Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76631e02-79be-3682-b33d-058f5a6b553a.roa
File:                     76631e02-79be-3682-b33d-058f5a6b553a.roa (raw, json)
Hash identifier:          Wq9T7CU12W4VRFv5eVXwkz7YWZCDhZzjCnzI9cwz6cM=
Subject key identifier:   67:7F:FF:3C:7D:D8:A6:68:B8:F7:ED:4B:F1:93:58:6C:33:55:88:92
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2A5206E5E39DDB634800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76631e02-79be-3682-b33d-058f5a6b553a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2a:52:06:e5:e3:9d:db:63:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=26762a39-31f5-4d85-96dd-28c4734038db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:00:a7:0c:14:3f:a6:7e:ca:3e:5d:7d:58:
                    e9:96:39:c9:1d:1b:47:f1:8b:86:f1:6d:c8:6e:52:
                    54:68:b9:96:5d:53:fa:db:b7:eb:4c:60:aa:62:ff:
                    62:2c:dc:09:d2:6d:dc:65:cb:98:ff:a1:9e:f8:d7:
                    8c:93:26:17:c5:a9:72:cf:3e:68:ce:ce:41:bb:64:
                    89:33:5f:2c:f1:ab:be:35:0f:28:b9:0f:91:0f:98:
                    7e:01:95:82:20:3f:f0:b4:d2:a1:d2:05:75:1e:35:
                    b2:11:4e:23:78:c6:b4:5d:d5:84:00:7b:3a:04:f5:
                    d9:e0:af:3b:06:52:a4:17:2e:0e:dc:08:71:1a:eb:
                    6e:5f:08:dd:32:ba:d5:86:8d:a9:1e:5e:d6:99:79:
                    09:b9:a5:54:db:28:f5:0e:05:48:68:6b:14:ec:88:
                    9d:90:b0:f0:60:39:e1:1f:6a:99:16:ef:b7:d0:06:
                    bd:2d:83:b4:ae:50:e7:8c:ef:8a:09:c1:9e:52:89:
                    05:80:0b:7c:6d:98:0c:76:41:c5:63:0e:7f:73:a3:
                    fe:1b:75:aa:e5:44:e9:90:8c:c4:86:1e:0b:62:fc:
                    3c:de:ca:01:86:c4:c5:64:47:b3:f4:2e:7a:a9:8c:
                    51:31:bf:6f:cd:51:92:85:dc:3b:0e:eb:42:05:76:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:FF:3C:7D:D8:A6:68:B8:F7:ED:4B:F1:93:58:6C:33:55:88:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76631e02-79be-3682-b33d-058f5a6b553a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:63:15:b7:9d:96:48:06:1c:77:f4:0d:72:b9:aa:3f:5f:51:
         14:2d:23:b8:89:4c:d1:67:60:92:b5:c1:e7:71:b9:46:9b:c9:
         b0:4f:ab:a7:84:7f:0b:a4:77:d9:46:40:74:e2:7b:8a:fa:4a:
         27:bc:3d:21:d0:99:b6:84:55:fb:fc:da:39:1f:5b:81:31:92:
         5e:8e:25:8f:f9:93:99:82:1c:10:86:db:0d:2d:46:92:94:8c:
         11:23:38:ef:cd:8f:dd:9c:fd:10:ac:ac:42:dd:48:c5:2d:f9:
         fa:e9:68:73:88:85:ad:d6:dd:ba:28:ac:03:d3:62:86:07:1c:
         ea:5f:5e:a8:6b:2b:c3:4f:bd:7e:58:a0:7c:c5:db:74:ad:21:
         55:6c:49:8d:87:94:90:bf:68:db:80:f0:85:7f:c9:f4:e0:be:
         36:b6:46:5f:12:cb:6c:2a:c0:a2:d3:96:e2:b2:a7:a2:ce:bb:
         d7:a4:f5:e9:88:b6:37:18:7c:c7:5d:80:fa:2a:cf:eb:41:b4:
         cf:34:5d:56:2c:fe:8c:c6:e0:91:38:b0:6a:d7:8c:69:ab:15:
         71:3f:91:36:28:ff:04:49:93:9d:69:bc:51:2b:99:bf:f8:ef:
         12:8c:a6:89:7e:47:6a:d0:14:a4:13:56:33:5b:5b:e8:f1:2d:
         7f:82:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:04 2024 by rpki-client on console-ams.rpki-client.org