Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa
File:                     8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa (raw, json)
Hash identifier:          DudzibSdMFXRssbu2M0u0Ev6uBxhj1ZNihkAzzPifK0=
Subject key identifier:   EA:51:BD:5A:AC:8F:3A:F5:AF:E5:24:9A:15:87:8D:D6:8A:F7:A1:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E259AC367FCE4EE7D75C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:25:9a:c3:67:fc:e4:ee:7d:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8c9fc63c-3624-4853-90bf-4f885ed2f1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:21:a5:10:5a:c3:02:56:85:3f:c9:c4:a6:
                    e4:db:0c:be:6e:39:24:f4:f5:0f:ba:d9:06:fb:63:
                    1c:c6:39:6b:2f:02:ba:3d:25:19:62:a5:6d:71:5e:
                    7d:c1:f2:be:77:62:70:64:58:ae:88:6e:0f:22:e9:
                    7b:22:a2:da:03:da:bb:e7:43:05:b8:f1:7a:d4:0b:
                    cb:d0:f2:90:aa:19:a1:74:00:aa:cc:d8:87:9f:fe:
                    c5:fb:17:79:ec:81:23:dd:53:3f:d5:cb:55:57:ab:
                    39:ce:fe:7f:45:22:20:6b:6c:ab:11:ce:e7:7f:a5:
                    3e:a1:c8:8e:95:5c:97:b2:7f:d9:ab:1e:df:f6:85:
                    e9:08:77:16:00:78:54:84:53:b1:67:45:32:62:66:
                    e2:17:38:f2:43:4c:68:6d:1e:84:67:89:a4:a8:04:
                    b9:91:44:6d:90:a6:4a:ab:6b:1e:e6:2f:6d:b3:9d:
                    ab:76:d4:9c:e7:38:1b:75:3e:ea:e7:73:e8:e6:8f:
                    32:7e:ec:1f:38:81:41:4d:16:27:b8:72:2c:b0:b2:
                    86:bf:f7:24:c0:03:22:c2:d1:ff:cc:25:d2:97:97:
                    bc:87:e8:c2:5f:1a:4b:33:ea:d8:b1:91:6c:b9:0a:
                    65:b5:56:73:ae:37:f6:68:fd:16:47:c5:e5:48:36:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:51:BD:5A:AC:8F:3A:F5:AF:E5:24:9A:15:87:8D:D6:8A:F7:A1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8814fa65-7b88-33b3-8053-ca7ea96e0b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:41:e0:66:f1:32:a7:5b:2e:27:9e:81:fc:c2:19:90:d3:a1:
         2b:b0:7f:00:3b:57:81:c6:8a:9c:0c:3e:b4:b1:46:7d:20:26:
         37:e2:68:84:7a:21:f7:96:85:cb:86:64:a6:95:03:ee:26:7f:
         37:30:dc:12:a0:5b:6d:76:9f:0c:dc:e4:b9:7f:22:f3:29:b9:
         cc:c5:70:cf:9d:69:ea:22:1e:08:40:87:83:f8:f6:b0:c7:38:
         42:44:a0:7f:04:7d:05:f0:5b:32:70:ee:ce:11:58:c1:b0:9d:
         5f:5d:24:56:6c:37:33:26:34:38:91:d3:ae:1d:0f:a7:26:b9:
         4b:af:db:7b:cd:f0:17:44:b9:fc:3d:d6:38:30:d1:57:44:0f:
         9f:f9:81:20:1b:73:e5:47:75:de:4e:e8:f9:0e:0a:36:57:2a:
         04:67:16:a3:0b:f8:b0:82:16:09:44:02:7f:15:2c:45:42:57:
         3f:2f:cb:67:f2:99:51:8b:aa:ac:7d:10:d3:0e:e9:6f:26:f6:
         0b:26:46:8b:86:ba:12:dc:4b:e7:67:f9:04:3d:4f:61:1b:3a:
         bf:a5:02:bb:08:74:5f:b6:1b:db:bc:1b:bc:a3:ed:dd:ae:5d:
         02:c6:85:e8:74:55:2a:1d:2f:c5:02:c4:fb:17:8f:57:8e:27:
         ab:3c:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:39 2024 by rpki-client on console-ams.rpki-client.org