Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902d3056-7f96-3299-8ac4-be6023fd8a05.roa
File:                     902d3056-7f96-3299-8ac4-be6023fd8a05.roa (raw, json)
Hash identifier:          TZnvSQF4XIhmcYB7sfkqwFZmJ8t4GSJ0O6CWInaekDA=
Subject key identifier:   6F:8D:7B:70:BB:A5:B0:49:B4:F7:3B:A3:58:CA:4A:E1:9A:90:A5:74
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A5E92B550D1654BCF67C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902d3056-7f96-3299-8ac4-be6023fd8a05.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:5e:92:b5:50:d1:65:4b:cf:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a46e71a6-5b41-43a0-bcdf-63d189d0658f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:45:7e:bb:36:02:8d:10:1c:17:81:7f:b7:
                    8b:cc:fa:b0:34:af:84:99:7f:1e:3f:49:4d:e4:18:
                    e6:49:64:18:34:ce:33:1c:92:06:8f:3f:98:dc:d9:
                    0e:34:75:a2:38:bf:00:da:2d:8f:1f:50:ba:af:b7:
                    96:70:ef:bb:07:71:e8:65:6c:76:e4:ac:d0:e6:af:
                    ff:29:e5:65:46:ce:cc:f9:ef:ae:7b:7d:83:e8:a4:
                    dc:49:7f:89:8f:ba:5b:49:8c:55:52:5e:60:5c:6c:
                    c3:01:e7:ad:34:61:cc:68:de:f9:fe:a5:fa:8b:98:
                    a6:f6:72:de:bb:06:70:fd:dc:8f:62:51:0e:db:ac:
                    78:49:48:67:2f:72:87:aa:bd:60:6e:7e:3a:23:7b:
                    e6:0d:c9:85:bd:a7:08:92:cf:ff:8e:a7:dc:49:27:
                    b5:7c:68:05:25:cb:b5:a9:39:13:54:de:c1:39:e3:
                    db:b2:eb:a6:ac:86:91:cd:66:2d:9a:82:bd:fd:0a:
                    26:99:dd:32:e9:0e:b8:42:8c:36:dd:a5:cf:3b:26:
                    b4:0d:8a:18:49:63:cc:86:49:18:30:83:00:1b:d1:
                    35:6f:74:2b:92:b3:b6:a6:9b:22:da:8c:0a:4a:9d:
                    89:3b:76:ab:68:fb:92:a8:2a:44:8f:a8:b7:86:90:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:7B:70:BB:A5:B0:49:B4:F7:3B:A3:58:CA:4A:E1:9A:90:A5:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902d3056-7f96-3299-8ac4-be6023fd8a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2d:22:8e:ab:60:8d:fe:f2:4a:96:5e:d4:84:db:44:07:30:
         e2:1c:06:65:06:27:29:67:9c:be:2f:23:54:67:09:c3:2b:cc:
         bc:0a:47:2f:a2:2a:44:c2:96:3e:89:c0:87:c2:d5:33:a8:f2:
         13:68:b0:34:1f:c0:5b:f2:10:54:8f:a9:ca:02:08:3c:c1:ea:
         15:44:61:1a:52:10:bc:0b:b3:63:90:09:5c:12:30:67:91:9e:
         21:75:8e:68:18:1d:b0:f8:04:73:9b:3b:b3:84:bf:92:a4:c3:
         d9:f4:9f:d7:fc:26:cc:f9:e0:25:b6:2b:ba:44:45:30:b6:71:
         86:e8:ce:e2:ad:97:bb:46:11:8f:cf:13:fb:13:ba:8a:5d:e0:
         01:ab:19:22:eb:ef:b9:26:ac:3c:a7:1a:e5:d4:48:b2:05:59:
         64:26:6b:c4:9d:4b:9d:ef:5f:43:a9:55:92:61:7a:07:3f:72:
         71:3e:b8:48:79:84:5a:8e:c2:7a:b2:6f:59:6b:0a:d8:16:0d:
         6e:4b:03:1a:5a:63:d0:8b:27:74:db:80:e5:a9:45:4f:d7:b2:
         32:ee:67:56:24:90:af:a8:d6:09:ac:1a:f1:4b:1c:cc:fa:56:
         8c:f4:64:bf:4f:c2:65:27:f4:59:cc:a1:f1:8d:3d:58:d1:13:
         68:6f:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:12 2024 by rpki-client on console-ams.rpki-client.org