Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8c9eee-e19e-3084-9874-4939fe74858e.roa
File:                     ce8c9eee-e19e-3084-9874-4939fe74858e.roa (raw, json)
Hash identifier:          w/nhX3b3a+snVHYKSkLNC+TAsEMql++bBWeR3EXLaDA=
Subject key identifier:   A8:8D:3E:89:4C:47:C0:C6:E0:87:C4:86:48:4D:2C:EB:B0:FC:D0:D2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF65579C3D17848B464C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8c9eee-e19e-3084-9874-4939fe74858e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f6:55:79:c3:d1:78:48:b4:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=18b0ec7c-565a-40b4-ab65-eb0f4145fb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:8f:6c:c2:5a:55:8a:ce:5c:38:63:59:c3:
                    8a:87:2d:2b:60:b6:8e:39:01:8b:d5:6c:22:5e:55:
                    cf:36:21:0f:bb:56:dd:c6:8c:e0:89:10:99:c4:b6:
                    df:f2:a1:35:14:5f:c0:e3:9e:f0:f4:ea:99:a9:af:
                    ea:7c:9a:83:fa:2e:bb:53:79:c1:b0:aa:51:f7:50:
                    c5:3e:ea:10:cc:22:65:87:63:61:22:9b:8f:20:c9:
                    cc:d9:44:c0:08:26:c2:52:54:ed:d1:93:c6:6e:d2:
                    9d:1a:14:13:99:16:e5:64:1b:0b:4d:b3:26:7f:02:
                    68:30:af:22:60:15:a9:04:85:67:b4:e2:b3:39:e8:
                    89:1e:5e:33:86:92:bb:25:89:49:ec:c4:e2:29:2d:
                    35:65:a6:57:7c:83:8f:7f:b7:a4:83:49:3a:b9:41:
                    c2:37:b5:4a:a2:64:5a:f3:34:4d:11:ec:08:f0:50:
                    cc:2e:3f:3a:3a:b2:55:b1:b1:69:1a:55:e0:0a:ba:
                    00:1d:7d:ae:3f:97:e6:70:70:6a:c8:b8:ba:af:c5:
                    83:fa:f6:f9:6a:a4:f8:49:0c:e0:45:39:f8:b5:aa:
                    cf:14:01:14:c9:39:5d:9d:8a:13:19:69:e8:51:67:
                    cb:c6:cc:5f:fa:aa:63:15:64:76:62:dc:49:9a:74:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:3E:89:4C:47:C0:C6:E0:87:C4:86:48:4D:2C:EB:B0:FC:D0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8c9eee-e19e-3084-9874-4939fe74858e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:25:7c:2c:64:42:71:98:c9:92:1d:4a:04:d5:d9:b5:c2:12:
         9f:fd:b1:40:12:09:a1:9d:79:12:f9:9c:a8:da:41:34:11:c0:
         17:d1:02:52:22:01:75:5e:94:1d:4d:c3:79:9e:f0:20:7a:09:
         8e:1a:5b:fa:01:2a:ef:be:6c:bf:fb:9d:1c:73:ce:ea:9e:8a:
         c5:cd:ed:88:4d:a6:44:cc:fa:cb:96:e3:41:d3:a6:93:4a:1c:
         9b:26:a9:42:f9:72:48:1a:3b:39:e2:64:48:67:38:91:ad:ca:
         7d:e7:0c:73:b2:4a:b0:49:77:52:b7:e2:bf:85:31:01:11:76:
         96:46:34:ce:5f:0a:3b:7d:30:21:bc:2c:c3:a9:5a:f5:7e:f8:
         8b:ef:ad:e6:e0:0d:c1:e6:67:81:35:83:86:d1:54:30:f0:c5:
         c4:69:23:f2:ed:22:be:23:cd:5c:31:5c:51:eb:fa:a3:90:c1:
         99:bf:a1:ae:74:c0:9f:54:e1:3e:cc:b0:09:f8:c4:a4:4c:4a:
         e5:b7:f2:b3:12:3a:f4:d3:12:b4:ea:4d:30:66:e1:05:cb:c6:
         52:c8:04:1f:a5:e1:f2:13:73:90:4a:50:4c:a2:65:af:4d:2d:
         e8:1d:64:9b:83:27:e8:3a:48:96:9c:62:87:3b:e2:db:3b:fe:
         3f:23:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:04:02 2024 by rpki-client on console-ams.rpki-client.org