Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa
File:                     ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa (raw, json)
Hash identifier:          7FHA5WlXhXndd5zJW7D6euKj94wPKSmZ1jqe/vMSOOc=
Subject key identifier:   22:6F:4E:26:4F:DE:5D:7F:4E:70:8D:B9:D6:73:B8:26:5D:58:31:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A614FAC37DCB0272B5A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:61:4f:ac:37:dc:b0:27:2b:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=8b907197-f673-4b76-9835-51174749ba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b9:9d:b5:a6:89:14:24:58:74:f0:9b:58:4e:
                    49:a9:c5:d6:3b:a4:cf:c0:d3:fc:94:91:4f:6d:b8:
                    ef:ed:d3:89:ee:32:2c:dc:41:77:4a:b6:f5:f5:98:
                    17:eb:ae:ec:e4:0d:12:78:2c:5e:bb:a0:4d:7b:36:
                    d5:bc:43:d1:a7:cc:70:e0:23:c1:80:e1:6a:7b:4d:
                    94:85:f4:13:f1:b3:5a:9e:e1:a6:f7:14:47:cc:99:
                    d2:f3:90:6e:82:50:c4:eb:1a:64:75:0e:48:b1:ba:
                    3b:17:b4:ea:b4:6d:da:5b:3d:9b:be:61:0e:35:ed:
                    e6:04:71:bb:c7:34:33:a7:11:64:95:26:12:1a:67:
                    92:fe:7b:01:cf:5d:89:ef:2c:16:61:98:e6:c0:41:
                    17:94:2d:86:0b:0d:66:44:0c:3a:aa:1e:04:01:c3:
                    15:51:35:61:6f:d4:46:f0:ac:7b:73:76:1d:e2:5e:
                    ca:02:58:51:57:0e:ba:7f:27:3d:7c:63:6e:3c:92:
                    ff:7a:f1:50:63:dc:11:a6:82:ba:18:76:4d:e0:99:
                    81:35:e3:c2:50:6c:97:ef:25:fe:f3:4b:55:45:d7:
                    2d:9e:72:d0:a3:d7:50:17:01:76:68:74:e2:5c:9c:
                    06:30:c5:e4:56:ee:18:ae:be:e4:d2:d2:d5:ed:46:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6F:4E:26:4F:DE:5D:7F:4E:70:8D:B9:D6:73:B8:26:5D:58:31:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:a9:88:2e:15:b9:7c:cd:7b:d5:6a:fc:60:c9:14:1f:06:
         2e:d5:06:a0:7e:2f:af:08:37:5b:fe:a5:39:98:f6:fc:7f:82:
         70:d9:ab:f8:ee:ae:11:83:8a:04:cd:f3:07:c6:8f:9d:cc:c6:
         3a:82:f3:61:44:e5:8f:37:d0:f5:65:4d:1a:c7:cf:3e:8f:d2:
         8d:44:f5:31:54:f7:10:3c:02:d4:e9:71:5c:0e:ce:db:4c:6f:
         2d:19:e4:1f:48:91:5f:a0:28:fd:7a:5e:57:a3:a4:7d:c2:ec:
         ab:db:38:3d:60:3d:3d:c2:63:5a:92:d1:a7:d2:7b:49:20:b0:
         3e:50:83:a6:69:67:9e:4a:31:12:de:bd:e2:cb:80:e4:b2:55:
         21:75:3b:2c:04:75:9d:d6:f2:08:8b:48:08:70:73:df:b4:ff:
         7a:4c:14:50:19:ff:09:ee:bc:c5:eb:59:0b:04:cd:9a:01:7d:
         d8:93:7a:21:7f:91:c2:6f:66:05:ea:ba:fb:27:cb:fc:17:2c:
         c0:19:2f:27:d0:1b:e0:3c:91:23:01:7e:5c:c4:4c:8b:5b:6a:
         0a:97:a8:03:e1:35:13:60:e8:37:1a:29:80:f9:74:55:45:f5:
         33:ca:ed:e2:4b:c8:85:92:8e:9c:d4:a1:59:5e:cf:44:ff:f6:
         87:b2:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:11 2024 by rpki-client on console-fra.rpki-client.org