Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa
File:                     59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa (raw, json)
Hash identifier:          sGieaWB9b5s7chX5FgQddVNkpXn6REIvM5UBnLLTHYA=
Subject key identifier:   D0:E5:09:44:6A:13:BF:56:1B:89:16:8B:6E:67:8E:EF:B4:18:56:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2958A650C2422975A980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:29:58:a6:50:c2:42:29:75:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=bc0de46f-4371-4794-bd43-f7499c3dbbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:0b:ae:cc:83:c2:23:7d:bd:a9:43:43:c5:
                    5e:a3:99:d4:cd:d3:88:b5:de:d9:84:99:35:24:1e:
                    5b:3a:57:58:29:5a:f4:49:aa:c6:53:f6:95:5c:1e:
                    9d:a3:e6:c2:6f:f4:3c:6d:64:bf:43:75:8d:67:1e:
                    54:9b:cb:87:12:b6:b2:49:e1:8e:ea:6e:3b:1a:91:
                    8f:59:6f:dd:d8:79:31:69:7d:5b:6f:2b:6e:3c:7a:
                    e8:49:55:86:da:45:96:34:47:a8:f7:61:f4:13:0f:
                    9c:d3:d9:4c:b8:73:93:80:95:4d:e0:f6:a7:15:b4:
                    60:26:fb:99:df:fb:6f:52:75:d4:f1:03:37:2d:42:
                    63:6e:cc:dc:c0:78:65:4f:3b:79:d7:1b:1c:5f:c1:
                    c6:9d:fe:18:42:ae:28:73:cf:58:40:34:14:ad:d4:
                    40:39:5a:e9:96:d0:e7:b5:27:c6:84:c1:e5:43:34:
                    70:4c:21:df:d5:de:20:8c:8c:8a:3b:e6:38:d1:5a:
                    c7:ef:b4:35:d2:f8:93:01:35:ca:2b:7c:52:49:1c:
                    fe:b1:b8:c6:d7:21:c3:21:d4:07:86:86:c3:b5:1e:
                    76:e5:24:ed:d9:f9:e3:64:13:f2:06:2e:b8:45:d2:
                    ab:28:67:1c:52:38:8e:fb:71:c0:9d:eb:62:43:5a:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E5:09:44:6A:13:BF:56:1B:89:16:8B:6E:67:8E:EF:B4:18:56:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59dacd66-3510-37a0-acd1-c5b1f5df0c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b7:06:40:9a:ba:35:b1:2c:14:60:bb:c6:ee:b6:8d:ac:95:
         e4:19:dd:27:34:5d:70:8e:6f:91:f6:2a:b0:7c:5a:a6:96:e5:
         f2:4d:f8:ed:a7:ac:8b:b0:52:a6:eb:94:6c:90:65:18:17:2a:
         e2:b5:74:57:7f:78:c4:1b:de:f0:fc:01:16:06:0d:b5:8f:d4:
         0c:f7:03:66:d1:cc:91:74:b9:61:52:cb:3b:db:8c:47:5b:39:
         d1:3b:52:f7:6a:89:8e:5a:67:5e:55:8a:ad:6f:f2:52:3d:1a:
         46:a3:2c:97:5e:17:7d:86:03:4a:cf:db:4d:bb:12:75:f8:81:
         ec:13:2e:04:71:a7:8b:4a:a4:6b:7c:67:ae:3a:03:e9:00:7d:
         af:95:e1:51:78:49:f2:90:f9:09:44:76:e9:7a:ca:54:c7:ea:
         d1:0d:c2:6f:1b:9c:d0:03:e8:f1:c9:27:55:89:ae:54:63:15:
         42:74:d2:1e:5c:46:57:f2:4c:d3:df:27:da:11:f6:6d:0e:7a:
         b3:f8:30:9b:77:d9:83:fe:ea:f4:e0:5a:3c:84:6d:56:8e:53:
         b3:7c:7b:86:78:ea:0d:c2:60:cb:d0:91:09:32:6b:ab:59:e3:
         47:87:b7:2b:8d:10:3d:8d:99:4d:9c:18:8f:7d:9a:0c:52:2b:
         1e:e6:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org