Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/553ea024-93c1-3a08-b9d8-1cd187754d20.roa
File:                     553ea024-93c1-3a08-b9d8-1cd187754d20.roa (raw, json)
Hash identifier:          LrokhnuweHHotRWs47XE7+TQxFQYDp48Nk5cXksC1dk=
Subject key identifier:   23:A9:55:44:EE:74:3A:A5:0A:96:D4:C6:FD:E3:4F:6F:06:8F:4A:BC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2698FE7778BF139ED200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/553ea024-93c1-3a08-b9d8-1cd187754d20.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:26:98:fe:77:78:bf:13:9e:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1a04b523-469e-422b-b09c-70f7f9307a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:b7:e0:ab:09:ae:7c:cd:84:85:3f:ae:3a:
                    fc:da:2a:df:23:d6:15:e9:84:29:76:e7:7a:e9:4c:
                    a1:b8:64:e8:91:16:1c:1d:d4:0a:71:dd:5b:a5:27:
                    df:74:54:0d:9d:2f:40:77:40:6e:9b:b6:2f:20:40:
                    1c:d4:5c:f6:44:a0:da:c6:a8:4d:6f:8d:16:4a:63:
                    18:09:36:d2:36:1e:5f:43:95:c8:7e:26:88:14:09:
                    d4:ee:ab:aa:83:4c:02:8b:dd:62:c5:83:4f:d6:8b:
                    de:e9:f9:60:d0:fe:fc:88:d3:aa:f9:43:47:8d:e1:
                    de:8e:47:be:a7:76:7a:86:8a:c4:2d:cd:bc:eb:5b:
                    02:7b:a7:cb:67:7d:d2:00:78:94:45:1b:8d:65:71:
                    89:bc:68:b6:2f:b0:ec:3e:87:6b:a3:de:39:fd:47:
                    82:8a:96:da:28:35:48:d1:06:3a:13:93:bb:8b:87:
                    cc:9a:6c:36:db:65:2b:e5:19:d4:26:d7:c4:f2:a3:
                    58:e3:58:4e:12:0f:cc:24:00:1d:b7:68:a0:d4:fe:
                    5e:8a:5d:b0:45:8c:99:13:a8:9f:39:b7:9b:f5:b0:
                    2d:5f:3f:f0:b9:44:42:55:cd:f4:37:bd:bd:c7:8d:
                    f7:4f:70:d9:ba:32:b8:18:d2:67:13:aa:45:f2:6b:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A9:55:44:EE:74:3A:A5:0A:96:D4:C6:FD:E3:4F:6F:06:8F:4A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/553ea024-93c1-3a08-b9d8-1cd187754d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:f8:0c:48:d0:d7:58:0c:1b:e6:e6:48:7c:3d:86:7f:0b:
         e4:8e:0c:c3:0c:0f:29:03:89:93:94:69:4f:c8:f0:e5:f8:21:
         af:c1:6c:77:d1:c5:44:70:2b:ee:65:5a:cb:cc:1a:46:60:11:
         72:8b:23:98:ed:a6:17:c4:42:a1:3d:d0:e8:e8:ec:4a:6d:2a:
         17:96:56:9f:7c:0e:9a:95:85:1d:a7:c0:37:dc:c8:42:8e:9e:
         1a:2b:c5:15:7e:78:b4:18:b3:9e:30:1e:c8:5a:5c:cc:03:be:
         87:0d:19:a8:82:6d:ad:0f:70:38:dd:2b:8d:a7:69:8b:8f:ea:
         ce:a3:a6:d8:2f:ff:8f:d8:6a:e5:de:ce:f3:86:e5:39:ff:56:
         18:c1:79:d3:fd:c1:7a:b9:08:35:11:41:dc:ba:7b:98:37:f1:
         57:6a:61:23:e2:56:40:59:95:03:36:e4:38:cc:a5:ec:ce:62:
         ad:d7:2e:fc:83:e6:2b:d5:dd:5b:fd:d3:65:84:36:42:cb:d0:
         40:f6:76:64:af:86:b1:f8:67:39:d7:2d:e3:50:6b:6e:df:16:
         36:59:f3:70:ce:d1:bc:74:42:c8:a8:a6:05:35:fa:24:be:04:
         83:bb:76:fd:bd:cb:b6:36:72:af:a9:1c:0e:01:c8:28:08:7c:
         b7:0a:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org