Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c83332b-9e37-3246-b315-f359c9b91837.roa
File:                     5c83332b-9e37-3246-b315-f359c9b91837.roa (raw, json)
Hash identifier:          o/5N+UvKw9KFSEcHEuyLm1lFD7ydVGyItjucBezpDsk=
Subject key identifier:   29:D3:74:00:48:EB:CF:D5:34:33:2D:2A:13:AC:F0:FB:16:F9:3B:BD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2C3DBA9ACD8152A33480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c83332b-9e37-3246-b315-f359c9b91837.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2c:3d:ba:9a:cd:81:52:a3:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c2a4640a-829a-4bd4-9fa6-2807dd50701f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:de:06:f3:99:66:b0:b4:a3:86:b7:89:c2:
                    7e:18:db:57:7c:dd:f0:c9:26:fa:cb:d9:1b:6f:10:
                    b6:d5:05:d9:b1:ab:bd:21:bb:8a:9a:0c:45:ae:b8:
                    9e:42:80:77:64:36:ac:8c:f4:0a:16:90:64:a9:79:
                    fd:72:d8:82:59:de:59:37:01:7f:e6:69:f7:40:ca:
                    c4:c0:6b:6f:68:34:15:95:8e:80:6d:d3:57:cf:4c:
                    54:d5:39:5d:0d:89:33:e7:c4:74:86:28:55:72:69:
                    b5:3e:77:cc:73:b3:59:0c:42:b4:ea:7f:3c:24:39:
                    c9:1b:e8:4a:8f:63:d7:91:8c:cb:c1:46:31:eb:85:
                    d0:d3:53:85:d9:8d:92:7c:44:7b:52:21:d0:da:1d:
                    b6:37:8d:08:d4:0f:e6:a5:a4:a6:78:d6:ab:7e:7f:
                    7f:66:1a:27:56:5b:79:29:21:d8:0b:4b:17:5d:de:
                    c5:c2:75:85:ca:33:f7:04:c5:2e:9e:17:8f:29:e9:
                    ba:80:32:2c:34:63:95:4c:83:8f:e2:86:a6:b1:20:
                    f4:d2:54:54:7c:f0:56:70:c5:be:93:78:c3:25:60:
                    0c:78:f4:aa:98:59:3b:0b:7a:f7:fd:ef:0e:9d:1a:
                    fc:89:9f:5c:bb:f0:e0:3e:d8:4d:14:19:89:30:c0:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:74:00:48:EB:CF:D5:34:33:2D:2A:13:AC:F0:FB:16:F9:3B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c83332b-9e37-3246-b315-f359c9b91837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:f3:aa:d7:89:35:db:90:25:a9:1c:dd:52:b0:88:0a:fd:
         c8:7b:29:c3:46:04:7a:55:8e:6d:86:93:ac:7e:dd:fc:45:26:
         ac:7c:9b:88:25:fc:25:39:a4:a4:e9:61:30:55:72:ca:79:90:
         d8:32:80:d9:7c:80:76:e4:ab:62:b8:eb:46:1a:d8:fa:e6:b1:
         51:29:32:84:5d:b8:d5:7f:8e:6e:59:ae:de:03:b8:62:03:53:
         0c:bb:eb:b6:5f:d2:5d:1f:90:48:7e:7b:57:ed:45:89:a7:19:
         f8:fd:45:24:87:49:79:b7:96:40:a9:f1:68:c1:8d:96:46:c8:
         28:31:7e:c4:d5:2b:96:94:be:56:0a:fe:68:ba:a8:23:48:87:
         15:1c:61:85:04:a9:a0:9f:2f:7e:1c:df:71:20:1d:0a:14:6a:
         a8:77:96:83:5d:97:54:23:e4:a3:68:db:d9:b7:58:e6:73:a9:
         77:42:1c:fa:a0:d7:e9:a7:ff:7f:4a:38:47:a9:9d:fa:72:92:
         e4:e6:37:81:9f:70:95:f0:37:2f:d2:75:fc:90:fc:f8:77:f6:
         39:91:2f:d5:f3:36:ab:0e:19:b1:aa:b4:d5:88:cf:15:ee:48:
         72:ce:8a:6e:cd:82:e8:22:13:a2:93:35:5e:ff:ca:76:9c:75:
         3d:a9:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org