Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef19ef24-8678-338e-89e4-5d335347c4a6.roa
File:                     ef19ef24-8678-338e-89e4-5d335347c4a6.roa (raw, json)
Hash identifier:          nhw5fyQd3vVPqIVeUYyRKCMQLEflOAgPX+cT/CbQio4=
Subject key identifier:   07:76:20:A9:A0:88:C2:54:CE:1D:DB:33:6C:7F:61:B0:9C:17:EF:C7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E2C9A6D13BBE727E83300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef19ef24-8678-338e-89e4-5d335347c4a6.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.197.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:2c:9a:6d:13:bb:e7:27:e8:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=5e6f5ee7-0729-409d-9db5-880235e11ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:24:e8:8e:0c:92:8c:64:b2:64:f3:54:56:
                    2f:76:a8:c5:cf:17:9e:0f:57:14:2c:48:d7:f1:26:
                    28:d3:54:9a:29:20:58:ec:aa:28:98:8a:91:62:c6:
                    ae:a1:76:72:73:c2:a7:93:c5:07:75:0e:c8:f3:d4:
                    e9:ce:aa:c1:48:ac:8d:20:29:3d:c5:02:82:f6:bd:
                    98:04:c2:a5:77:b0:71:e9:1f:d8:da:68:3f:89:ab:
                    51:e2:05:ac:9c:f7:a7:b2:5f:ac:81:2b:dc:64:43:
                    ae:21:0a:9c:d3:df:ee:fd:6a:57:50:e3:23:72:4e:
                    f6:8b:82:33:66:9f:ad:77:c1:9e:94:f8:58:77:49:
                    de:0f:a7:1a:b3:02:d9:49:13:14:ea:f3:c2:8c:26:
                    e7:b8:4a:91:e1:86:5d:86:59:3a:64:94:ce:52:43:
                    aa:ae:33:66:b6:43:a9:bd:31:fb:d7:71:52:7b:68:
                    bd:d0:6d:fb:7f:3b:48:97:af:5d:58:1b:3d:bc:13:
                    54:9e:bb:89:b2:4b:9a:97:bc:8c:91:e1:3c:c3:3a:
                    b9:aa:ae:e6:3a:1b:e4:04:d8:bb:99:9e:e1:11:50:
                    a0:d9:1a:b8:98:3c:2e:8d:7c:34:80:66:73:eb:4a:
                    fe:63:00:2b:eb:0b:df:f5:9d:a6:64:23:cd:08:ba:
                    e3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:76:20:A9:A0:88:C2:54:CE:1D:DB:33:6C:7F:61:B0:9C:17:EF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef19ef24-8678-338e-89e4-5d335347c4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:d5:77:1f:ee:f6:0e:5c:1c:cc:68:7a:27:f8:46:bc:9d:
         b6:79:af:37:83:61:30:e4:96:b4:16:4a:2e:b9:93:57:2d:9d:
         76:b0:8e:a7:5c:9e:4d:c9:db:7d:a6:14:ef:5d:f8:dc:55:1d:
         ce:d8:ef:db:4d:31:67:1f:05:a9:b6:aa:76:f7:96:46:18:c5:
         a8:b1:cc:c4:68:4f:2d:4f:16:fc:59:89:c1:34:cd:3f:33:9e:
         c8:fb:f8:d8:50:fd:cc:d6:22:2d:b3:ee:06:c5:94:10:ba:aa:
         8d:ca:4d:58:be:ee:78:00:3b:44:4e:64:d9:e2:dd:e9:0e:36:
         a2:78:f9:b2:a0:2c:71:c6:09:e1:d0:39:db:8f:aa:88:f8:91:
         a5:41:54:b9:ba:d1:d0:73:a3:9d:0a:8a:ab:72:8e:16:d6:b4:
         a7:53:2b:d6:69:b2:cc:f1:31:f6:35:f1:f1:97:14:ff:77:bb:
         49:7c:4e:dc:2f:f4:01:f0:3f:a3:9b:3a:2e:6d:ab:b4:62:c1:
         a8:12:a9:39:1d:57:82:9f:24:2d:f9:f6:a5:31:9d:d8:36:3a:
         fa:b7:42:3b:1c:02:cd:6a:17:44:d7:69:ee:72:58:c0:88:75:
         d4:6f:73:57:bd:c7:68:d3:3b:8e:26:ee:35:31:78:e9:63:b1:
         20:b6:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:15 2024 by rpki-client on console-ams.rpki-client.org