Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8d8c318-64d8-3f14-9c69-4f14dd07793b.roa
File:                     d8d8c318-64d8-3f14-9c69-4f14dd07793b.roa (raw, json)
Hash identifier:          bN3fl6BCzHA0cJZvrJaYkjWqHn+WGaCInaEuutj9kUI=
Subject key identifier:   BD:17:94:02:02:79:FB:26:9E:93:66:3B:89:1B:B7:38:5B:B6:18:32
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F432858454F02BD0CC958EA419C5BC2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8d8c318-64d8-3f14-9c69-4f14dd07793b.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     7155
IP address blocks:        99.196.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:bd:0c:c9:58:ea:41:9c:5b:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=2fd2cbfe-1429-4a39-bf3f-b225e9752ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:dd:b2:54:2b:62:2f:8f:dc:cf:26:73:7b:
                    69:05:6e:d0:f7:7b:0a:0f:cd:80:8b:b4:08:5e:4e:
                    76:39:a9:a8:61:31:bf:ad:5a:c6:0c:2f:a3:1f:0c:
                    e9:9c:e9:7c:ac:7b:92:cd:8e:ce:53:fe:20:0d:78:
                    42:e5:68:f4:1e:bf:96:36:a3:cb:1f:a6:81:4f:fa:
                    e5:a6:a2:98:23:7c:e1:ea:0a:ae:19:f0:99:0b:06:
                    a8:d2:cb:ca:bd:8f:57:c3:04:39:8d:a7:3c:c3:92:
                    f1:89:46:89:99:8a:93:c0:70:85:3e:0f:a8:b4:91:
                    fe:4e:d9:83:7e:21:c2:b2:9c:e0:6f:d6:c9:94:f6:
                    3f:6c:80:19:da:85:bb:6f:70:b6:0e:3c:57:e9:af:
                    65:ec:39:86:6c:a7:b0:d8:ad:2d:45:90:65:8f:32:
                    e3:05:10:ef:d9:3f:d1:19:fe:5e:9c:e0:af:66:a4:
                    b0:43:e6:6f:c4:02:04:c0:31:27:61:b5:2f:87:9b:
                    b3:c3:75:73:f4:33:5c:8e:f4:f8:c0:75:dd:18:3b:
                    7f:fd:e4:7f:a1:2d:06:42:6c:79:23:6f:29:79:d1:
                    7c:b0:92:39:f4:36:c0:f6:bd:80:3a:41:5e:94:65:
                    b9:ee:6c:54:38:ff:fc:b3:cb:ea:8f:ec:cb:c1:dd:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:17:94:02:02:79:FB:26:9E:93:66:3B:89:1B:B7:38:5B:B6:18:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8d8c318-64d8-3f14-9c69-4f14dd07793b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:60:77:41:6d:6b:a1:24:34:62:f6:c5:75:37:de:db:f8:d6:
         a9:42:9f:40:66:dd:de:1b:80:af:24:ec:b3:60:2a:e4:df:7b:
         c8:dd:c7:ff:c8:2e:0e:76:23:08:e7:96:8b:f1:3d:8c:e6:da:
         64:fc:2b:b4:79:29:1d:01:3c:dd:31:9b:fd:72:12:6b:a3:9b:
         0a:74:73:a9:0c:86:98:5d:c5:3e:dd:39:de:34:32:eb:e3:1e:
         d4:9b:ba:2c:ff:a8:76:7c:d8:14:1d:ea:d0:05:a3:d4:80:77:
         04:27:a8:53:1d:59:7d:63:96:0a:2f:08:d9:22:8e:b9:66:33:
         9e:50:62:5d:a8:bc:e3:0d:80:11:28:aa:ed:16:a0:73:b5:26:
         44:e6:fe:cf:dd:11:f0:5f:ec:28:83:83:22:5c:0a:07:72:d7:
         7b:3c:13:11:9d:cb:99:f8:26:a7:db:84:ac:e0:13:fa:79:83:
         c2:82:3a:23:5c:c3:28:62:29:25:fd:33:39:eb:a5:7c:8e:ec:
         c8:57:22:1e:ac:90:35:64:13:6c:50:84:0f:4f:fc:5e:52:96:
         fa:32:8b:21:ce:4a:56:8e:c7:ae:8f:58:58:08:4d:02:bc:c2:
         5c:8e:3c:aa:3a:f9:fb:d6:a4:30:90:3c:bd:ab:be:28:aa:e4:
         cc:a7:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:48 2024 by rpki-client on console-ams.rpki-client.org