Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99d6813a-def8-356b-a420-5b6dea6655a9.roa
File:                     99d6813a-def8-356b-a420-5b6dea6655a9.roa (raw, json)
Hash identifier:          FUcb+0/5y9TtEHkna798ktHi8PbDj2q8HjrFdkeS+J4=
Subject key identifier:   88:9A:35:58:5E:B3:55:CC:AB:A1:A8:BD:E3:44:D8:14:8D:4B:EB:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E4B5FABF84DC42EB49E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99d6813a-def8-356b-a420-5b6dea6655a9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:4b:5f:ab:f8:4d:c4:2e:b4:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=fae4a1be-106f-4aad-9d45-3df392639fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:6d:3a:c0:71:6b:50:92:6b:22:ff:a1:5f:
                    1a:38:88:cb:f9:8d:be:94:b1:32:d5:dd:96:d4:d0:
                    38:41:1d:a0:e6:4a:0b:35:54:25:46:46:59:ca:b9:
                    99:ca:83:82:67:16:f6:44:96:d0:51:44:82:c8:f9:
                    44:73:57:c2:7f:96:e8:36:07:8d:29:a6:34:7f:c8:
                    70:17:af:4d:9c:ef:88:0d:b2:72:61:a0:8c:b7:45:
                    86:28:11:2d:7a:0c:03:52:3a:04:bb:e5:7c:82:c4:
                    3a:5d:26:06:55:03:2b:9e:ea:eb:5d:59:1b:eb:a2:
                    ca:ff:95:ee:fc:5c:32:da:bc:b0:a1:b1:0a:da:ed:
                    bb:49:48:ad:46:31:9b:5e:ef:38:a3:45:77:33:5a:
                    b0:e6:20:99:60:67:05:72:80:15:b8:3b:57:08:c3:
                    de:de:1b:7d:32:86:60:ae:3f:55:9b:c2:95:97:62:
                    c4:72:99:55:b7:a1:9f:a2:28:45:9e:bc:1b:c4:b1:
                    bd:2c:f3:70:1e:52:a9:74:67:e4:8a:c7:b4:94:b8:
                    91:ec:3e:6a:1b:46:a8:c7:e5:8d:8a:cb:6f:94:ce:
                    c1:0d:38:90:dc:bd:05:d1:c3:14:1f:a7:22:65:c0:
                    c6:51:3d:2d:0e:6f:8a:40:af:7c:69:28:53:da:c5:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:35:58:5E:B3:55:CC:AB:A1:A8:BD:E3:44:D8:14:8D:4B:EB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99d6813a-def8-356b-a420-5b6dea6655a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:db:f8:fa:ca:5f:c6:fb:9f:70:ad:c1:0d:7c:3d:e7:82:69:
         bd:9d:d3:29:b9:fc:ff:3c:49:0b:70:fb:f5:04:ae:52:d9:a2:
         16:cb:10:6e:d2:92:a9:28:4d:cc:c8:39:6d:b2:ad:a4:ce:da:
         a1:dc:58:0f:f0:7a:99:30:5d:b3:22:00:a2:37:e5:4c:72:94:
         e1:2c:ad:0f:55:3d:40:21:dc:6a:69:26:6c:ff:d2:7b:42:d8:
         7b:61:3c:ce:f1:e2:54:3e:63:bc:0a:ae:ef:bc:c1:a5:29:9d:
         0d:69:12:f3:8f:9c:40:2d:44:1e:67:bb:28:10:a1:b6:cd:cf:
         25:9e:ef:6e:9d:99:a5:09:24:14:4c:cc:59:85:f8:68:d0:f2:
         e5:83:d4:eb:b5:fe:37:a2:12:60:74:67:dd:80:cc:78:59:55:
         4f:54:3e:e6:65:a7:bc:c4:db:0b:73:1a:62:1e:38:3f:c5:8f:
         57:eb:c4:5f:48:53:c3:87:f2:ae:92:50:35:9c:88:8e:8d:ce:
         dd:19:d4:ac:0d:76:eb:7e:61:96:60:d7:fa:4c:a6:6e:b5:07:
         52:35:b1:da:41:c0:dc:e2:16:61:21:27:a3:58:dd:76:1d:f6:
         fb:af:4b:4d:d0:a4:82:9f:c3:40:95:63:1a:42:2a:4f:9e:6a:
         e3:28:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:28 2024 by rpki-client on console-ams.rpki-client.org