Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa
File:                     648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa (raw, json)
Hash identifier:          VpgyxMQchixim0rRsz9fKU4XL0vz+cnePcnS5QHDQ9w=
Subject key identifier:   94:3C:29:49:44:C3:E2:67:86:8A:C0:E8:6A:B8:0C:E9:37:F1:47:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E31FD87809E171597BA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:31:fd:87:80:9e:17:15:97:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=251b4e55-5f60-4176-89be-36d4304a9552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:16:05:2c:9b:a1:b6:46:82:7d:58:97:de:
                    64:f4:73:14:f0:b0:d7:6b:fa:36:91:b4:cb:d9:29:
                    da:da:b2:d1:99:75:7f:43:cc:a6:bf:31:9e:ab:4a:
                    98:ef:d5:41:65:9e:5c:d2:9f:e4:56:1f:fd:18:6d:
                    e4:0f:f4:9e:ae:80:ee:b0:ff:85:cb:d4:1b:92:e2:
                    7d:2d:57:70:9d:41:92:27:62:9d:bb:a2:c0:39:1c:
                    ea:84:49:20:fd:d4:fe:f5:64:59:1f:b4:49:87:e4:
                    07:70:f8:41:a8:a7:a4:04:bb:e3:45:e4:ce:90:cf:
                    13:71:e9:58:3c:e5:38:22:3a:c1:38:69:11:04:c4:
                    f8:83:73:3e:dd:75:56:2d:27:a6:f7:d6:6e:ed:16:
                    93:1d:31:12:dc:96:7a:35:34:20:28:79:10:fc:66:
                    51:de:6f:42:d4:b7:b5:bd:f2:18:b2:74:c9:91:21:
                    95:44:a8:7f:68:9f:ba:43:b3:41:5c:27:b3:a2:e3:
                    51:6d:55:85:ed:82:6b:b2:67:c1:84:62:62:b1:ee:
                    86:8c:b2:b2:c3:a6:b9:66:a2:99:2a:32:89:26:0f:
                    07:e3:1e:df:6a:ab:0a:25:77:b7:42:3c:18:83:0f:
                    e5:da:86:74:68:49:34:8e:28:da:ea:09:c8:e4:36:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3C:29:49:44:C3:E2:67:86:8A:C0:E8:6A:B8:0C:E9:37:F1:47:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:00:a5:85:dd:e7:bc:c1:ca:37:9e:91:35:5c:4b:e7:56:6d:
         e9:17:21:67:31:27:74:e7:24:ef:e0:0c:b7:2f:0b:36:27:62:
         16:c9:c9:f7:bd:d3:ea:aa:58:a6:6a:3a:a6:c4:3e:12:37:3c:
         35:18:d2:30:e3:05:7c:fc:1c:7e:f2:9d:ed:95:55:cf:52:7a:
         8f:56:ef:96:44:36:08:62:2f:16:fa:4f:cb:30:75:1f:10:d3:
         ff:1a:fa:ee:d4:04:c5:42:09:ec:c3:7f:38:c7:3f:33:bf:28:
         21:e6:8a:50:11:f6:d8:42:32:8f:14:3d:c8:2e:81:f6:0a:99:
         3e:6f:5d:3b:66:fb:1b:36:7a:3b:66:e9:75:ef:7c:3c:27:d2:
         70:32:b9:4d:c3:f5:ae:db:75:85:df:3e:e8:16:c1:fb:8d:25:
         e5:3e:04:84:c5:63:00:08:f6:29:2b:ee:01:8d:66:3a:72:1d:
         ea:a1:82:77:af:a4:51:bb:77:9f:b0:06:15:ce:1b:bc:8c:1d:
         17:60:69:22:bd:f4:d5:85:a9:eb:9a:58:7d:6f:e9:c0:17:44:
         e2:83:92:4c:e5:b6:ba:ee:ba:02:45:98:ca:02:aa:95:12:cf:
         e9:6d:f9:0f:dd:16:ed:8d:16:d7:bc:f7:d6:59:8e:d4:f9:8d:
         21:22:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org