Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa
File:                     90de3f14-232c-3342-94f7-6cd2964a2e21.roa (raw, json)
Hash identifier:          024KJkbWmMi7tirKfl9A78BSlsQGuXt8iuakpJgb4lg=
Subject key identifier:   96:5A:54:5F:4C:DB:7B:3A:E8:19:A1:43:4E:5A:49:AA:A8:AC:3C:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2DCFF026F20BF4C786C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2d:cf:f0:26:f2:0b:f4:c7:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6879948c-3ec6-47a6-83aa-ce18997d04af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:ed:b6:91:6f:4e:2f:24:d6:22:4b:9c:42:
                    42:ed:b7:0b:a5:e4:f7:d2:06:d3:cb:25:0d:d3:9c:
                    6b:d7:3b:40:07:10:f8:80:bf:44:e0:0f:e4:dd:5f:
                    c2:3f:86:ba:37:5c:4b:5f:4c:3b:cc:ba:d8:12:8e:
                    b7:36:82:82:db:fb:61:49:5d:17:98:e6:44:1e:a5:
                    b8:13:a4:96:5c:81:02:97:bd:7b:0a:4c:39:71:1d:
                    c3:03:78:56:85:ce:f5:68:54:ec:8e:d9:ce:81:42:
                    37:52:81:66:c2:46:37:37:d4:ec:59:20:10:2b:f0:
                    02:45:0c:57:ef:94:3b:68:b3:b4:f4:69:95:9f:c2:
                    d5:b5:3f:d1:89:48:e3:d9:15:53:e6:7d:a9:f7:79:
                    a8:23:be:0e:c4:7a:4e:84:92:98:41:25:73:93:f7:
                    02:bf:e8:ad:f7:9f:da:30:30:de:0b:03:2c:e6:d9:
                    e8:78:f7:61:d6:e2:e7:07:01:43:59:cd:0a:de:6c:
                    66:5d:1a:96:1a:09:27:e5:fd:bc:9a:e9:6c:ee:31:
                    d7:7a:21:cd:9b:f1:44:d2:d8:40:91:17:54:9a:81:
                    42:34:75:32:a1:8b:b6:8c:68:fe:d1:5d:10:9b:06:
                    b8:d3:7b:f1:13:5b:da:1b:ba:7d:42:b7:27:1a:da:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5A:54:5F:4C:DB:7B:3A:E8:19:A1:43:4E:5A:49:AA:A8:AC:3C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:58:f2:41:f1:ab:0a:14:83:ae:f3:51:6e:90:f5:2b:58:00:
         40:86:d2:af:e2:44:81:d1:3e:4f:ce:e7:f9:46:59:d2:4d:00:
         01:94:e8:01:83:f5:d6:0f:ff:db:cd:13:ec:e2:f6:f6:57:5f:
         f1:6f:7e:e5:bc:93:f3:44:c5:c9:f1:b9:f7:87:a1:21:df:47:
         ae:6d:94:10:6e:f5:b8:74:c2:97:0b:6c:c4:7c:90:f9:10:6a:
         79:64:d4:a0:27:7b:81:c5:0c:b2:05:54:e8:f7:d9:4a:4c:b0:
         1c:20:9d:74:20:8b:28:83:ce:f9:05:fc:48:3a:12:62:bd:7f:
         d4:df:76:45:72:70:3a:85:38:90:99:4b:b0:4f:24:53:9a:86:
         5e:6e:b8:6b:3a:45:c4:f9:73:1b:47:24:c5:da:e5:38:4e:f6:
         c7:57:93:ed:17:40:53:40:86:7e:68:d2:8c:aa:ea:9c:55:21:
         29:dd:7d:e1:7d:9c:54:fb:24:56:e2:5a:91:f3:cb:90:1f:eb:
         b0:7e:cf:ac:84:1a:21:2f:66:50:9c:2d:1b:63:18:c9:9f:81:
         5a:15:1c:58:34:e1:fd:8a:1b:ef:72:8a:14:e7:4e:2b:14:e0:
         e6:3a:f4:69:42:12:0d:8f:c1:07:8a:fa:e1:21:c3:53:a8:ea:
         1d:f5:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org