Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa
File:                     628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa (raw, json)
Hash identifier:          3iJ11+2UE/PbGs6SzVpdEyVprGp6JZz7YnrvTHmGCxU=
Subject key identifier:   7A:A5:22:0B:09:47:BD:36:9C:ED:DA:94:0D:E4:0A:D1:FD:C4:0B:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2927E34F85E9595C0500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:29:27:e3:4f:85:e9:59:5c:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6fbb5a68-a65b-4671-b3f3-c4073c9b0199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5d:6e:0a:3b:3a:0a:7f:b6:d6:fe:95:5f:b9:
                    12:62:80:3a:19:9e:e4:9d:c3:eb:c9:70:9e:48:1c:
                    64:a2:64:ad:02:be:2e:b6:79:c5:86:49:41:fc:01:
                    f0:10:46:ae:ee:06:30:e4:b7:f7:2b:08:0a:92:1b:
                    24:33:a5:4b:57:54:52:db:86:15:96:e9:49:0c:7a:
                    98:26:6e:ee:86:ad:54:65:a6:85:e6:cd:fa:49:ee:
                    48:c7:23:1b:37:30:06:5e:56:11:2e:31:23:ae:5b:
                    81:d0:4a:10:6e:8f:db:4b:e7:3e:93:d0:ef:d0:ef:
                    64:e7:5c:3b:34:44:78:bc:a6:a6:e1:57:ae:1a:00:
                    8b:af:d8:f9:ad:b5:35:02:de:1c:3b:39:52:b7:eb:
                    e1:8f:89:ed:3c:6d:3a:6d:59:3c:e3:e5:58:70:08:
                    c4:f7:35:ef:37:0e:9f:34:c3:7b:28:c9:01:f8:a6:
                    16:de:01:8c:3b:9e:d5:0a:73:7f:be:82:b1:f2:2d:
                    84:68:8b:c7:14:3e:af:d1:93:a7:e1:2c:fc:aa:60:
                    87:d4:65:b2:59:35:4f:8e:bb:bc:74:bf:04:62:5f:
                    f5:01:f9:a2:2b:58:c8:4f:79:a6:92:c2:fe:74:61:
                    fa:7e:ea:2a:bf:98:43:39:5b:22:41:bd:c1:ce:e6:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A5:22:0B:09:47:BD:36:9C:ED:DA:94:0D:E4:0A:D1:FD:C4:0B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/628202cf-1e14-3c4e-95c4-6ecc7d1d12f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:a9:93:60:06:66:e1:98:a2:04:e5:c6:7b:29:c5:c2:1e:b7:
         8a:df:39:30:9b:b4:65:f6:ad:01:af:2b:f7:e7:c3:0e:9c:04:
         d6:ac:6f:f5:53:e9:1b:d5:59:1a:77:0b:6f:5d:11:ee:35:75:
         bb:b8:82:ee:4e:a0:c2:c4:e0:0e:cb:19:b5:d3:00:df:f6:f5:
         19:0a:46:be:22:bb:0f:5a:0c:41:94:7a:59:ae:ee:20:96:79:
         ae:dd:4d:35:8c:a5:d2:7a:b2:2e:df:47:16:45:c3:7a:07:67:
         41:09:fa:28:b7:4e:dc:1b:7c:d3:26:e9:00:95:bc:57:00:d7:
         9e:ef:2a:9f:d9:55:57:80:1d:56:0e:a2:24:28:80:c9:fd:de:
         9c:15:68:be:f7:19:57:b6:d9:b6:c1:07:2f:de:18:44:c0:11:
         0b:33:60:7d:ea:da:6d:80:ce:80:42:97:51:6c:18:21:1d:eb:
         5f:b5:27:dd:ae:9c:ab:06:9f:b3:99:06:bf:c3:dc:23:cf:bb:
         fb:9b:c7:a0:9a:a8:1c:29:ea:e2:3b:8f:fe:0f:fd:b0:42:24:
         05:ca:18:95:18:b2:f1:41:4b:0d:0a:16:cf:60:e0:8a:1c:e6:
         24:04:e1:ae:df:e9:7d:9b:90:a5:98:d3:2e:97:f2:99:30:57:
         ea:4e:5b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org