Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/630eb038-fd29-370f-b0d9-407ed29e7e0b.roa
File:                     630eb038-fd29-370f-b0d9-407ed29e7e0b.roa (raw, json)
Hash identifier:          OIrz1cHBEO0Md1MMXcDin+/axHgFdtdM0ZbqjupJqr4=
Subject key identifier:   23:DB:73:C9:35:1C:B8:DE:79:6A:2E:56:6B:5C:BD:CC:8E:21:B4:02
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E32BCE27C6106BE8B6380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/630eb038-fd29-370f-b0d9-407ed29e7e0b.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.198.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:32:bc:e2:7c:61:06:be:8b:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=242d1ac7-ab41-4b72-8580-d542bfc9beb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:c7:8c:89:00:8b:34:5b:d7:a0:63:02:60:
                    90:76:6b:84:0d:3e:c8:17:96:16:60:b3:15:72:32:
                    6f:b6:c9:6b:3c:16:b9:b1:dc:25:a8:e7:a5:9f:8c:
                    59:3e:2b:e9:1d:55:e5:8e:bb:b3:f4:62:c9:85:6b:
                    bf:08:cd:6a:73:90:b7:6f:7c:05:ff:23:a2:07:d2:
                    1c:38:5a:d6:e1:a7:e2:a2:6e:89:8f:62:6d:10:62:
                    6d:77:3a:27:21:cc:6e:0b:21:25:ae:e1:b7:b8:53:
                    e6:43:b9:49:e8:e4:1c:e0:a6:b8:39:5d:4b:8b:36:
                    b2:56:c3:ab:db:b3:15:55:67:c0:d5:b5:44:2b:9f:
                    dd:b8:91:ab:4e:b9:26:02:e2:ca:90:75:91:b4:fb:
                    c1:e8:33:53:c2:b3:a6:0a:2d:d0:f0:55:a3:63:27:
                    d8:1e:b8:92:4b:de:19:e9:bd:cf:e2:9d:5b:ae:6f:
                    fc:c9:ae:86:b0:6d:f6:f3:de:b0:76:6b:f0:19:3a:
                    ba:b3:99:b6:0a:9c:ec:5d:ce:79:1b:23:0b:7d:47:
                    2d:45:5d:95:a0:5b:55:ca:3d:ed:8f:a7:0d:7e:d6:
                    eb:b2:a7:be:b7:8c:48:57:ac:79:06:81:52:01:ed:
                    bd:fb:22:0d:cf:5c:4a:8b:3b:b1:40:25:e5:13:cf:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DB:73:C9:35:1C:B8:DE:79:6A:2E:56:6B:5C:BD:CC:8E:21:B4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/630eb038-fd29-370f-b0d9-407ed29e7e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:ef:d6:e1:03:a5:d0:a8:6f:54:71:35:6e:bf:7b:c2:99:
         ed:9b:83:47:44:ab:9d:98:b7:47:0b:a1:2c:56:68:aa:d8:19:
         04:75:db:8e:05:29:4d:e7:1b:ce:43:bf:f5:40:34:59:b0:8c:
         1e:46:a8:46:1d:75:2a:3c:da:68:ca:84:fa:b7:f7:3b:d6:8f:
         ee:6e:45:28:9c:f9:f4:bc:65:fc:8f:30:9a:37:58:95:0b:ab:
         b3:20:4a:7d:f9:93:ba:6f:df:26:f3:56:cc:09:ca:e8:35:df:
         af:a2:de:ac:53:5f:49:be:42:41:d4:3b:9f:a6:d3:2b:36:f3:
         c9:35:ad:7a:a2:ef:2e:d4:ca:da:ff:00:f8:23:a9:c2:39:14:
         fc:8e:b3:d6:e6:a8:53:ec:ea:67:fd:38:7d:cd:bf:84:c8:83:
         fb:df:af:64:d9:33:0d:aa:e3:9e:fd:54:69:5b:78:99:9d:eb:
         dd:c0:b2:df:1e:f4:8f:8a:f8:db:d0:74:d2:2b:8d:91:e2:d6:
         a0:62:53:cf:61:3d:1f:ae:5d:58:82:4f:d4:28:3e:a5:03:f4:
         d7:6c:c8:71:9d:98:52:2d:80:43:4e:fa:d2:65:71:b3:ac:34:
         95:a8:c2:6c:9f:d8:ae:ca:cd:70:55:44:c7:4c:a4:93:46:36:
         54:10:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org