Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71b31eb7-eef6-3416-af20-9637b4111edb.roa
File:                     71b31eb7-eef6-3416-af20-9637b4111edb.roa (raw, json)
Hash identifier:          D79UiNm8YBrxq563UXYtn4RGmZcgRbN07HqGnXIKx1w=
Subject key identifier:   64:5A:11:6F:E3:97:58:01:F4:99:53:78:D5:A1:A0:99:D1:9C:1C:6C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DABAEBBDE574649B698E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71b31eb7-eef6-3416-af20-9637b4111edb.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ab:ae:bb:de:57:46:49:b6:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=eb4f8406-ef83-4e8b-b23f-ec4682a70a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:1c:cb:c0:db:37:73:45:55:09:4d:83:f0:
                    46:9b:bf:bd:a7:15:9e:17:73:68:fe:cd:69:48:76:
                    81:1d:4e:ba:c9:f9:8c:50:25:34:fe:ef:7f:52:a9:
                    95:dd:7f:6a:a6:fe:d0:54:d2:92:7a:3d:81:32:6f:
                    f9:c4:21:38:ad:85:48:03:d6:d9:3d:fb:d7:0d:fe:
                    c3:90:8f:9f:d8:ab:74:af:04:f1:c7:29:dd:54:7c:
                    af:46:1b:49:fe:d2:77:6c:90:a3:c8:20:89:81:0f:
                    8c:a2:d4:39:21:7a:08:75:cd:af:3d:4b:a6:14:e2:
                    3b:90:fc:ef:d6:1f:af:c3:54:ba:94:cd:4e:1a:80:
                    1d:e2:5e:4c:e9:60:1e:84:d7:48:80:05:c0:e9:d9:
                    85:60:56:a2:76:22:ed:b7:21:01:b8:d6:54:8f:95:
                    89:46:f4:35:25:2b:f6:ec:6f:ab:51:79:8f:95:95:
                    1b:d2:b0:af:44:22:a1:70:42:95:bb:16:2c:35:4d:
                    96:e3:e2:ea:d9:73:c5:84:16:79:8a:be:c1:c8:6f:
                    ed:77:3b:37:15:14:dc:14:f8:5c:7c:df:7d:18:51:
                    eb:41:7e:e8:52:f5:a9:65:71:fa:e3:a1:77:25:71:
                    b0:c4:d2:25:83:01:d0:86:b4:32:91:95:50:b3:c2:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5A:11:6F:E3:97:58:01:F4:99:53:78:D5:A1:A0:99:D1:9C:1C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71b31eb7-eef6-3416-af20-9637b4111edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:96:e3:50:99:aa:8e:be:32:b2:7f:fb:5c:63:ef:1c:72:b2:
         e1:07:5f:c5:c1:ed:3c:f4:8f:79:29:10:46:4a:17:b7:ca:80:
         c7:60:a6:c1:4f:fe:d5:90:b0:50:84:e7:18:c7:d5:8e:91:a0:
         8b:60:dd:44:29:3b:51:27:3b:89:1f:6d:88:20:e8:80:8a:7d:
         4c:f5:b4:0d:60:68:d7:25:0a:14:08:00:db:30:32:c4:2c:4b:
         f2:8e:47:9b:01:27:e2:21:34:0c:60:69:70:e9:cd:64:45:ac:
         8e:75:51:f4:1f:0d:d6:f3:4b:d2:f3:44:f1:53:0c:82:b2:91:
         79:90:ee:0f:46:a9:d4:63:92:ca:f6:a8:d9:de:ae:b3:ee:d6:
         ae:df:2c:c3:bf:0f:61:12:a8:16:1d:7e:76:cb:e5:80:ce:c6:
         75:fa:b6:05:d5:ea:db:83:05:fd:32:1a:8a:9c:96:33:4e:97:
         75:06:4e:be:0d:eb:00:a8:89:4d:34:4f:c5:87:7b:21:99:e4:
         58:f5:8a:ec:5f:4f:84:f8:d5:db:8f:7c:85:3f:9f:f2:7a:a3:
         4f:4e:d4:29:4e:11:59:a9:41:0f:2f:5c:76:d2:ad:1d:a0:30:
         6b:b5:66:63:53:65:ea:fe:8c:3b:22:f8:f7:c1:66:9e:1b:66:
         da:55:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org