Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6323c640-3dba-3db9-bbd9-764f48531d64.roa
File:                     6323c640-3dba-3db9-bbd9-764f48531d64.roa (raw, json)
Hash identifier:          QOuOAW+rq93toobUH0fr/lHPjXkIJRzF/Q2MFRI4G7I=
Subject key identifier:   A0:FD:3B:11:44:57:BD:04:87:39:AB:9F:8F:00:6C:86:21:57:0B:9B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2390B7F1BC544A2C7B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6323c640-3dba-3db9-bbd9-764f48531d64.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:23:90:b7:f1:bc:54:4a:2c:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=2347cf95-fb27-435a-85d0-266ec7c4fbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:9a:69:69:e0:e6:0c:a8:95:1e:2e:e0:3f:
                    96:a2:72:03:6a:22:70:d0:23:53:e5:6d:9f:f2:be:
                    43:74:e4:c0:e5:1c:a1:05:49:19:6b:de:06:50:a2:
                    86:e5:fa:64:93:84:33:37:41:60:99:91:01:af:fd:
                    d1:af:a4:9d:be:49:24:25:0a:9c:50:6d:6a:66:40:
                    77:35:0d:ed:3c:52:9b:ac:35:b9:c2:6a:cb:fc:09:
                    78:6c:d9:9e:2d:00:6d:36:65:1e:e5:88:60:81:ef:
                    05:2d:ae:e7:f5:f4:be:6f:27:9f:9e:3d:4b:37:d3:
                    51:75:12:98:0a:bb:23:d3:28:04:d9:1e:03:4b:7e:
                    3f:2a:7c:61:0e:40:e5:46:ff:32:9e:2b:3e:85:ad:
                    5e:fe:da:dd:30:50:59:11:25:dc:5a:93:63:70:9b:
                    ab:02:46:ff:f6:6a:2b:41:dd:c5:f8:f5:ab:5e:1c:
                    9f:27:f1:8b:e8:7d:f3:60:11:bd:f6:1a:b0:79:3a:
                    ae:69:42:36:2b:02:bd:ae:60:6b:de:25:cc:56:50:
                    21:e1:b7:ed:ff:dc:35:79:2d:55:b0:67:b5:9f:59:
                    30:60:59:77:24:c5:4e:4b:fa:44:56:d5:45:03:1e:
                    e0:9b:a7:f6:9b:43:6a:90:b4:a5:58:b9:2f:b6:b1:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:3B:11:44:57:BD:04:87:39:AB:9F:8F:00:6C:86:21:57:0B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6323c640-3dba-3db9-bbd9-764f48531d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:b7:f6:c4:85:da:ed:8e:7b:0c:5a:8c:76:97:c1:5d:f6:
         10:ea:dc:df:01:4a:cb:e4:1f:d9:fc:f2:94:a7:5a:90:69:86:
         96:ee:5d:bd:60:a1:76:38:89:ea:7b:b3:6d:01:81:c3:c7:70:
         e6:43:57:79:3b:e0:ed:8d:83:b0:a3:0e:90:fa:ac:b1:a8:27:
         f2:73:5e:c4:a3:84:c8:f1:6b:ca:86:91:e6:cf:54:c9:86:cf:
         c1:79:73:63:1c:91:b0:36:b9:0a:47:01:8c:d1:e1:7d:b1:bb:
         b5:72:bc:1b:1b:5b:c8:56:cd:fe:06:6e:93:5e:06:3b:a8:f2:
         79:de:45:bc:81:c2:26:da:a9:34:a1:05:ae:ca:b6:d9:71:5d:
         8e:36:20:b1:6f:55:6b:31:d5:cc:e5:f4:21:af:c2:9e:69:e6:
         34:17:8e:c4:60:ed:b5:5a:8c:0d:9d:d8:86:fc:f9:2b:88:f8:
         71:93:3e:bb:c9:c4:c0:a3:fa:f9:5d:17:e4:ff:78:fa:41:27:
         7c:df:7b:48:97:21:fe:7b:c0:d9:98:9d:da:b4:46:40:d7:d9:
         0e:14:b5:b3:b4:95:16:13:76:8c:cd:39:57:e2:ae:47:fe:c4:
         06:f5:8d:eb:c2:67:84:f1:e6:9e:04:a6:dc:46:1a:42:a8:aa:
         cc:3c:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:43 2024 by rpki-client on console-fra.rpki-client.org