Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa4718a-cadd-377c-bf7d-53127a0f9c01.roa
File:                     daa4718a-cadd-377c-bf7d-53127a0f9c01.roa (raw, json)
Hash identifier:          WA7HuZh4gDmRRCSVtEvlYTEJFleEVxJRCUDejV6rBx0=
Subject key identifier:   49:8F:A7:79:13:0B:63:76:84:39:15:BA:72:D2:E0:68:84:E8:3A:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A6936C10ECFBECB5A3338
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa4718a-cadd-377c-bf7d-53127a0f9c01.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:69:36:c1:0e:cf:be:cb:5a:33:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=517692ab-03a0-40ae-9f5a-b92ac0d813a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:f3:72:95:f3:97:c3:85:08:76:14:eb:91:
                    6e:7f:9e:37:9a:ed:30:ed:cf:db:4c:6c:24:b8:16:
                    8c:57:2f:c4:b9:7c:08:df:38:4b:c3:21:54:34:ed:
                    a0:f0:c2:21:ee:64:cd:df:e4:92:49:b9:29:57:35:
                    6a:a4:ec:c9:47:56:e4:9e:2d:b3:9f:ef:a0:86:34:
                    8b:2d:29:0b:26:f2:38:ab:1b:63:b1:5a:70:97:88:
                    48:86:55:ee:47:e0:3d:2b:33:46:37:ca:7a:04:1a:
                    8b:f6:65:c5:70:e3:9e:0b:97:b1:e2:9a:23:86:1e:
                    9d:e2:d4:42:e3:e0:42:82:fb:53:8c:fd:3a:bf:37:
                    c1:af:99:d4:1b:d5:73:7d:eb:82:22:f4:67:ad:a7:
                    0a:f8:96:0f:8e:51:f7:f0:07:60:b3:ca:6a:95:75:
                    f1:11:47:59:35:d8:2c:ce:43:a9:16:b8:5c:68:cd:
                    a6:20:a7:bc:18:b0:8b:47:f7:c5:85:dc:f2:91:a1:
                    d0:aa:27:dc:87:7b:f5:3d:4b:b6:41:d9:ba:26:de:
                    75:b3:ef:42:fd:c1:4e:a6:4c:fb:3b:fb:d2:ec:7c:
                    bb:99:53:7f:7c:b0:ea:67:f7:04:ad:d9:5d:c7:9f:
                    c3:2c:e9:84:67:95:8b:ad:34:1e:d8:70:51:a7:98:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:A7:79:13:0B:63:76:84:39:15:BA:72:D2:E0:68:84:E8:3A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa4718a-cadd-377c-bf7d-53127a0f9c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:68:97:b1:78:e0:20:db:0b:23:c0:c1:b6:d6:fc:56:9e:51:
         39:38:e1:55:0a:b8:c2:da:c0:f1:2f:05:b6:15:05:1c:91:1e:
         02:9c:d0:a0:2b:7d:8c:7d:64:2b:ef:c8:fe:bd:27:c2:ed:ec:
         f6:d3:5c:d2:f8:82:e7:32:e2:24:cc:c8:fa:f9:65:f8:b3:6e:
         75:49:98:c1:09:e4:34:0b:95:41:72:b2:ee:38:08:77:81:02:
         b2:4d:78:3a:63:08:6c:cc:9e:93:02:9f:a0:29:92:a9:ae:a5:
         e8:8c:18:15:16:6d:55:82:70:50:a6:11:8d:71:08:22:4b:c8:
         af:70:bc:a8:26:76:f4:a6:f0:01:3e:46:ec:43:58:ed:d7:2f:
         ff:b3:9a:7d:84:31:ad:09:9c:ba:12:61:fe:44:cd:fa:80:31:
         35:29:5e:e7:d9:54:24:00:30:a1:7c:0a:39:37:12:9f:d8:4a:
         58:59:1a:9f:6c:4a:14:e7:b0:2f:27:64:7b:44:2d:8f:c4:6d:
         55:4d:f8:39:a8:80:6c:e0:cc:06:bb:32:2b:84:39:1b:25:fe:
         e9:93:9d:46:62:b7:1c:5b:fe:8a:05:d4:69:48:26:b6:17:1f:
         b9:4f:77:8e:c3:90:88:1c:b8:8e:47:a2:be:8d:4d:a7:25:f4:
         f8:99:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:54 2024 by rpki-client on console-ams.rpki-client.org