Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61fd5c68-a4f8-36e4-8e66-6be528f948f2.roa
File:                     61fd5c68-a4f8-36e4-8e66-6be528f948f2.roa (raw, json)
Hash identifier:          Gkv0hQttfDbgK2uPcoguRYaoNr6XLCbhoexgvmlmKBs=
Subject key identifier:   F5:4C:9B:E2:D9:D1:08:61:F9:31:3A:B8:C8:13:2C:F0:0E:6F:D9:27
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DB28645D8293D386B36C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61fd5c68-a4f8-36e4-8e66-6be528f948f2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:b2:86:45:d8:29:3d:38:6b:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=e4021603-dd4f-4a4c-9cc1-8d4aec680784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:6b:81:55:56:fe:1b:ce:6c:e7:1d:60:0c:
                    5f:3a:53:08:bd:ed:c3:ec:af:8d:09:eb:56:69:d2:
                    b1:4d:f0:9c:b7:dd:93:96:89:2f:30:39:ba:cf:90:
                    cd:99:40:46:27:1c:c4:44:d2:de:90:f5:5f:f6:29:
                    e4:ae:7a:8e:ab:85:ab:ea:7d:34:10:09:ed:01:06:
                    c3:0d:6d:ab:72:3e:2c:e2:f1:1e:03:d8:b4:87:47:
                    9a:fd:a7:f4:64:32:26:ed:f5:36:36:4d:32:19:26:
                    7c:84:9c:25:0a:8a:2b:c9:56:a0:56:db:b6:b5:0c:
                    22:48:61:5b:38:de:15:56:ff:ae:2e:a9:ca:ea:7d:
                    f6:27:26:66:dd:ea:54:14:44:44:0d:aa:67:7d:4d:
                    d0:0d:89:2c:12:ce:57:86:2e:e9:04:55:85:a4:97:
                    87:d0:07:47:5c:f7:3c:4e:ec:3a:47:1f:f1:d4:6f:
                    91:75:96:3b:92:b7:fb:55:01:88:e6:3a:99:c5:dc:
                    a7:f7:c4:4c:a5:f4:01:ac:08:d0:11:b9:34:c9:0f:
                    f2:97:b9:e2:17:6a:16:3b:18:6d:6f:8c:5a:91:21:
                    d2:6c:c8:d2:76:c1:a7:0b:3b:a0:b6:d8:fe:06:30:
                    50:ab:0d:76:4b:02:cb:db:85:e5:35:fa:64:a6:40:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:9B:E2:D9:D1:08:61:F9:31:3A:B8:C8:13:2C:F0:0E:6F:D9:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61fd5c68-a4f8-36e4-8e66-6be528f948f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:e6:e0:19:a6:7c:bf:be:c3:7e:72:f6:42:85:44:20:ab:
         e6:5f:ec:40:7f:5a:16:31:1c:f1:59:59:18:4f:90:33:e8:81:
         d2:70:fb:f0:43:59:2f:6d:a8:e1:8c:e3:16:72:1b:4f:99:f6:
         c4:dc:7e:44:87:d3:d7:59:87:49:cb:c4:63:39:f9:de:8f:a9:
         05:d0:67:8d:af:2d:3b:19:09:ee:58:17:8c:d6:54:49:4b:0f:
         3f:9b:6c:1e:86:70:ac:b1:ad:96:7f:a8:81:ec:d0:4b:01:9d:
         50:d6:b4:88:24:e2:7d:27:c9:ae:bc:f7:30:80:30:ae:47:04:
         d1:1b:80:db:05:9c:93:14:96:49:f1:ea:4f:e9:8b:8d:26:92:
         82:55:b6:89:8f:4e:41:ff:39:6d:ec:c7:d6:29:ed:e7:f9:a4:
         fa:59:d3:b1:3c:f4:3e:d7:f6:10:d4:e1:d7:90:eb:2b:32:0a:
         e1:03:9b:a3:d6:10:c7:7c:7d:6a:88:f6:b3:d1:b7:e2:37:a1:
         76:18:00:d8:2e:49:75:66:e7:37:df:c4:af:8c:30:4d:42:3f:
         a8:44:61:60:e6:9d:cf:4a:a2:e6:4d:4a:3f:5e:fc:c2:c8:7b:
         8d:e0:16:b0:ea:6f:72:0b:6b:8e:9d:8e:e3:a5:42:4e:48:d7:
         2e:62:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:03 2024 by rpki-client on console-ams.rpki-client.org