Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa
File:                     ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa (raw, json)
Hash identifier:          WavAE0aLUmooa5Iq2su/V6vjih0GXSzb9uxuwdrwVko=
Subject key identifier:   A8:18:D2:87:CB:2F:E5:9C:2A:C4:13:2A:16:E7:B9:B1:59:18:62:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2B1A933D51CBADC069D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2b:1a:93:3d:51:cb:ad:c0:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3093a13e-688c-4d8b-a3dd-3a8e63c1a86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:ef:77:76:c3:4d:74:5b:ed:3e:66:33:a6:
                    41:24:34:2c:c1:03:ef:91:5d:26:d8:a1:fb:34:ab:
                    83:6d:d3:3f:3b:fe:87:89:fb:3c:48:40:19:c5:e5:
                    e7:0c:e5:dd:04:fc:be:b9:43:47:16:48:96:7b:65:
                    fc:f2:0b:01:ae:2b:2c:cb:46:a1:36:a9:a0:c0:93:
                    c9:95:09:89:d2:43:6c:94:ae:19:6d:3e:87:65:7e:
                    f0:da:1b:7f:76:c9:7a:be:78:6e:de:77:e2:ac:e6:
                    38:f0:ad:c9:12:fb:95:cc:20:c3:1d:84:85:bc:a8:
                    60:d4:90:ad:e0:a4:23:ec:0e:a5:3e:ea:c6:80:49:
                    d6:11:07:49:f9:d8:a5:0c:52:93:47:7c:26:64:72:
                    84:30:e5:61:31:6a:9b:96:b6:76:b7:66:15:35:d2:
                    cc:b4:9d:fa:94:54:f5:8e:cd:3e:6f:20:36:7a:22:
                    83:f5:1d:d3:37:e5:c5:42:7b:5c:f0:69:ba:9b:f6:
                    8e:67:d7:e6:79:81:a0:69:7e:9d:15:8d:91:10:83:
                    6b:c3:ab:51:03:f2:4a:3b:3b:14:7f:6e:9f:fd:4a:
                    64:3d:82:06:87:37:75:1c:a7:be:eb:58:34:ee:69:
                    20:1d:d3:3c:7e:a2:65:49:ec:96:03:25:41:d8:a0:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:D2:87:CB:2F:E5:9C:2A:C4:13:2A:16:E7:B9:B1:59:18:62:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:ee:c1:42:8d:01:af:ba:67:fd:9c:20:c7:a1:b7:b7:59:
         af:01:78:86:c0:c0:a8:47:29:80:5b:de:f0:90:59:9b:9c:11:
         6d:d1:8e:68:7d:56:4a:d0:9c:cd:76:fc:55:06:9c:44:85:22:
         fc:1b:8e:60:27:eb:52:90:ad:e1:a3:cc:46:b1:a3:4d:cd:e9:
         fb:fe:70:9b:55:ce:e1:50:40:82:4a:b3:52:80:2a:14:56:1b:
         fb:fe:65:07:b7:6c:0e:58:b3:fa:ab:c0:21:b2:3d:25:4d:c6:
         2a:af:a0:49:9f:53:3d:40:8e:b1:bc:93:d5:b5:3e:b0:6e:1e:
         d2:96:1d:c8:de:6e:6a:bc:24:99:9d:a0:ef:aa:d8:1c:f1:b2:
         33:a9:f1:ba:0b:aa:09:81:27:23:4b:84:f2:5c:57:e7:18:e9:
         40:92:e0:2d:74:3d:5c:76:89:43:15:d9:58:e2:c3:72:fe:d4:
         aa:ef:5f:8c:d4:8a:ec:38:7c:0f:79:89:e7:ba:e5:6b:f0:31:
         74:83:fc:c0:2e:7f:65:8b:9b:a8:bc:8c:00:d1:68:cc:84:b0:
         29:b0:f8:bd:3e:31:d7:48:30:38:51:6c:a8:93:1d:3d:44:77:
         e1:1e:99:ad:29:47:6c:5a:7e:92:69:50:af:8e:33:ef:26:dd:
         fc:bf:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org