Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96ccd386-d915-3dee-9187-39d46c0747d9.roa
File:                     96ccd386-d915-3dee-9187-39d46c0747d9.roa (raw, json)
Hash identifier:          dfOHbqoN/RaMOpRlVYh3pkRD7pqN8F3qQy0cnhsGvbY=
Subject key identifier:   22:64:9E:D9:57:D3:C7:2C:47:4D:BE:32:12:C3:CC:EA:BD:AC:A0:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2FA196E621BA73172F40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96ccd386-d915-3dee-9187-39d46c0747d9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2f:a1:96:e6:21:ba:73:17:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=cbade1eb-97a0-435c-b8e0-0e3b38f7bc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:65:69:82:b8:b1:40:32:18:9e:3b:ad:f3:
                    59:e3:80:ed:4c:ff:6e:56:3f:7c:93:c5:58:42:46:
                    92:b3:0c:b0:e2:d2:24:5d:c8:89:a2:5c:f2:cb:40:
                    25:43:a0:96:35:ca:4c:d4:1c:a6:16:88:86:92:6f:
                    49:5f:ca:06:94:0a:e4:4a:d0:57:da:de:39:ba:ab:
                    11:2d:4e:70:e3:3a:5a:53:e0:16:a2:db:4a:66:94:
                    0d:82:0f:ee:ce:18:90:f3:1c:5e:76:dd:18:50:38:
                    56:e2:d9:bb:11:64:cb:e7:1c:32:29:49:c1:2d:84:
                    ca:42:83:a3:30:81:1d:af:d9:5c:e3:dc:14:9b:73:
                    3a:fd:19:42:5e:ae:5e:3c:53:2e:fc:4e:29:4f:39:
                    32:fb:c0:42:ba:4f:96:17:dc:a4:a3:e0:4c:f2:5d:
                    56:10:a8:78:d9:82:aa:71:7b:c3:1c:c3:09:df:e5:
                    11:26:4d:5e:f8:6d:7e:b4:6c:ad:6a:0d:75:9b:35:
                    08:91:3c:58:9d:b6:90:5f:18:51:cf:47:d2:e2:b2:
                    1c:08:fc:35:30:be:3d:d8:8e:bc:4f:66:51:b3:cd:
                    10:c1:d7:26:48:86:a8:53:ed:05:94:46:0a:47:16:
                    63:ff:36:32:d8:d1:c9:81:5b:2f:d8:a2:19:26:37:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:64:9E:D9:57:D3:C7:2C:47:4D:BE:32:12:C3:CC:EA:BD:AC:A0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96ccd386-d915-3dee-9187-39d46c0747d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:76:8d:42:48:8f:0a:d1:1c:c3:7d:e6:a2:e1:b5:91:70:
         1b:fb:3f:84:03:ff:0b:39:bb:3c:13:2c:ef:7a:d9:16:56:80:
         d6:ce:bf:70:30:d8:ff:2d:bd:5a:8c:77:c0:f0:8f:96:c7:f6:
         d1:d7:09:50:51:c0:d3:7b:95:12:cd:d6:3b:0c:2e:f1:e3:fa:
         b6:9d:ef:59:ba:b2:64:b7:ea:29:b3:0a:b8:55:4c:38:ca:1f:
         a2:79:b1:e0:9f:3a:80:41:d7:d9:88:29:bf:bc:35:48:2b:b3:
         4c:25:29:a1:d8:fa:7a:d8:29:19:f1:38:0a:79:ef:d5:80:66:
         80:5a:79:9c:94:8b:a1:b1:76:fb:01:62:b0:7b:75:12:3a:6a:
         4e:a7:6a:c1:b1:58:13:1e:0a:d1:24:81:d8:b3:43:d3:7c:95:
         5a:27:a1:05:99:3d:6e:c9:b7:17:7d:d5:e1:8c:cb:c6:0e:c3:
         f3:35:8b:cd:92:b4:8e:0a:24:5a:a8:8f:3b:5d:77:12:76:33:
         6d:3c:51:5b:74:0f:02:37:10:12:a5:1d:d3:24:b1:62:c1:21:
         75:a8:e0:b8:63:dc:71:9e:6b:9a:7f:1c:7d:7b:35:55:39:8d:
         20:ee:97:02:68:df:a6:8f:8a:fc:2c:9c:55:de:c7:20:a1:b8:
         42:6b:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org