bb:8b:93:d1:1c:a5:e4:a9:6a:5d:f8:77:a8:9d:ee:88:e3:
         17:42:00:c2:dd:bb:49:9a:a9:d2:27:98:73:60:29:a3:58:27:
         b5:5b:6d:3c:d3:97:4f:36:49:5c:c9:52:38:a0:c8:9c:41:0f:
         92:8c:fa:d6:1c:c1:46:26:ca:93:37:5b:cf:8c:0f:6f:64:b9:
         ad:e0:ea:9c:f6:97:04:c8:d0:0a:cf:70:1b:7f:41:7f:aa:cd:
         94:8a:9f:dc:c4:ef:4a:fd:27:0b:be:1b:a3:d1:90:05:fe:59:
         c4:c4:d4:ea:e7:fe:16:55:de:84:be:44:17:34:32:07:38:80:
         1c:f3:4a:be:63:8b:ea:30:83:a5:67:b4:9c:87:ef:22:82:79:
         a0:aa:18:48:af:d4:a7:51:54:76:f9:2f:41:e8:da:f6:78:09:
         18:d5:d5:41:8e:39:7f:ef:e5:f1:9e:19:0b:10:f5:5c:7c:15:
         6d:33:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:21 2024 by rpki-client on console-ams.rpki-client.org