Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9da9f4a1-ffe1-3f2c-b5e6-aecae126c69c.roa
File:                     9da9f4a1-ffe1-3f2c-b5e6-aecae126c69c.roa (raw, json)
Hash identifier:          gxi77OefR9Uqo7Pj3wl6Se+08pNHh+Ng6m9MVZeO7uc=
Subject key identifier:   F9:7A:69:07:CF:B3:E3:F6:0D:6D:83:C7:83:26:14:D6:BB:50:84:24
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DB18892B379FEE80F8180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9da9f4a1-ffe1-3f2c-b5e6-aecae126c69c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:b1:88:92:b3:79:fe:e8:0f:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=d98c0e7c-8ef8-4ca1-9437-d1e43640fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:94:7b:e8:94:c4:d1:7f:bf:03:c0:d0:34:
                    8b:d9:cd:7f:a3:1a:94:a5:a7:a1:e6:56:d8:d9:b3:
                    3e:dd:74:91:5b:d8:d8:c1:eb:6f:9c:24:16:54:45:
                    8f:68:20:d1:bf:e8:a1:0e:de:01:03:25:ae:09:b0:
                    f3:da:b9:81:3f:b1:65:f1:c8:5a:a9:e1:82:95:6b:
                    8f:e1:1d:f2:ba:46:3f:93:38:7c:b6:7a:ed:b4:38:
                    2b:4b:f3:59:c1:08:31:78:bd:2d:49:98:71:e1:77:
                    17:98:14:fe:3b:4e:d7:6a:29:fe:a0:dc:9d:ff:de:
                    c9:9b:1a:53:a8:76:c3:ce:61:23:29:a3:27:f2:88:
                    34:0b:91:a7:b1:00:79:cb:42:6d:b4:a6:23:16:8b:
                    a0:8d:73:ff:f9:06:8d:8e:dd:b0:c3:f0:11:7d:d2:
                    04:ac:93:0d:9e:b9:7b:21:f8:02:8e:eb:cd:39:4b:
                    93:5b:97:38:96:4b:72:f7:69:0b:08:16:67:05:dc:
                    13:da:a5:87:8f:cb:44:22:69:4a:52:54:19:f2:6b:
                    b7:cb:86:dd:a5:4c:82:f5:cc:04:48:61:27:7a:8b:
                    a3:0c:b7:83:e1:4d:16:10:5b:fd:2a:90:80:ff:7e:
                    81:01:1e:6c:dc:19:94:db:4b:82:96:a6:a7:39:65:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:69:07:CF:B3:E3:F6:0D:6D:83:C7:83:26:14:D6:BB:50:84:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9da9f4a1-ffe1-3f2c-b5e6-aecae126c69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:e5:46:ee:2f:90:79:aa:87:5b:cb:d3:03:8b:34:29:36:
         b2:31:af:c4:28:c8:0d:6f:be:75:ca:4b:a6:e5:a4:ea:67:5f:
         81:10:65:08:97:ce:d4:78:19:a0:fc:6d:11:ca:06:75:50:e5:
         67:82:8a:ae:d2:68:79:e0:75:2d:d3:b7:2d:65:cb:17:db:f3:
         26:ef:a9:3a:0b:99:6e:e4:ee:0a:80:7d:1d:34:33:f4:6d:98:
         51:5b:9e:cc:5b:db:68:a4:f2:bc:dc:81:33:dd:5c:ad:8a:3e:
         61:96:1b:10:6a:48:63:90:d7:f9:72:be:a9:ec:e0:24:b4:8a:
         fc:6d:59:82:30:f3:4f:54:e5:47:3d:ea:11:7f:30:cc:79:f3:
         08:6f:c6:ae:41:6a:fd:aa:f4:93:c9:ca:d7:ba:1a:ec:3a:34:
         3e:b8:bc:8d:50:65:ae:22:83:cd:01:82:23:73:ff:59:3d:69:
         a2:26:0e:29:c6:df:ce:4a:1e:0f:19:93:a6:a8:35:74:0a:2f:
         dd:04:3e:80:18:4b:06:2d:3e:9e:41:2c:49:00:25:f1:ee:e1:
         3b:08:59:9d:3e:d8:8f:2c:34:bd:cd:ac:0a:4a:7e:04:9a:5b:
         08:ed:40:46:59:b7:18:d0:be:86:c3:4c:3b:67:d9:bc:b2:ce:
         f3:56:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org