Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48e6ee28-8d55-336e-b9de-dc5ba31d750e.roa
File:                     48e6ee28-8d55-336e-b9de-dc5ba31d750e.roa (raw, json)
Hash identifier:          vCCDc3YmydndvFLZFwlgw3BOO8OCuw25feP5NuAA1RI=
Subject key identifier:   24:6F:32:8D:B9:4E:B6:0E:70:A3:3D:DE:A5:24:00:32:89:26:4D:B3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3124A5F91989A61923B0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48e6ee28-8d55-336e-b9de-dc5ba31d750e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:31:24:a5:f9:19:89:a6:19:23:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=fc21deb1-f9dc-49e2-85df-bad2a31cf8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:69:ff:d2:dd:da:ba:2c:a6:4b:42:a0:73:
                    2e:eb:01:42:67:0f:ed:d7:01:c8:27:be:1c:c5:46:
                    02:a5:03:7a:b5:5c:66:ab:ec:c5:da:44:d4:3c:6f:
                    1d:36:41:89:74:09:6f:62:78:87:3e:16:a6:23:ca:
                    fc:5e:92:f1:93:74:3b:ba:51:80:2c:2e:ab:d5:12:
                    5b:d9:91:de:29:07:62:ba:b7:f6:c2:ea:ba:c8:91:
                    8d:1d:56:28:1a:2f:33:52:f7:28:d5:93:7b:f3:bb:
                    8a:10:6d:aa:19:c0:b3:b3:c4:e3:f1:42:cf:2f:13:
                    4e:56:8d:f4:c9:49:0a:9b:81:7a:a6:ce:01:28:26:
                    ce:ad:15:33:e1:02:06:1e:e8:ee:af:a5:a5:bd:a9:
                    d1:bf:d8:45:33:1c:d7:21:58:0e:41:fd:6a:ab:db:
                    87:20:3f:1f:cf:ad:2a:54:09:90:06:9b:ee:b6:a1:
                    39:7d:d8:ba:fa:fc:6b:96:38:79:43:f6:7e:03:46:
                    b5:b2:1d:fd:e1:00:28:61:fa:10:c4:f5:52:ca:ce:
                    da:79:13:5c:80:83:49:cf:aa:91:44:03:ef:56:d8:
                    59:14:1c:e2:a3:7b:5e:bb:cb:ff:5b:49:cc:ef:b7:
                    36:d9:c4:b7:e2:a6:e3:20:33:c9:ad:c7:d3:fc:fb:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:32:8D:B9:4E:B6:0E:70:A3:3D:DE:A5:24:00:32:89:26:4D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48e6ee28-8d55-336e-b9de-dc5ba31d750e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:01:45:96:46:e5:c6:6b:e5:5e:63:3d:5a:00:80:88:51:15:
         c0:76:7d:7d:ea:cc:a7:62:df:cf:b9:b9:42:32:24:f4:61:91:
         e4:a6:de:96:d9:20:41:a9:0c:5b:f9:09:f6:f5:96:8f:15:14:
         00:0d:70:fa:d4:47:0c:6d:df:40:97:d8:af:90:7e:37:b6:4e:
         88:96:36:cc:b9:95:c8:9f:63:90:df:f8:82:2b:20:25:2d:d9:
         e8:4d:9c:cd:45:1d:ad:58:df:38:ee:cd:69:82:7f:1e:2b:bc:
         00:a2:03:5c:4e:8b:70:e9:10:de:37:87:d3:47:c3:12:e7:9b:
         46:c7:57:fe:de:aa:b3:c7:8d:0a:8e:fd:e5:a6:f7:98:0b:ed:
         fb:04:92:53:69:bb:53:38:b6:10:39:5c:b3:25:98:ee:ad:00:
         39:41:7e:0a:75:81:a0:ca:2a:33:fb:5f:b5:ba:6a:2a:2c:c9:
         9f:5b:46:b1:ff:5e:30:6a:80:6f:a8:43:aa:29:83:d3:6c:ac:
         16:0e:64:a1:19:07:72:04:a8:73:18:27:76:99:c1:49:10:11:
         b8:4c:9e:07:4c:d4:f8:2b:84:69:bd:87:f5:04:0f:ea:a8:df:
         c8:59:c9:44:c0:41:c3:d5:90:3b:ef:b4:5f:51:13:ed:44:85:
         24:db:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:08 2024 by rpki-client on console-ams.rpki-client.org