Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa
File:                     dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa (raw, json)
Hash identifier:          xhhApAGzS/wELnpnAMQxa/r0ddfnsInJjL3cHEmjbpw=
Subject key identifier:   F0:C5:BD:DB:63:E0:5E:5E:03:3F:FC:83:7E:DB:DD:0A:02:08:9A:6E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A664B35C342D1C37F8D20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:66:4b:35:c3:42:d1:c3:7f:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=8b5ed0f9-89ca-4d6b-85e7-ae55f5f7b174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:95:d9:35:cb:6c:58:d0:82:cb:84:fc:bc:
                    af:3f:6b:34:88:4f:d9:10:d0:8b:ea:a4:10:1c:da:
                    ad:d0:ad:0d:b6:4f:43:f1:bc:f5:b0:81:34:6b:38:
                    c5:28:25:5a:df:86:e0:0c:47:91:6c:d5:9e:cd:c3:
                    ea:b0:94:24:cb:f4:5c:50:7f:3d:5f:80:15:f5:cb:
                    e9:3e:bc:e9:a4:fd:e3:81:4a:be:4b:ab:96:c6:06:
                    ef:a4:c9:26:c0:c3:f3:a9:cb:ca:e4:1c:ae:f4:7c:
                    1d:85:3b:74:81:a5:0c:7a:42:3a:2d:23:c3:92:12:
                    f3:59:01:92:d2:9d:f1:c7:9b:dc:68:26:37:59:d7:
                    ef:c1:ef:86:cd:fb:40:fe:7d:66:86:56:9c:36:d0:
                    4d:30:21:44:83:2a:fb:a1:a2:4d:6a:eb:21:75:94:
                    4a:00:ec:23:f4:e4:18:aa:d4:e9:c2:72:ab:b8:3b:
                    8f:88:d7:c2:2d:b3:d0:39:8f:56:a7:31:ca:51:0a:
                    39:46:de:1f:65:50:95:12:11:2e:03:0d:c1:2b:7b:
                    d7:f1:14:1f:1f:4b:7b:e7:80:02:ec:f8:ff:f7:4a:
                    13:b7:d2:59:c8:c2:61:ac:41:76:9a:22:17:3a:b8:
                    67:22:18:4a:f6:45:d2:53:28:74:a5:09:28:5c:46:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C5:BD:DB:63:E0:5E:5E:03:3F:FC:83:7E:DB:DD:0A:02:08:9A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:46:2c:9e:0b:b7:f7:2f:b8:dc:ab:e3:42:ae:70:65:5c:85:
         30:52:ba:c5:74:06:5c:7d:eb:b7:1b:61:8b:ff:eb:11:ff:9d:
         95:28:2f:61:56:e6:a1:a5:9c:40:83:1f:0f:46:43:33:65:cb:
         fd:e9:b6:8c:c8:af:90:2e:7f:13:3d:d2:98:d0:cf:bd:12:e0:
         1f:90:61:83:cd:80:8b:2d:97:82:a5:ef:35:5e:34:e8:0f:f1:
         09:77:5b:08:2a:6a:62:33:32:0b:21:db:d0:dc:9a:8b:c3:4f:
         dc:fb:a3:09:89:35:ef:5a:c1:d8:b1:f7:18:8c:8c:f0:50:0f:
         ae:be:9b:15:d3:c4:c0:97:78:ce:4a:1e:55:4b:c9:07:3f:b5:
         b5:3f:75:93:2a:b8:c3:0a:4a:64:ca:b3:04:b9:dc:45:ae:4e:
         f3:7a:5c:99:58:4d:d1:e4:fb:29:18:83:86:36:31:61:17:62:
         97:0a:c3:e0:98:a7:82:04:45:44:39:f4:6d:67:21:09:e1:cc:
         a7:ca:6a:c6:df:8c:f1:2b:2d:6d:cf:5b:6c:51:5d:fa:d5:79:
         dc:70:46:8a:c7:5e:9f:a5:29:49:34:20:18:97:fd:34:82:76:
         99:f9:cb:e9:ac:f1:cc:da:4c:fb:b1:d6:31:43:95:6c:f3:e1:
         ca:bd:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:35 2024 by rpki-client on console-fra.rpki-client.org