Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa
File:                     924d5c82-5fd2-3781-949e-453b857408b2.roa (raw, json)
Hash identifier:          QIxWuNinPBPprfL24c2rT98CoXvvs48QF0DjKqH3wO4=
Subject key identifier:   20:AC:8F:E3:F3:E1:7A:B1:99:95:58:82:72:4F:A9:D7:3F:86:82:03
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2EB0EC6F93A1CE075980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2e:b0:ec:6f:93:a1:ce:07:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a79a3c01-daa6-4a8c-aae2-52a3bf47f7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:90:35:5c:00:7b:4e:0d:bd:7b:93:ff:24:
                    db:93:a6:40:06:4a:6d:a9:91:cc:67:57:43:7b:6c:
                    60:15:0b:9b:ed:3b:0e:f6:93:47:a3:2c:35:06:c2:
                    6a:b2:2c:a0:ff:c2:cf:fa:7b:9e:08:60:69:e5:27:
                    c0:9c:21:36:90:2c:bb:bd:43:94:a1:3d:e5:62:9b:
                    30:f8:91:fd:70:97:d2:19:92:f8:a1:47:3e:87:c7:
                    0d:c7:ca:e0:a4:b5:6e:36:44:15:fe:83:4b:15:7c:
                    ca:de:32:0e:55:0b:42:c3:f7:14:0d:7c:37:69:37:
                    ea:be:da:98:96:59:3c:70:aa:9a:2d:de:c9:34:74:
                    60:7e:e2:e3:85:36:56:d2:c0:10:22:3c:7c:8f:b0:
                    7b:35:0e:83:9e:2e:53:14:19:54:35:e8:9b:1e:24:
                    6e:f6:7d:ad:c5:62:28:b2:86:d6:91:54:40:50:4e:
                    8e:d9:69:fe:c3:4d:e5:6f:fa:a1:0e:5e:99:10:93:
                    1f:ff:1a:65:9b:03:c8:46:65:17:5e:5e:93:30:9f:
                    48:c9:8a:83:de:29:68:d4:f5:87:fe:ef:11:72:17:
                    89:6d:61:36:5e:b5:45:3b:09:16:f6:26:31:ce:5f:
                    62:15:55:87:50:15:7c:4d:93:72:1b:ff:e5:71:9b:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AC:8F:E3:F3:E1:7A:B1:99:95:58:82:72:4F:A9:D7:3F:86:82:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:38:ef:4c:98:cb:b2:13:f3:cd:92:a6:fa:a5:db:28:51:ba:
         2a:5a:95:03:5c:31:8e:e7:ac:7b:bc:df:f5:1f:f1:2d:a2:a1:
         6d:bb:d3:bf:fb:2b:60:37:ab:35:13:13:72:5d:98:bd:9e:0d:
         05:9c:ac:a1:07:df:6d:46:e7:cb:a0:7d:f9:78:75:68:5a:ff:
         05:5c:e4:c3:08:6e:a0:a0:2e:b5:1b:88:3c:d3:89:8a:1d:e4:
         77:1c:d0:a0:fd:70:ff:59:e3:a1:50:3b:ee:b0:a0:61:fc:0b:
         b3:90:31:be:16:97:d0:3f:33:80:83:52:63:a0:79:e8:9b:59:
         57:8e:37:e3:e9:75:38:78:bc:87:80:63:52:db:9e:42:a3:5c:
         da:f1:70:e1:e6:48:4a:81:3b:5f:74:24:bd:92:11:30:28:c4:
         91:c4:a7:eb:cf:25:5e:3c:00:bb:2e:11:2b:32:76:c2:47:8a:
         e1:84:b9:97:13:19:51:b7:6a:ff:2e:47:eb:4d:3c:74:cf:a1:
         ce:1b:22:46:17:67:f4:7a:18:11:a1:d4:87:a6:79:91:02:ce:
         eb:80:99:9e:ad:29:2d:b7:12:a8:44:7a:e3:59:29:ed:5c:cb:
         8a:dd:66:b1:71:46:38:e3:6c:49:58:9f:5e:e3:b6:a7:a6:1d:
         56:e0:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:15 2024 by rpki-client on console-ams.rpki-client.org