Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa
File:                     5259a987-3bc1-32de-9074-94d80fbae32a.roa (raw, json)
Hash identifier:          2qF+UoO7A+RJPatwZaim+9N/evAt0MVBirpqsU7D1uc=
Subject key identifier:   F5:EB:C9:4E:B3:CF:EC:CB:11:2A:F6:41:16:7F:1A:AD:35:2D:C8:86
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DB77E086F12A43BB29960
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.198.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:b7:7e:08:6f:12:a4:3b:b2:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=379196a5-f25f-4da2-8d36-2589699dc141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:ab:12:36:3a:b9:f2:9b:12:30:42:ea:d8:
                    6d:d8:bf:d2:44:86:4b:9e:f2:44:46:4c:26:2e:95:
                    db:54:0f:b5:cd:cf:a0:5a:9b:c0:9a:87:d0:07:d4:
                    cf:ca:20:4d:70:75:21:e6:f1:56:a6:12:0a:d1:e0:
                    34:a4:35:2e:23:37:fa:74:0a:df:25:ba:35:3b:65:
                    1a:06:79:24:64:cc:96:ee:9f:b6:4d:ee:69:f2:46:
                    d6:fb:c2:94:11:26:22:48:03:5a:c3:02:5b:66:df:
                    b0:55:7c:fc:4d:d5:76:97:a6:93:e8:51:f1:9c:08:
                    73:a6:13:6f:90:96:3a:2c:6b:c9:93:2d:db:c9:71:
                    7f:be:cc:0a:a1:8e:29:c0:61:e1:c7:8f:88:20:bc:
                    b6:44:52:36:d0:81:07:cc:bb:29:93:66:ea:c7:0d:
                    f9:58:b9:1e:22:75:41:3d:40:a2:9d:ab:cc:e1:1e:
                    9c:ef:dd:db:3f:fe:5b:f5:db:7d:63:0f:2b:b5:e0:
                    88:99:45:20:69:05:d9:9a:bd:77:58:66:d7:23:6a:
                    ae:2e:aa:57:c0:1d:38:b9:04:71:da:67:bb:db:26:
                    16:58:40:3a:b2:e5:30:99:4e:fc:fd:ca:94:af:67:
                    54:1a:fe:d1:dc:ed:08:04:7f:d7:ad:8b:8d:5c:2f:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:C9:4E:B3:CF:EC:CB:11:2A:F6:41:16:7F:1A:AD:35:2D:C8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:66:43:13:cb:02:2e:3d:77:18:12:ff:22:87:4b:5f:df:ee:
         c7:ce:9b:26:8f:99:60:ae:72:a9:54:ec:5b:fe:bf:f4:cd:c9:
         3e:a6:9d:0f:8b:7d:6a:52:76:e4:51:66:41:78:2c:54:63:29:
         0d:eb:af:61:31:db:6a:78:cc:36:4b:e6:9c:6c:ad:d9:0a:63:
         f7:43:cf:4f:f2:3e:08:14:31:20:54:c5:43:96:5d:12:28:b6:
         cb:3a:ab:ce:aa:b0:b8:4d:e6:98:7b:a7:7f:f2:d7:fa:34:ff:
         46:d4:8a:13:3d:40:b5:fb:d9:28:c6:42:42:e2:84:52:91:8e:
         74:a9:27:3c:41:a1:29:e6:60:b3:ea:de:8a:b2:34:ac:b0:62:
         de:4b:26:5c:86:aa:62:45:55:c6:01:f4:d3:8c:2a:55:05:36:
         1f:1c:9f:c3:6a:14:d5:94:e2:47:1c:c0:4e:f2:c3:48:23:62:
         84:9c:e9:1c:0d:37:36:3f:2e:c1:38:ab:d8:72:89:6a:d1:6e:
         9a:6d:2a:5a:1f:25:92:a5:39:05:9c:2c:02:c8:f9:d8:84:30:
         6d:8d:00:83:64:93:87:95:bd:77:74:4d:72:f6:58:39:b0:9b:
         c3:a2:61:5f:bf:a8:de:2b:24:61:b3:b5:b6:e3:a8:c4:de:7e:
         4f:01:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:12 2024 by rpki-client on console-ams.rpki-client.org