Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4eaf5271-7984-3993-a377-500b6314e3d6.roa
File:                     4eaf5271-7984-3993-a377-500b6314e3d6.roa (raw, json)
Hash identifier:          N7QN7iajZT3i+xPSGRtktVsewejW+4xAEKpcnS3m5w0=
Subject key identifier:   C0:A4:18:0E:E8:8C:5F:02:56:2E:73:7C:56:F7:D6:F4:1E:45:AE:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E22FFF68804AB8DDA80C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4eaf5271-7984-3993-a377-500b6314e3d6.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:22:ff:f6:88:04:ab:8d:da:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=32391b27-19fc-4601-b287-304604e31926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:de:55:d5:66:68:d2:10:b6:0a:fd:ca:6e:
                    3e:93:c6:99:8d:32:22:1f:d5:21:dc:7d:18:ac:91:
                    64:e3:64:1b:74:24:be:d4:21:ae:8b:48:9e:ba:42:
                    c2:be:05:ca:de:36:78:36:b6:c2:92:b1:0b:41:87:
                    4e:d3:e1:d0:48:97:d7:65:03:27:46:04:09:cb:e7:
                    ab:3a:ad:56:21:58:14:a4:06:b2:1f:4f:06:0a:55:
                    d0:30:8e:bd:ee:2a:3e:83:4c:b5:31:c9:79:36:79:
                    11:1e:79:17:d7:18:7e:f5:10:26:b4:ae:d6:30:fa:
                    42:2a:e5:49:cf:5f:e2:3d:25:d1:9c:3c:bb:52:e8:
                    48:21:ba:64:55:e0:36:91:39:84:7c:2f:a7:52:99:
                    ac:46:7f:60:2f:41:d6:e1:77:16:ae:7e:02:1e:be:
                    08:c7:28:1d:79:d7:3a:80:c8:1e:e4:f8:1c:e7:68:
                    7f:b1:52:8d:67:6b:bb:93:5a:7a:ea:92:22:1c:de:
                    f9:db:74:17:b9:a4:7c:64:cc:a3:8e:ac:89:62:25:
                    bd:c8:e4:14:cb:7b:00:8e:ab:69:96:3e:e8:e4:dd:
                    cb:a5:d7:00:3d:40:8c:35:54:f9:9b:fe:5c:aa:4d:
                    42:af:4c:b2:3a:85:be:a7:d5:b3:05:34:03:e4:03:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:18:0E:E8:8C:5F:02:56:2E:73:7C:56:F7:D6:F4:1E:45:AE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4eaf5271-7984-3993-a377-500b6314e3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:54:55:f0:f7:80:91:1c:c4:3c:39:4f:a2:7b:c7:03:e8:d9:
         b5:68:92:c4:0f:cb:63:2d:19:ff:4f:72:1e:dc:27:aa:22:f9:
         db:b9:63:ec:0f:39:fd:45:06:f6:5c:65:8c:13:e7:ed:a8:5f:
         49:d2:65:d5:ca:61:40:b8:6c:fb:23:8c:b0:67:f0:43:6e:fc:
         b7:d9:79:06:bf:d9:d9:b8:5f:c5:c4:31:e4:e7:b5:91:6c:7b:
         c9:40:fd:a7:34:3b:a4:b0:cf:3e:69:c5:c8:c3:2e:61:97:47:
         6c:9a:16:01:78:1b:f6:5d:af:6c:fb:65:e1:a9:74:38:a3:05:
         49:f8:23:2c:a0:a9:51:07:14:f6:da:33:bf:93:34:3e:86:ff:
         b0:4d:78:ae:1d:7f:cd:d5:cb:69:1f:f6:e1:18:52:67:7f:c4:
         e6:65:8d:62:e9:e1:06:21:29:a6:83:c8:bf:14:7f:29:0b:a2:
         93:c3:e3:f7:c5:51:26:65:9d:93:98:e6:37:5d:f2:ed:4a:df:
         25:bb:ba:1b:93:ec:31:8b:cb:65:27:99:63:d7:7e:a0:33:df:
         fa:bc:8a:80:7e:17:44:60:07:de:4a:53:81:97:10:21:01:35:
         6d:15:bf:a7:30:22:87:78:cf:05:e5:9b:98:a0:ae:f4:96:d0:
         b4:0c:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org