Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9524e30d-5f3c-3ac7-a738-a648b3dca96b.roa
File:                     9524e30d-5f3c-3ac7-a738-a648b3dca96b.roa (raw, json)
Hash identifier:          SUrPdI4pVkGgm56dl3txH10wHSbF4VqA9eOySQMSMaY=
Subject key identifier:   39:3B:D5:4B:D0:D8:39:A5:8D:BF:64:24:91:32:6B:96:D1:5C:A3:3A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A63AB051AD4979898DE40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9524e30d-5f3c-3ac7-a738-a648b3dca96b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:63:ab:05:1a:d4:97:98:98:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=00738b3e-aaf0-40ec-a19b-c58a12f8a364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:57:d0:b8:51:24:01:61:c3:fe:ba:c3:59:
                    8f:fd:11:89:ba:9a:78:92:e0:0b:c6:3b:ad:bd:99:
                    5c:8c:1b:f0:c2:26:d2:61:e3:e8:bb:bb:22:6d:06:
                    ef:a3:3a:56:1c:c9:4d:eb:c7:c2:9e:d1:ea:41:0c:
                    cc:52:13:a8:5c:21:ef:13:26:ba:a4:22:30:4f:7b:
                    7e:9d:b6:81:2b:73:92:89:70:fc:b4:8c:b5:57:84:
                    e5:51:30:36:d6:14:87:35:66:fb:5a:a1:ea:7b:38:
                    f6:1c:f2:a4:b1:a2:2a:1c:33:05:1a:03:7e:91:62:
                    00:10:e5:72:38:ee:ce:d2:9a:2b:0b:f8:82:e7:7c:
                    c5:89:c9:ef:82:5f:dc:8e:f2:75:56:c4:f4:75:87:
                    43:98:39:2d:c5:60:7a:33:b2:d2:fb:7e:60:02:09:
                    dd:8f:ba:82:1b:b0:c9:33:86:ba:68:db:b7:30:66:
                    7d:9a:35:fe:6c:c8:08:25:46:de:56:99:4f:59:79:
                    f3:99:b5:02:b0:b2:22:c6:57:9d:6d:47:3e:36:5a:
                    4d:3a:1d:6a:bd:11:4c:ea:2d:51:a3:4c:37:8c:d7:
                    6d:02:b0:e4:50:7c:95:3a:0f:70:0f:3f:15:5b:4e:
                    89:84:8e:83:dc:5f:24:4e:1b:1e:d0:bc:ab:5e:82:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3B:D5:4B:D0:D8:39:A5:8D:BF:64:24:91:32:6B:96:D1:5C:A3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9524e30d-5f3c-3ac7-a738-a648b3dca96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:6c:e6:ce:5d:85:35:c9:2b:f4:26:05:71:50:e1:49:8c:
         5c:20:a0:a6:61:d7:91:42:8c:f5:e8:17:66:78:20:6b:61:79:
         cb:1c:70:dc:e2:6e:19:5c:de:e4:41:bc:6d:e9:7c:bb:0e:93:
         53:dc:d0:76:a9:2d:3b:d3:1d:71:bd:0b:cd:d1:56:c1:e9:3f:
         7e:d2:91:0a:f4:38:d7:a3:0c:1e:32:72:37:b0:7a:3a:e7:ee:
         93:88:f8:92:6a:ff:7a:84:6a:bc:93:6e:d5:07:cc:76:93:1a:
         4f:13:cc:46:b2:a1:3d:64:d9:02:96:9c:c4:41:a4:ea:8e:88:
         88:0f:6d:2b:0f:be:95:c8:a9:ec:50:b1:cf:0d:0a:72:75:4e:
         59:32:bb:ab:5e:cf:18:ba:3a:e1:ec:d4:77:3b:54:38:42:91:
         65:45:c1:71:86:29:24:0b:59:f0:83:85:7e:45:72:3a:03:a4:
         de:88:7d:66:ec:a8:d1:de:b7:a2:b5:74:bd:b7:3b:7f:7d:c9:
         fd:1c:4a:a6:de:95:c9:5b:6f:87:0f:7c:8e:7e:25:42:34:f4:
         1f:b8:e7:4a:e7:2f:93:9c:0c:57:6c:cc:cf:9a:e5:5c:c2:21:
         33:3f:5b:80:a9:3e:d4:b8:bb:a8:3f:c2:d4:e3:65:80:a2:df:
         1f:d4:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:01:59 2024 by rpki-client on console-fra.rpki-client.org