Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d0713b-588a-3a6f-a31f-c112de601541.roa
File:                     c5d0713b-588a-3a6f-a31f-c112de601541.roa (raw, json)
Hash identifier:          zsx/GCIZa8dOsi1qTIIYaE1hFHLvHEKI+W//dD8/oSQ=
Subject key identifier:   9D:3C:93:6B:ED:F8:86:1A:1D:14:FA:F2:E7:B6:DF:F2:71:0A:EA:AD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2BA89EC677C4717C8500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d0713b-588a-3a6f-a31f-c112de601541.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2b:a8:9e:c6:77:c4:71:7c:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c9badb25-46dd-49f2-966a-b83240c69ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:c8:a4:44:3e:39:07:6e:88:7f:ac:8c:db:
                    41:71:78:e2:5e:f1:a8:3b:fe:a6:fb:10:c3:31:fd:
                    13:86:41:fe:cb:ac:3e:5b:a0:73:2d:24:aa:ba:b6:
                    f8:85:cc:dc:94:5c:17:b7:20:39:0e:f8:57:43:b9:
                    54:02:13:23:ba:8d:73:1b:f0:2c:5c:3f:e0:3d:ef:
                    8b:e8:31:f1:6c:c2:96:2c:36:72:61:b8:09:70:4a:
                    fc:ad:57:06:ca:0b:50:2d:8e:86:f2:28:19:b1:8a:
                    10:ed:7e:2b:aa:7e:4e:12:4d:42:11:ba:db:bd:f8:
                    d8:8e:85:53:16:e7:4b:bc:a7:cc:b3:49:27:8e:af:
                    32:8d:cc:50:84:c7:60:8c:46:5f:a3:be:e4:fc:19:
                    c3:62:11:8b:51:b3:db:84:05:91:e9:b9:da:a1:e1:
                    1c:44:40:69:bc:6c:2a:44:02:bf:e4:cb:e4:6b:00:
                    48:74:c6:3c:f1:1e:00:f3:ea:60:ee:9c:0a:8b:4f:
                    82:d4:c4:ca:63:5e:d2:35:a9:bd:ec:9f:6c:d9:10:
                    85:1c:ae:ec:d3:20:4c:3b:fd:32:3d:95:74:2b:be:
                    56:36:a4:5f:20:6b:65:86:ee:23:88:ae:fd:e4:fa:
                    c9:8d:a9:81:fa:ea:91:25:fd:de:ac:79:4e:f4:5a:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3C:93:6B:ED:F8:86:1A:1D:14:FA:F2:E7:B6:DF:F2:71:0A:EA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d0713b-588a-3a6f-a31f-c112de601541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:90:25:1f:a0:78:98:97:a3:48:95:72:cc:92:7b:53:63:
         03:54:5c:67:c9:ce:df:cd:13:c0:a1:4c:72:d0:10:f3:9a:a7:
         c9:c0:d7:51:90:84:71:a7:8f:a7:06:ee:13:ca:07:9b:b5:9c:
         b3:77:1e:81:d8:c7:f7:04:e8:42:c5:d6:d8:1c:ef:e7:70:f4:
         a0:6d:a0:16:4f:2d:b2:f2:99:93:f7:b6:df:b2:13:38:09:41:
         29:9e:f6:2d:ff:35:84:d0:d9:d0:9c:9a:22:34:b1:7b:ac:51:
         55:5d:0c:e7:17:a9:19:85:60:0c:d6:db:74:7f:11:94:dd:0b:
         7e:c5:0b:df:6c:a2:0d:c4:e7:a4:31:80:31:3d:a5:6e:0f:70:
         87:a2:0a:16:9b:01:de:9d:db:12:24:82:4f:87:d4:91:02:77:
         99:12:55:ac:fd:05:92:b2:b3:09:e6:26:22:c0:9a:d7:0a:0e:
         47:9a:d0:46:50:7d:98:d6:96:95:4e:7c:55:39:80:6f:90:de:
         cc:1b:87:73:86:ee:3c:6a:59:32:b0:0b:4a:12:66:f1:27:44:
         21:10:22:c9:27:d7:d1:3f:4f:69:13:fa:f6:04:bb:dd:d7:6b:
         6f:94:a3:0c:a4:74:bc:43:2a:14:bb:16:5d:c9:2a:83:74:9c:
         96:bf:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:47 2024 by rpki-client on console-ams.rpki-client.org