Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa
File:                     d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa (raw, json)
Hash identifier:          D/Io6h72+6qVtQ2HdfGPxDgofPSM10XZjfvYm+5x1HQ=
Subject key identifier:   01:EB:B2:BB:01:A5:84:63:BA:7D:81:23:EE:C6:5E:28:13:7B:11:F1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E32D53F6D3C58613A71E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.198.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:32:d5:3f:6d:3c:58:61:3a:71:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ec096056-72e9-4ba1-ab23-532cb15e3d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:36:e7:ea:c9:58:88:ab:82:9d:c7:65:47:
                    c4:af:3c:c8:86:4f:56:95:01:9a:28:ac:6b:5d:3d:
                    6e:f0:75:00:f2:bf:87:42:ee:57:31:0f:8f:a6:36:
                    dd:c4:c9:56:6c:a9:67:3e:00:04:70:c2:9f:f0:6c:
                    79:6a:f0:75:97:5c:5c:c1:80:f4:ad:47:aa:e3:c1:
                    0b:4d:89:3c:58:f1:12:96:4e:b7:41:f9:1d:b6:54:
                    64:8a:3a:d4:d8:76:53:86:90:e1:1c:9b:18:65:a1:
                    0a:a3:a7:ff:57:e3:28:9f:bf:5b:98:d0:97:77:82:
                    07:74:b2:05:ac:0b:b1:95:14:5e:7a:10:62:50:e1:
                    80:a8:ad:86:a3:05:27:e5:f0:db:b2:4a:46:f5:a2:
                    e8:05:81:81:54:f8:37:c8:e3:98:03:b7:61:7d:89:
                    13:b5:64:5f:a4:5f:49:bb:61:a4:04:08:7f:24:17:
                    2f:99:f5:33:1d:e5:3e:76:42:93:dd:31:97:0d:f8:
                    aa:16:91:8b:a4:a9:82:f6:c9:6a:97:d4:94:16:9a:
                    2f:82:44:86:08:88:24:e1:34:26:ed:e9:2e:16:25:
                    5c:cb:3b:95:67:68:43:ac:cc:66:65:80:fc:71:4b:
                    76:3b:e4:81:ec:b8:12:f0:05:a8:9f:54:0a:09:1a:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:B2:BB:01:A5:84:63:BA:7D:81:23:EE:C6:5E:28:13:7B:11:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e0ccf1-bcb8-3d4a-802f-75236e665e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:c3:e8:43:88:cf:7f:81:70:d0:5d:bd:d3:36:50:08:50:
         4f:b3:26:1d:49:1e:e8:eb:8a:00:1b:03:3a:bf:6b:e7:43:a4:
         a7:37:3c:6c:10:01:9f:02:56:67:fb:3f:ce:1c:f1:b6:bf:0e:
         3f:99:3c:76:20:22:1f:cd:71:3e:d3:29:e7:20:ea:34:c7:a1:
         46:87:38:02:df:de:a6:4b:e7:d7:9e:c9:b1:4a:85:ba:28:48:
         01:ba:b5:1d:81:4d:38:99:54:0f:84:cf:6d:72:d8:f5:37:89:
         e5:8e:f2:80:eb:a4:bc:b5:e3:87:7a:5a:1f:20:b7:04:7d:35:
         d6:6c:65:14:bc:29:a5:1f:6e:70:8c:4b:f0:0b:63:be:b7:d6:
         5d:0c:42:96:1b:2a:63:bc:07:8d:3e:59:65:c9:e6:b6:f0:54:
         75:4d:65:a3:0f:9d:cf:f8:a7:00:f5:ca:0a:12:9f:1a:45:81:
         81:cb:5a:f1:96:fa:81:2b:d4:c3:f8:5d:80:68:7b:df:61:c8:
         2e:8d:e2:7c:5a:8e:b0:48:8c:e4:10:11:2e:00:e7:cd:0f:38:
         20:d1:36:4e:10:95:3e:2d:86:e3:7b:82:57:14:52:f8:9b:3f:
         4c:ef:20:f4:d1:07:ba:f5:b8:33:5d:91:e0:3a:64:70:d9:6a:
         26:76:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org