Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/81869ed5-49e1-39a5-87c3-95090388ab89.roa
File:                     81869ed5-49e1-39a5-87c3-95090388ab89.roa (raw, json)
Hash identifier:          6MR/QhO0K09nexLg+V5iml3kLl6UnHYPKOALnLA469o=
Subject key identifier:   B1:0A:A6:FF:34:C8:F3:60:A2:FD:25:03:0C:A7:7C:A6:73:52:88:CF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A2C01E7F4BD6DA8495200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/81869ed5-49e1-39a5-87c3-95090388ab89.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     40306
IP address blocks:        99.196.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:2c:01:e7:f4:bd:6d:a8:49:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a5283b28-1244-4e0f-bb12-42f9dbcd7428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:9a:3e:8e:a2:e1:9d:eb:ac:f7:21:33:fc:
                    0f:49:39:04:1c:e1:54:3d:ac:6d:9c:02:a5:0f:13:
                    ec:e5:93:ba:d6:d3:92:b2:27:a8:d7:f1:d8:a0:8c:
                    45:30:85:ca:56:42:08:3f:41:0e:48:97:13:5c:0d:
                    f9:3e:3a:13:1b:51:28:14:09:0a:cb:03:84:90:93:
                    d6:16:0b:d4:a0:a5:79:9d:81:0e:27:85:c0:06:32:
                    22:0c:3c:e8:64:7b:7c:b9:ef:93:26:85:97:38:15:
                    f0:72:f4:a5:78:dd:0c:da:77:60:0c:70:23:bd:dd:
                    1b:f6:e9:0f:80:ea:99:3e:c6:b9:bd:15:24:53:93:
                    51:5a:25:50:4b:16:c1:fc:6c:66:d3:5f:7c:2c:96:
                    80:71:f7:ac:63:0f:74:ed:ae:48:0b:0c:de:21:a2:
                    ac:cd:85:c5:3b:8e:14:2f:2b:b0:de:70:b9:71:20:
                    c3:7c:47:63:5b:74:98:d5:33:05:b5:de:ef:0a:db:
                    1d:74:d9:55:1c:54:32:04:c3:66:70:5a:ee:f2:15:
                    1e:63:c4:53:4e:e6:c6:74:6a:5e:2c:6a:44:fc:87:
                    7b:38:e2:16:9d:b3:54:ed:bd:4e:ba:37:e1:e7:ea:
                    f4:05:47:94:f2:0c:96:c1:38:c0:b0:7c:e0:7c:c0:
                    cf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0A:A6:FF:34:C8:F3:60:A2:FD:25:03:0C:A7:7C:A6:73:52:88:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/81869ed5-49e1-39a5-87c3-95090388ab89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:42:ec:3e:ef:04:f7:be:d1:95:87:f2:f0:2e:7a:ab:44:ba:
         8c:1c:fc:f7:b4:2e:8b:d6:7a:6b:d6:10:59:cd:f7:d5:f3:c8:
         d7:67:5f:ea:ec:3a:75:6f:90:4c:c2:88:77:03:cc:6b:36:dc:
         c0:ec:d6:7d:6a:90:b8:95:0c:b8:e9:b7:bf:93:cd:b3:d1:ba:
         da:de:3c:c8:0d:aa:8e:ff:50:65:28:69:63:b0:65:51:66:cb:
         cc:9c:e6:e4:1b:b6:a1:8c:89:52:13:f6:a1:af:9e:a8:e9:ce:
         0c:8b:ed:b1:2d:8a:44:b1:74:93:79:10:e7:cf:6a:bb:65:4c:
         46:41:a6:7f:a0:7d:d1:11:3a:cc:18:3e:ba:97:b8:2c:6e:69:
         3a:82:5a:a0:77:71:07:16:8a:95:dc:ea:bc:f9:13:fe:73:ca:
         ee:86:ab:e9:19:28:c3:39:9c:9c:0d:9e:7e:85:b8:ff:ca:bb:
         38:74:3c:96:1d:87:0e:98:9b:38:99:95:98:21:32:63:fa:1e:
         cf:e9:26:30:fa:11:12:d3:d0:e3:19:fa:64:dd:ee:7a:64:65:
         5f:5a:56:0d:60:2b:82:2f:42:25:09:a6:cc:d4:68:60:85:fc:
         94:fc:3e:50:3b:b4:f2:c1:ce:45:e9:7d:70:67:99:d8:10:6c:
         7a:cf:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:05 2024 by rpki-client on console-ams.rpki-client.org