Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/abae6f8c-5745-3513-9655-771c19f0ec86.roa
File:                     abae6f8c-5745-3513-9655-771c19f0ec86.roa (raw, json)
Hash identifier:          TLjZEJvHUWz031CWwxMxcXKaKhaNQN0jc2mA8gzVe34=
Subject key identifier:   2E:B7:8A:09:B0:30:41:40:E5:70:07:18:3A:80:22:F8:41:E7:86:7C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AEFA69644710E4DC59AF8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/abae6f8c-5745-3513-9655-771c19f0ec86.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ef:a6:96:44:71:0e:4d:c5:9a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5b6a6f89-e0f1-4cd5-a516-d75a6819c656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:da:fb:a3:17:2e:c2:26:88:fe:e5:8b:fd:
                    9a:bb:36:b4:c6:fe:d5:3e:3e:f6:69:b4:2a:4b:97:
                    d2:c8:6b:df:78:fe:18:8d:e9:f8:57:82:34:96:95:
                    5b:c7:e6:9e:f1:4a:00:99:38:fd:3b:0d:e3:8f:dc:
                    3b:b3:df:f7:d7:1c:0b:b0:a6:10:f6:ea:61:e2:ee:
                    15:0c:28:92:fd:c3:85:f0:be:a1:3e:9d:91:b7:f6:
                    65:e2:18:20:70:b8:70:cc:fd:1a:1d:70:88:6f:36:
                    59:c9:b4:87:4d:53:a5:35:0d:b3:0c:f1:e6:01:d7:
                    6e:5f:ad:ad:be:57:50:e1:bd:01:67:67:5c:ba:63:
                    bd:8d:af:a2:e9:66:fb:3c:13:fc:73:aa:43:0b:5f:
                    c6:b8:ea:72:ba:16:1b:08:aa:72:45:dc:5a:5b:68:
                    8c:3d:37:13:15:ef:b1:a8:2c:d6:09:dc:1e:5f:98:
                    d8:8a:e8:1b:86:ba:c8:27:41:0b:5c:06:de:53:56:
                    14:76:40:4e:2f:93:7b:a0:f0:9e:15:31:78:44:6a:
                    6a:fa:f7:70:73:47:1d:aa:67:ee:69:95:c2:a5:c9:
                    a9:79:e3:13:5d:0b:d8:e1:82:b4:12:00:20:59:4c:
                    e8:7d:ef:0f:32:f2:c7:2f:ff:9a:96:fa:f3:56:d9:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B7:8A:09:B0:30:41:40:E5:70:07:18:3A:80:22:F8:41:E7:86:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/abae6f8c-5745-3513-9655-771c19f0ec86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:3d:d4:95:ac:3d:d4:d9:0f:74:8f:7e:26:0c:71:3f:c6:
         0c:c6:68:d2:25:13:c2:43:b1:fd:6a:6d:1b:92:e9:cd:b4:50:
         bb:91:13:4d:f9:50:ca:02:3b:62:50:01:12:0c:2f:da:57:20:
         2b:2f:f1:70:1c:a3:62:50:46:ef:6f:8a:87:24:e2:cb:55:13:
         29:e6:bd:dd:47:98:d1:7f:9a:10:45:4b:26:5a:99:78:2b:0a:
         3b:9b:fd:d2:fa:fb:73:2f:e2:6f:ef:13:33:fe:4c:e4:d6:34:
         a1:95:bb:91:33:7a:02:1a:f2:73:9c:be:7c:04:c1:77:06:7a:
         cd:38:16:2b:e6:41:a7:93:24:76:ab:fa:c0:cf:d1:56:c6:66:
         c1:0c:c7:c3:1e:26:30:a6:9a:68:9d:15:a6:64:a2:39:82:9e:
         a8:5a:a5:71:df:56:37:7b:cd:90:af:a4:41:51:c4:97:e7:01:
         5a:e5:40:2f:eb:92:16:ff:33:a3:11:d9:e4:a7:a7:b4:9c:90:
         dd:f5:68:91:55:b6:66:c4:25:f5:d6:16:45:1e:31:fa:e2:1f:
         da:d8:b5:bd:6c:ff:69:73:09:97:43:33:21:d8:44:8b:ac:05:
         1c:dc:f2:26:62:03:37:04:96:0e:eb:6a:8b:6d:70:5c:31:68:
         97:53:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:25 2024 by rpki-client on console-ams.rpki-client.org