Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6532ff5a-fbfe-33d8-aaab-3b4ab935a0ac.roa
File:                     6532ff5a-fbfe-33d8-aaab-3b4ab935a0ac.roa (raw, json)
Hash identifier:          ylBmZKRY7XfHvRwarqM8kaOaXtevcmjAyq+bNfOiziQ=
Subject key identifier:   35:46:FA:7F:6A:A3:CA:49:94:3B:2D:45:6A:A4:C3:E4:01:E9:D0:95
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF5CBC5C18DF92D328760
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6532ff5a-fbfe-33d8-aaab-3b4ab935a0ac.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f5:cb:c5:c1:8d:f9:2d:32:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=7526b7ff-e4c8-41ea-8ffa-34b16b9056e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:00:80:96:ef:26:68:d0:29:19:ec:d4:3d:
                    36:3e:03:b1:bc:5e:37:e6:27:f3:e1:33:bc:f1:77:
                    66:6c:7c:e2:8b:fc:cc:1b:32:53:4a:35:36:75:96:
                    d1:93:35:1e:66:65:0e:9c:70:4f:8a:ee:28:63:2c:
                    80:e3:f3:8b:49:4f:24:f6:0c:27:9a:69:9d:57:90:
                    1d:a2:84:79:8c:a2:9d:9d:fe:21:20:f1:e7:01:a2:
                    e4:fa:1d:8c:6e:53:66:b6:20:51:3c:f2:39:9c:6c:
                    91:f8:ef:71:cd:63:d6:78:44:09:03:63:66:20:e8:
                    17:68:92:c2:ed:6e:bb:4a:8f:3c:fe:56:ff:85:f0:
                    c5:78:43:47:05:10:0a:c8:88:34:ff:4b:97:40:5f:
                    9b:e0:a5:a2:b5:e5:41:9b:b7:bc:a5:47:4c:dd:74:
                    d5:5d:d6:5d:75:72:cc:ff:fc:b9:b4:80:4e:c0:ff:
                    69:cf:74:46:7c:35:3c:b7:3c:00:b6:74:bc:71:47:
                    19:f1:e4:fa:31:1b:62:fa:d6:c0:82:cb:92:1f:ca:
                    d3:e8:f1:f9:06:f1:31:aa:b6:6f:41:48:25:8c:54:
                    2e:c2:f3:d6:28:18:38:33:29:cb:74:d3:3c:2e:93:
                    48:d1:c0:32:d6:2e:f5:4a:a9:ef:5f:5f:93:c3:9c:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:46:FA:7F:6A:A3:CA:49:94:3B:2D:45:6A:A4:C3:E4:01:E9:D0:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6532ff5a-fbfe-33d8-aaab-3b4ab935a0ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:0e:22:2f:f9:3b:fa:c0:f7:80:f1:bf:fa:07:15:72:e3:
         39:94:86:e5:0a:74:ad:71:75:a8:88:79:4d:c3:d5:6c:10:fe:
         5d:49:cc:41:20:39:84:94:41:0d:bf:fc:a5:8c:1d:f5:66:d9:
         04:fe:2f:9e:12:6a:14:ec:2f:03:26:6d:79:2f:30:9e:7c:18:
         64:7c:70:5c:54:4b:6c:ae:a1:b6:a2:7f:f1:ee:aa:a3:06:23:
         86:71:8b:11:6e:b5:93:74:82:cd:21:fb:11:c4:32:b3:ba:88:
         4b:ad:d5:3e:16:d6:b9:47:b9:cf:1e:b9:de:39:c3:a5:5e:a2:
         34:2f:42:ec:2f:56:a4:05:cd:db:90:88:68:01:f2:07:bc:36:
         a0:ac:b4:68:5d:49:ce:e9:32:fb:d1:c0:b1:d7:c6:78:46:fb:
         a8:03:51:5c:78:5e:13:2e:13:49:be:ed:a2:2b:d3:75:2e:b6:
         27:51:c7:c7:29:7a:4a:14:28:07:8e:22:48:ef:2e:37:ed:a2:
         c7:c5:8e:2b:5f:3e:95:54:7e:a2:14:b2:36:2c:85:9f:08:68:
         62:5c:83:e7:6c:64:a4:04:44:77:d3:74:15:04:16:89:43:08:
         a6:03:23:1c:5b:ba:8b:7a:e5:af:04:2b:80:36:cd:16:79:98:
         72:0a:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:53 2024 by rpki-client on console-ams.rpki-client.org