Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6a5ed02-f353-3fca-ad4d-9e522cd549e7.roa
File:                     d6a5ed02-f353-3fca-ad4d-9e522cd549e7.roa (raw, json)
Hash identifier:          F2O65raPRkq7XVFHgIeUk3vu85IyMlqgJ4vmaDfk1PE=
Subject key identifier:   90:49:90:DC:59:8F:FB:C7:8E:6C:41:8B:82:82:D4:91:EA:40:68:43
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DB058FCCC9B1C36660240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6a5ed02-f353-3fca-ad4d-9e522cd549e7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:b0:58:fc:cc:9b:1c:36:66:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=74eebf6e-5f64-4537-8186-a8f37c8c0785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:91:ac:33:8b:f6:d9:2f:d1:75:e3:4c:d1:2a:
                    32:39:d1:e3:cb:f9:09:99:92:52:28:57:7f:e1:e2:
                    2b:27:3f:8d:06:d7:ac:88:91:a8:b0:45:03:e6:a5:
                    d1:6d:2a:11:0c:aa:ab:d1:78:f8:17:6b:d2:0e:e6:
                    17:6f:08:08:60:9c:fb:f3:03:2f:1c:cd:2c:33:45:
                    5a:a9:39:6b:1b:c6:4c:d2:e0:cb:31:1d:c9:a3:ec:
                    6f:c8:61:5b:ca:95:1a:ea:ff:25:2c:24:b2:4d:17:
                    e6:39:d2:c2:72:94:6d:73:17:7f:7f:1c:4d:91:b4:
                    54:77:fd:91:1b:74:0b:b2:cb:f5:1b:0c:47:d6:57:
                    1f:e3:8a:29:ff:5f:80:d2:85:28:2f:7d:2e:2c:91:
                    70:e2:51:36:f2:7d:09:1d:12:00:67:3d:07:4d:2d:
                    96:c2:4c:e7:86:4c:99:98:46:4a:d1:a4:eb:73:65:
                    5f:b8:c0:16:d5:ba:40:b1:e5:f3:6c:5a:3f:c2:d3:
                    84:db:9b:e1:97:0b:65:f8:89:b2:b9:50:c7:c5:d1:
                    46:05:e2:1a:91:1a:63:45:ad:d6:ff:13:32:9e:78:
                    f2:23:d2:69:03:6d:b3:e0:e6:34:e5:06:11:e4:46:
                    3a:c3:16:ea:38:44:ca:84:2a:02:92:24:cf:7d:21:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:90:DC:59:8F:FB:C7:8E:6C:41:8B:82:82:D4:91:EA:40:68:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6a5ed02-f353-3fca-ad4d-9e522cd549e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:58:00:76:26:80:69:85:11:9d:8b:49:b5:c2:21:ec:88:
         72:1a:d5:18:9a:4c:04:9c:a7:6d:e8:ef:c1:2a:49:10:cc:47:
         30:3a:03:8d:92:18:61:cb:49:74:62:3d:cf:b3:e8:19:b8:3a:
         8c:1f:bc:3f:a3:70:c8:be:9c:9f:67:bc:cf:fd:cc:ff:9a:c1:
         2d:83:74:80:a4:b6:51:9a:16:69:46:e2:04:8e:f9:c7:6f:c3:
         6c:46:08:67:58:7d:46:35:9f:60:5f:70:64:16:cc:d1:bf:f3:
         fc:29:66:2f:5f:72:27:73:a0:4f:c0:57:86:e7:e8:98:db:8d:
         83:20:8e:17:b4:e7:16:83:89:81:54:be:68:79:91:02:e4:0e:
         96:32:8b:a0:8c:4a:58:d2:7d:e7:20:9a:ad:65:f3:b3:93:48:
         f2:5d:18:81:38:25:e6:0c:b0:99:8e:6c:3e:0c:60:c4:9e:56:
         38:fa:7d:58:cf:4f:e5:d4:b4:1e:1e:9c:12:ad:4a:d9:4f:75:
         6c:a3:ca:45:75:f2:ec:15:f5:86:0b:55:e4:a7:d5:65:53:a3:
         b2:59:a6:10:11:21:b4:86:62:7c:b2:b7:f9:4f:70:bf:a4:52:
         93:8d:07:90:62:54:1a:7f:e5:64:76:45:92:7c:cb:86:96:7e:
         28:e5:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:33 2024 by rpki-client on console-ams.rpki-client.org