Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa
File:                     b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa (raw, json)
Hash identifier:          4yDSWsoPxCC5vujwdMI2A3RqwUszdJ98L+j4HO0NKqg=
Subject key identifier:   79:87:67:AC:BF:58:F4:44:7B:DC:8E:92:32:5A:30:9F:C6:DF:1C:E2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DAF943814C9A4CB5B4900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:af:94:38:14:c9:a4:cb:5b:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=eea00ed3-4645-4520-8a23-1c7418ae20c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:f9:f6:20:7c:58:74:44:70:30:3b:2b:ae:
                    26:63:89:05:67:96:64:3f:a2:e6:21:ce:83:db:ab:
                    b8:18:b1:0b:94:28:43:35:29:80:35:e2:cc:da:0f:
                    96:b9:df:9c:78:c0:23:9f:58:4a:ed:10:46:18:25:
                    3b:0f:1b:43:f0:38:49:1f:4e:46:06:6c:6f:31:ad:
                    6a:f7:db:bd:fc:c2:d4:6b:3d:1f:44:2d:b4:16:ef:
                    c1:68:70:09:fe:bc:2f:e4:46:a9:68:28:75:96:4a:
                    73:5c:2c:eb:17:4f:db:8c:d2:ca:31:c8:35:0d:ac:
                    ab:0e:e6:a8:36:46:99:09:d7:d7:af:b1:0a:87:da:
                    bb:35:90:c1:73:46:a5:85:ff:41:85:aa:79:7b:99:
                    42:df:b5:18:37:3a:1a:cd:33:0c:b7:86:63:58:fc:
                    83:ae:21:26:e9:06:55:66:66:d0:b7:1d:33:e1:0b:
                    c8:28:eb:e2:8f:66:2f:c0:6a:57:62:cb:bb:4f:61:
                    85:d4:36:ac:51:39:c6:3c:ea:32:10:ff:28:44:b3:
                    11:23:c8:3a:33:76:29:8c:00:18:f8:65:b5:dc:b1:
                    e6:58:3c:d3:81:0c:89:6d:f4:c1:df:42:0e:b4:4a:
                    5a:ae:30:89:79:4d:ab:25:1b:7f:17:88:1c:0d:b1:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:67:AC:BF:58:F4:44:7B:DC:8E:92:32:5A:30:9F:C6:DF:1C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:c2:a2:84:b0:53:96:18:22:a7:49:3d:ad:3e:b5:ff:da:6b:
         10:be:dc:20:c3:1e:8f:ec:de:10:1d:a2:f2:17:23:e1:3b:61:
         87:60:49:be:7d:c9:1d:a4:65:31:13:f1:52:1f:3e:90:a5:73:
         bb:8b:bc:a1:7c:11:c2:a6:cc:35:08:8b:6b:55:18:8a:75:da:
         54:bd:05:99:7e:a7:a7:f0:f3:a0:bc:1d:ca:ba:51:00:84:42:
         82:21:e1:50:a2:af:aa:da:0c:f6:26:16:4a:b4:0b:bc:f9:ea:
         d9:fc:45:ea:ad:02:fd:cd:ea:ab:51:f7:a7:bc:e9:07:72:bd:
         83:a7:3e:76:e8:a3:fb:f7:b2:a9:aa:29:19:3a:e7:e7:86:15:
         91:27:8e:ed:5b:79:b6:31:40:62:3e:c4:7d:94:e1:52:b3:fe:
         02:80:5f:ad:26:c2:1a:94:8a:4f:d0:08:18:c1:57:d1:7d:16:
         30:81:2b:94:75:99:f0:75:a1:75:e2:1f:37:e1:7c:66:89:0f:
         d0:c0:cf:96:b0:61:2a:47:18:96:f8:e9:82:31:86:ac:0f:1f:
         ed:90:59:3a:4d:02:3d:17:0b:7b:66:77:d1:e7:b1:5c:a1:20:
         3d:bc:50:30:05:25:a3:af:c8:65:cb:c4:0b:df:20:68:06:5a:
         fd:20:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:47 2024 by rpki-client on console-ams.rpki-client.org