Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa
File:                     4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa (raw, json)
Hash identifier:          KJdtvJJ5kE4jAyFbeF75xRq3ID60MRnno/oGAnLty5w=
Subject key identifier:   0B:5A:93:A4:5C:83:E1:19:E6:F1:34:0B:A9:05:64:7D:0A:37:67:C0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF9480F3C9D3202AE5D64
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f9:48:0f:3c:9d:32:02:ae:5d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=3d6c387f-04ae-4d0c-ac10-4f80be4bba54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:e7:1b:4d:8a:86:35:4a:49:17:18:a0:f4:
                    a2:1f:dc:e6:92:f2:37:c6:d2:ee:81:72:10:05:a7:
                    31:70:57:11:33:15:ce:b8:53:f9:f7:b0:83:5b:f7:
                    f5:95:09:25:66:e2:d1:26:67:db:b5:1f:3b:ec:29:
                    11:e7:fc:aa:44:24:f9:0f:90:91:44:02:ec:46:94:
                    db:6d:c9:f7:57:45:9a:a3:55:18:8a:f1:bb:68:5d:
                    5e:31:19:20:30:a8:9e:ff:b6:21:c6:20:b9:70:e0:
                    8c:0d:bc:2e:b8:92:b2:6e:b6:db:de:bb:54:b5:23:
                    8f:2b:ee:57:ea:5a:b2:a0:4b:29:ba:25:65:46:a0:
                    26:39:86:d1:dc:2f:03:e6:00:70:07:3d:84:0b:c8:
                    cd:48:d6:75:c0:a2:e9:21:2b:3d:fa:2a:2d:cb:66:
                    72:a2:97:db:68:1e:55:b4:95:d7:8a:88:05:51:4e:
                    6e:ea:e8:cd:63:90:b8:c7:8b:38:fb:46:23:54:f2:
                    dc:33:7a:ec:2a:5f:e0:a6:8d:81:18:36:5e:4d:54:
                    a9:39:59:54:53:63:f2:f5:8b:84:e1:5e:d7:c8:92:
                    02:9c:e5:cb:80:19:88:f2:52:7b:51:77:1d:a9:12:
                    e9:18:8e:05:36:87:ec:35:c5:5d:aa:7a:1e:45:87:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:93:A4:5C:83:E1:19:E6:F1:34:0B:A9:05:64:7D:0A:37:67:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:65:0a:89:62:9e:f7:7c:89:03:2b:a9:62:2a:18:04:b1:
         43:48:60:13:57:f1:66:10:76:f7:29:e0:a6:f1:6f:2d:d0:dd:
         ff:54:ac:80:b4:2a:03:b2:0a:ae:6a:c1:3b:25:de:54:56:43:
         bb:4d:5a:93:22:ec:c1:45:14:79:e2:33:78:8c:64:04:74:a3:
         2f:e6:3d:ea:c7:63:db:9b:52:78:2c:ec:66:f1:ca:bd:2b:4b:
         5e:2c:5c:6b:98:e3:f1:e7:b3:09:86:ba:4b:08:81:06:37:79:
         0e:08:d7:9a:f6:45:51:fe:d8:32:83:eb:8c:08:3f:42:7d:3b:
         0d:a3:5a:71:4f:6f:b1:16:4c:80:5d:8f:3f:60:13:33:c1:a4:
         df:73:cb:2e:c6:d2:43:f1:2b:cd:4a:3e:93:af:82:78:f9:29:
         40:a5:d0:0a:a6:08:fc:9c:a4:a8:ec:cd:3e:a0:c7:01:5a:c3:
         b0:74:d9:bd:3a:a2:6c:64:64:4d:e1:72:68:82:87:e5:a2:0c:
         de:8f:61:b4:31:5c:73:02:d1:de:a2:bf:ff:cb:8f:1c:ab:91:
         a6:30:84:ac:08:e5:fd:60:dd:5b:f7:29:6e:fb:dd:9e:fa:ba:
         2f:d8:96:d0:a8:65:35:77:55:65:b8:62:3e:7c:c9:df:a9:8d:
         54:a9:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:30 2024 by rpki-client on console-fra.rpki-client.org