Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa
File:                     c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa (raw, json)
Hash identifier:          wMa5u4RvSOjVU0h7BvxHuKvSqd9LuPnqOsA0yX4cCIg=
Subject key identifier:   8D:15:09:1F:26:6C:27:47:76:C2:04:BB:07:E6:C9:1F:3D:10:D3:06
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF632396AF1D798D615C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f6:32:39:6a:f1:d7:98:d6:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a9da9a36-6105-4809-a0d8-4341a6f07519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:1f:22:79:04:fc:93:ff:9a:1e:8d:72:8c:
                    a5:09:7f:39:c2:c2:46:69:0e:dd:0c:1d:6a:73:18:
                    6c:3d:a5:33:11:e6:f2:65:b1:16:1e:71:e9:96:f9:
                    8a:4d:2d:2d:25:cb:11:2d:15:b6:46:15:61:d5:6a:
                    fe:6d:97:b2:44:a9:a9:97:b2:5a:56:ab:f2:cc:4f:
                    ce:93:74:b6:6b:bf:f7:45:91:7e:7f:c8:77:37:09:
                    57:0a:c4:15:24:1a:e6:36:bd:80:c5:ff:a2:75:33:
                    0a:7d:24:3f:b9:63:b8:ea:67:e9:ed:a9:32:7c:4e:
                    3f:9d:5d:63:a5:bb:d2:5b:30:a4:75:0e:c4:9b:e3:
                    40:e8:ef:cc:1a:6f:c5:89:8c:16:73:1f:42:85:76:
                    ab:ec:b6:d5:e0:39:10:d1:89:d8:ad:62:00:b7:fc:
                    3a:46:53:24:56:eb:5d:b0:23:2d:36:16:55:dc:73:
                    a7:8f:ca:59:d3:69:55:fa:95:02:fd:02:5c:57:04:
                    3c:09:19:7e:76:62:f4:54:d5:23:93:bf:e6:b0:b6:
                    2e:41:b0:c0:5c:cf:99:89:67:7d:f3:66:cd:01:e3:
                    11:74:44:4b:6e:1c:ba:8a:5e:0c:9d:23:28:fd:e4:
                    64:45:7e:20:a6:c9:02:7e:8f:0b:39:10:e5:d6:0e:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:15:09:1F:26:6C:27:47:76:C2:04:BB:07:E6:C9:1F:3D:10:D3:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:98:99:c9:36:58:ab:ee:63:5f:1e:1d:4b:6b:b4:36:4e:e5:
         be:60:4c:6c:02:a9:90:2d:cf:5f:f7:e2:99:14:d6:c0:d2:13:
         09:cb:f9:d9:58:58:aa:b8:b9:f1:6d:69:a3:ec:a3:74:84:fa:
         a8:90:e2:6c:d2:f8:75:e5:ea:44:35:80:fa:ef:44:6b:33:b1:
         d9:f0:d6:87:1f:73:ba:3b:eb:88:fe:d0:a2:8d:93:9f:ba:45:
         a6:24:66:10:1d:c8:2e:fe:85:5d:0a:44:09:ba:5f:36:30:27:
         bc:58:af:e6:dc:e6:fe:2c:fb:cc:b6:6a:35:10:10:d0:1b:c3:
         22:6d:ad:8d:65:01:40:b3:c9:f6:d5:18:55:a8:68:f7:1e:0a:
         e9:8d:ab:bc:a0:39:92:f3:f0:e7:5d:91:3e:11:94:9a:68:1d:
         c7:af:78:24:f0:8c:56:7c:38:1f:e5:f4:22:83:a4:39:d1:ef:
         b3:b4:e1:77:a6:39:cd:77:17:2c:dd:15:90:c6:75:aa:e3:bd:
         98:18:e8:01:28:23:7f:fc:86:f3:0f:a4:69:4e:c2:90:1b:9a:
         7a:aa:f0:e3:7d:b6:8f:84:6e:44:e7:2c:6b:5f:94:2e:40:ca:
         63:94:35:78:9b:61:5f:2d:f2:a4:15:59:79:e0:f1:e1:0f:64:
         dc:07:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:38 2024 by rpki-client on console-ams.rpki-client.org