Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cc41706-8b7f-3119-aede-4a03c2d3e8c7.roa
File:                     9cc41706-8b7f-3119-aede-4a03c2d3e8c7.roa (raw, json)
Hash identifier:          khtk5/hdOJEN76Jc5WTOqTiv4X5SD5a+ReXfRKK6TPM=
Subject key identifier:   F5:B1:59:5D:80:9C:C1:85:E6:6B:46:1D:4D:BB:59:E3:66:03:21:81
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3374AAE996E90EEFD300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cc41706-8b7f-3119-aede-4a03c2d3e8c7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.198.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:33:74:aa:e9:96:e9:0e:ef:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7e3de4ba-d47e-4db1-b4bf-b272674f7b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:3b:bf:de:1b:46:12:0e:ae:39:8b:f7:62:
                    3a:87:df:52:a9:2d:30:b2:ef:e2:14:bb:d3:bf:59:
                    64:bc:a4:e8:c7:69:05:98:ec:b3:d8:c1:bf:b4:c9:
                    7a:9c:be:14:32:2e:7d:0d:0f:1f:ae:f1:98:e9:1a:
                    68:fa:65:43:0b:f4:31:26:e7:3f:46:7a:aa:0a:c3:
                    87:5d:d7:0a:c8:5f:22:27:6e:3f:0a:50:77:05:55:
                    11:2e:9b:0c:0f:2f:6f:a0:5c:68:ae:c1:4c:fb:c9:
                    e7:75:12:02:6d:f6:ea:23:6d:34:3e:df:3d:83:08:
                    1d:48:c4:9c:12:63:ed:ad:75:9e:c6:f6:d7:01:6b:
                    9b:15:81:ad:bd:dc:98:18:2b:fb:f1:f5:b5:16:75:
                    bf:f0:e0:c6:58:64:b3:61:ea:70:82:66:76:b2:c4:
                    13:75:a9:84:af:96:67:26:fa:66:9e:69:75:20:f4:
                    94:92:a2:1c:dd:f4:00:b9:c5:3c:8a:27:04:51:69:
                    23:87:74:bc:32:91:7d:a0:df:32:ae:5e:d0:da:4b:
                    da:c4:07:11:b4:68:b0:5a:4d:1c:d1:69:59:b4:d6:
                    9d:d2:e5:e1:f3:f3:b7:62:c3:ff:87:f3:90:10:ca:
                    77:ae:3e:c5:9f:11:31:2f:cb:99:41:ea:68:b4:4a:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B1:59:5D:80:9C:C1:85:E6:6B:46:1D:4D:BB:59:E3:66:03:21:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cc41706-8b7f-3119-aede-4a03c2d3e8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:68:71:7c:99:60:8f:b7:97:47:8d:f3:2b:0e:93:2b:10:2c:
         30:ca:c8:41:6c:e6:55:54:60:fe:1f:1b:67:6f:3f:63:e1:a1:
         ab:3c:18:05:39:79:a6:72:31:7d:57:4c:ae:12:86:73:69:bd:
         42:05:26:16:cf:c7:33:01:fe:83:3a:af:f2:5e:14:c5:8b:9c:
         a9:85:5b:a1:89:b2:d1:6e:0c:41:0d:46:14:26:cd:59:2d:dc:
         22:83:87:ca:45:b8:53:e5:fa:3b:08:f5:90:47:d2:29:40:73:
         4b:b6:6c:9a:e0:06:4d:77:e5:c5:24:55:d1:17:c1:35:db:c5:
         c1:69:69:0b:8c:b4:b8:1f:a5:05:e5:97:ab:53:d8:f5:25:eb:
         29:62:7c:ab:46:ec:75:f8:b9:67:37:62:10:0e:74:e4:a3:48:
         44:25:75:9a:15:a4:15:ad:3a:34:5c:90:81:94:2e:69:54:a3:
         66:ed:f0:1c:b3:23:03:78:8f:c9:dc:84:a4:c2:96:6f:a4:4c:
         c2:63:a8:e6:b9:0d:ae:7b:a7:d6:27:aa:6b:c3:e5:b4:11:56:
         aa:8d:6e:5d:d3:70:5b:e4:40:99:4a:c7:ed:ac:a2:13:b2:d3:
         f2:b7:60:f1:9f:c3:82:f2:67:c6:82:6d:5b:76:05:77:93:ea:
         3a:f6:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org