Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/553ea024-93c1-3a08-b9d8-1cd187754d20.roa
File:                     553ea024-93c1-3a08-b9d8-1cd187754d20.roa (raw, json)
Hash identifier:          ZYPcX1DrAbD0uH+gcpaq/pctODaqnUXUYzXj19uCjNw=
Subject key identifier:   4D:03:CE:AD:10:CD:5F:1A:6A:29:2D:0A:0A:AE:4D:5B:BA:81:54:C4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF1F830BF0617E196CEB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/553ea024-93c1-3a08-b9d8-1cd187754d20.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f1:f8:30:bf:06:17:e1:96:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=dda87e8b-a683-4e4f-a016-81ae2f94f8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:cb:fd:b6:68:33:ad:7e:b2:5c:24:2c:d7:
                    21:0a:6e:99:a0:0f:27:66:43:19:69:48:32:87:1f:
                    61:4b:b5:33:94:c0:e9:52:4e:e8:ca:97:66:d3:39:
                    cc:15:24:90:e7:ee:93:6b:92:c3:cd:3b:f8:c5:5d:
                    25:d7:c7:34:68:76:0c:c5:04:75:c2:64:35:64:b2:
                    6c:2c:e9:10:fe:4a:cf:26:f7:60:f2:24:c5:c2:27:
                    f8:4d:5e:f0:fa:8a:b6:1e:de:f3:fe:6c:25:16:33:
                    29:00:61:0b:68:0c:7a:2f:cf:54:8d:b3:1c:84:75:
                    24:d8:0a:2e:2a:7b:99:d8:75:91:2e:f6:4c:4e:7c:
                    a6:e3:62:fc:24:ea:c4:fd:08:79:4e:17:40:9e:51:
                    68:38:81:63:4a:b7:1a:57:9a:fe:86:be:8c:21:4c:
                    31:c0:98:fa:6e:32:09:28:1b:ff:44:76:cb:6a:e5:
                    a6:07:17:4b:8f:7d:93:07:cd:e0:34:a9:bf:ba:43:
                    41:c8:27:20:a1:0b:c4:ff:e5:ac:9c:da:b3:6e:92:
                    e2:ed:47:a2:88:d1:5d:be:6c:6f:99:36:5f:14:13:
                    5d:55:9b:59:6b:98:35:f4:0f:85:6e:79:02:8f:64:
                    13:0b:af:eb:ed:dc:48:57:76:8e:fa:12:12:d4:d3:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:03:CE:AD:10:CD:5F:1A:6A:29:2D:0A:0A:AE:4D:5B:BA:81:54:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/553ea024-93c1-3a08-b9d8-1cd187754d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:a7:58:c3:99:4e:55:c0:d4:35:7f:92:84:7f:b2:92:be:35:
         d3:d6:c6:ca:06:78:e5:42:66:06:b0:2c:07:91:f3:f1:84:cf:
         9f:96:91:b5:2c:14:23:9d:7a:c2:f9:30:89:8b:35:f6:20:73:
         ee:2b:e5:00:4f:b2:8f:bb:6a:ab:13:f9:24:2d:d6:ba:ce:24:
         3b:66:a0:9f:11:ff:87:2b:7b:a0:d5:31:d5:0a:1a:2a:92:27:
         43:6a:0c:16:ea:19:c5:e0:a3:ea:c5:b6:53:0f:34:76:20:0f:
         4e:42:54:c9:59:25:fb:ae:2d:90:50:ad:56:1f:48:95:5f:b7:
         b2:a5:14:be:82:68:f9:3f:29:cd:1d:bb:69:fb:46:12:5b:77:
         33:33:d8:c6:c4:83:41:e8:3d:b1:6f:e8:29:ef:31:54:25:7f:
         e4:e0:b7:42:1f:b4:6f:ac:a5:34:5c:b5:27:db:dd:a1:92:4c:
         eb:1c:0e:06:28:55:d1:ea:5c:f2:89:7f:85:4e:2e:07:5e:d4:
         dc:3d:22:c4:93:33:23:29:f3:7b:76:aa:18:b3:2a:22:53:a9:
         6b:bf:0d:05:94:69:44:1a:54:58:18:98:cf:ec:cd:ba:55:bb:
         b6:47:f9:da:be:0d:92:aa:2e:0c:67:08:86:8b:c4:3e:e1:19:
         65:2e:9b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:46 2024 by rpki-client on console-ams.rpki-client.org