Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa
File:                     4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa (raw, json)
Hash identifier:          7g2rzmm7O7FQ+SSsSsPuyJSf/50ifVB+y0St+XQ5UTc=
Subject key identifier:   2D:55:61:04:50:64:13:67:53:9F:B9:5A:E4:7C:D1:6C:71:75:9A:D2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2E8EC40E1FFE99870F40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2e:8e:c4:0e:1f:fe:99:87:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=db1df7f3-7579-4b64-9960-b6651bad8753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:cd:72:95:3c:05:a5:02:ff:f4:a0:e5:c9:
                    18:6b:e7:5c:29:78:c5:b9:66:e1:92:7d:a4:87:37:
                    14:e3:64:db:7d:09:bf:47:95:5a:06:33:88:03:7e:
                    4a:85:57:07:ae:b7:71:27:25:6f:eb:a2:a0:ea:c0:
                    69:f7:5b:fa:a6:6f:bf:e3:20:9e:91:df:c0:75:de:
                    27:b2:17:59:0e:f3:1a:4b:43:b1:13:3c:8f:ec:82:
                    36:b9:e7:da:7a:18:cb:68:4b:17:51:11:09:8e:05:
                    6e:ea:e9:14:39:b9:61:df:de:77:91:8e:84:4a:36:
                    59:c5:f6:99:fc:c3:a8:cc:27:df:b5:79:94:0c:da:
                    92:11:4e:9e:bd:ea:e1:c8:e1:44:39:a9:dd:30:17:
                    f6:d4:4d:9c:90:6c:7b:67:bf:72:de:01:b0:b1:76:
                    c1:8b:39:f7:a5:97:e7:8d:10:07:b4:6f:c5:50:cb:
                    99:bd:ce:30:e3:17:3a:a1:18:35:a5:0b:d2:8b:aa:
                    81:fb:86:52:32:cc:bf:6a:54:35:6c:a2:2d:ad:94:
                    96:cf:7f:a7:07:14:ce:24:64:ac:7e:98:98:f4:13:
                    88:6b:8a:39:13:2a:5a:2c:09:09:02:40:4d:9f:2d:
                    18:fb:fb:84:37:dd:52:5f:d3:26:57:f5:9d:88:26:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:55:61:04:50:64:13:67:53:9F:B9:5A:E4:7C:D1:6C:71:75:9A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f774ca6-df6e-369a-b629-ad28dd9bdf33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:e9:12:54:86:90:e1:82:17:c1:5f:75:11:4c:6d:12:90:
         a8:4f:81:f6:ba:2a:f7:3c:69:2a:eb:e1:23:42:8a:c9:d1:d0:
         73:c4:67:99:d3:27:fb:32:5f:36:dd:89:c1:53:90:de:b6:c5:
         80:8a:3b:19:38:00:0f:46:b5:5c:c7:a0:49:9b:42:82:14:76:
         d1:a8:d7:cd:f3:1d:70:01:4f:c1:a1:50:9e:0b:d5:ca:03:a6:
         71:7d:9a:68:89:32:3b:83:40:bb:06:95:a3:06:88:da:3a:d3:
         7e:bd:ce:f1:11:70:60:6d:ca:0c:0d:88:58:8d:98:42:cf:b4:
         ef:37:f7:a5:2f:7f:e3:26:0c:6d:2d:d2:92:fe:df:5b:4e:30:
         12:cb:76:44:a3:0c:8c:68:cb:2a:86:14:fc:a9:c7:26:c6:3e:
         f8:2c:92:14:7e:80:e2:f3:75:62:e4:73:59:89:5d:58:6e:94:
         49:f6:8f:9d:ca:39:00:9e:aa:19:b9:ea:df:9f:d9:11:ff:fd:
         c0:19:bf:69:6c:9b:8d:c4:a6:a5:a0:c7:2f:dc:07:a7:71:ff:
         98:cc:f6:6e:da:44:ab:68:77:8d:2e:ae:2c:40:15:73:92:d6:
         45:4f:53:fd:e3:80:29:d3:2c:76:20:c7:52:db:72:31:a0:5a:
         9f:f8:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org