Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/746d43df-0dad-3d65-afb3-3fb81e533335.roa
File:                     746d43df-0dad-3d65-afb3-3fb81e533335.roa (raw, json)
Hash identifier:          2jqcqqXAzHzm/QZt+enFAYTBDgujJzDXPggy2lBgXnU=
Subject key identifier:   44:A9:F8:27:D7:7D:3D:54:1A:80:92:2B:21:53:B8:4F:E9:8A:0E:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF2E379EE9AD82BE21500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/746d43df-0dad-3d65-afb3-3fb81e533335.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f2:e3:79:ee:9a:d8:2b:e2:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0058a25d-cbe5-480d-b1ea-add6cb0c6b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:57:8a:c3:37:9c:dc:cb:b1:0a:ab:9a:8f:
                    69:bf:5e:e8:65:78:0a:42:40:fc:9b:bd:4e:6a:b3:
                    3b:b8:c8:c7:97:92:72:e3:e7:82:39:43:c5:1c:b9:
                    b9:97:29:16:2f:b7:87:48:fe:0a:cb:33:06:6f:83:
                    a4:be:f5:da:d4:13:c4:7e:09:cc:b2:fc:81:5d:6d:
                    09:68:42:43:c0:1d:d0:91:91:ad:33:ac:64:28:70:
                    13:4d:5f:d5:0f:8c:5b:46:26:4b:ee:23:fa:f2:aa:
                    6e:5a:97:9a:3c:7b:ef:1e:b5:97:e6:23:f9:fc:e9:
                    9f:97:6f:6a:77:de:d5:5f:48:ee:92:50:c4:84:68:
                    ca:d3:2c:68:87:4e:5e:78:7b:0e:61:13:0f:2f:bf:
                    ed:32:cb:ce:28:a8:a0:5a:54:35:d5:7e:42:ea:5f:
                    c3:ca:d8:bc:22:ef:2c:16:47:b8:0d:cb:98:de:49:
                    c3:74:87:50:9a:da:b9:e1:10:d3:f8:6b:6a:e9:ee:
                    e5:c9:78:98:22:8a:84:ef:11:d4:27:83:56:fd:62:
                    03:32:f9:31:d0:4e:38:9d:87:d3:e9:eb:7e:95:72:
                    44:ff:f8:40:2d:ac:94:8c:43:a1:32:69:61:92:3e:
                    b6:07:1e:9b:d7:29:7b:c3:eb:50:fc:fa:dc:9b:b3:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A9:F8:27:D7:7D:3D:54:1A:80:92:2B:21:53:B8:4F:E9:8A:0E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/746d43df-0dad-3d65-afb3-3fb81e533335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:49:1d:95:01:9f:a0:ab:dd:b3:d0:cf:08:9f:ac:f5:bf:03:
         c3:2e:74:83:17:eb:9e:0e:3e:36:91:53:bc:49:ba:b0:75:f0:
         d2:10:8d:d4:27:19:d6:06:00:9d:ae:91:4f:62:24:ac:02:34:
         f5:92:34:48:ec:b6:cc:81:fb:75:ac:03:3c:f2:b4:4f:9e:33:
         36:0c:ff:c3:9a:fb:0b:60:ad:a5:d1:94:6b:4c:c6:6e:74:f8:
         26:97:29:09:48:dd:5c:7a:a1:77:e6:ec:bb:59:61:af:b3:b9:
         dd:b6:4f:ef:8d:83:d9:b3:6b:bd:9e:7b:d3:0c:4e:57:a2:cb:
         f4:11:22:f9:91:81:bb:af:58:24:0b:01:fd:f4:15:22:ba:8b:
         f4:a1:72:b7:d4:ea:32:b8:20:01:f1:fe:f4:b3:3e:8d:18:bf:
         79:28:23:59:9e:5f:9f:6e:c8:f2:da:c7:4d:21:f7:33:e9:9f:
         e1:73:ba:2a:bd:c2:f5:41:b6:cf:8b:ae:b3:35:1f:27:7b:c9:
         1d:60:2c:2c:f9:41:ca:65:d7:38:38:35:27:cb:b5:43:c6:b6:
         fb:56:79:c6:99:38:97:cc:08:50:92:dd:78:57:93:65:fe:63:
         a5:2a:c7:40:2a:84:7f:13:31:0d:fe:0d:15:09:0d:c5:01:6b:
         d7:9a:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:17:29 2024 by rpki-client on console-fra.rpki-client.org