Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa
File:                     f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa (raw, json)
Hash identifier:          Ez3oxyU99tVRQGVoU8Fzymp1h1dAMIdQSKhBOHoWBlA=
Subject key identifier:   FD:67:11:AF:2B:A4:93:28:BF:AD:A4:D3:B0:49:7E:B6:E6:CD:5F:74
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F432858454F02BD7E9EB1A814465F9520
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     7155
IP address blocks:        99.198.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:bd:7e:9e:b1:a8:14:46:5f:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=10b41f0d-b222-40ad-9208-15dd3408af84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bf:d9:2f:01:08:a0:49:65:13:fc:c0:16:27:
                    f4:a0:33:83:04:16:0a:2f:f4:e3:07:d3:7c:75:a2:
                    83:d9:dc:08:a2:39:f5:37:9f:f4:6f:d7:99:34:2c:
                    6e:db:a1:5a:4c:e8:0c:0e:99:dc:95:ef:e5:7f:53:
                    a7:91:15:45:c8:ac:c9:ea:d4:47:35:d8:48:14:00:
                    29:4d:8f:0b:c0:4a:e8:51:ea:bd:de:39:7d:2f:3d:
                    67:66:d1:61:44:40:b2:66:91:c6:80:46:d7:d7:48:
                    f7:ad:9c:fe:fc:47:c1:fc:3a:d7:91:bb:b2:3f:0d:
                    62:c4:16:85:96:15:2b:54:5e:59:b7:59:b1:33:dc:
                    dc:19:5a:94:21:9f:fa:5b:6f:d1:be:d8:cb:ca:91:
                    65:2e:82:b6:51:02:21:91:9d:75:df:0f:9d:de:98:
                    bf:5d:e5:fe:0f:85:13:23:e7:e7:24:ab:41:5a:bb:
                    07:a7:d9:87:c9:e7:27:9d:be:1c:68:3e:0e:8a:55:
                    6a:6a:30:1e:0b:67:41:da:ea:fd:72:ff:6e:fe:64:
                    31:27:12:0f:65:d6:27:4e:cf:5d:c0:24:03:1f:08:
                    d7:87:cb:3f:ae:42:36:a2:2a:ec:2d:88:26:09:94:
                    26:b8:99:dc:b8:0a:71:6b:4c:01:36:f8:15:ab:2b:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:67:11:AF:2B:A4:93:28:BF:AD:A4:D3:B0:49:7E:B6:E6:CD:5F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:e4:2d:ae:e4:27:26:9b:2f:c8:9e:93:ee:50:60:89:2b:
         e9:73:45:11:a8:3e:b7:c4:41:d4:e0:d1:4b:05:38:4b:10:4f:
         6b:66:c2:b4:9e:e4:21:61:2b:5f:7f:4a:a5:75:4d:ca:5b:2c:
         71:a9:63:8a:fc:9b:85:d0:9e:ce:a3:16:ad:99:a8:fd:c3:d5:
         a8:cc:2b:7a:d0:f9:db:7f:15:10:15:1a:d9:5f:06:5b:e1:4d:
         98:35:c8:0c:44:91:cc:74:a4:3d:d6:0b:9b:fe:69:16:81:1d:
         84:f0:25:4e:2a:08:6c:a0:b2:27:d3:e2:42:0c:54:ef:df:cb:
         a9:24:a5:25:f9:e2:11:1d:78:26:fe:cc:3f:3c:72:f5:c9:ef:
         1d:38:15:0e:05:6a:91:3a:1a:6a:d8:e0:d8:8e:0a:ef:d1:5e:
         39:e5:94:42:97:9a:ff:54:62:c3:d1:ad:e1:26:f5:40:8a:45:
         e9:cb:e6:63:6f:c7:99:fe:e8:e0:50:4d:9d:4a:6a:ed:dc:05:
         0c:40:f6:c3:df:de:64:d8:dd:0c:6e:ff:8e:b5:3e:a0:72:b0:
         d1:08:e8:6e:41:e1:86:fb:98:a4:1c:b4:35:49:b8:4a:a4:17:
         ab:c0:00:c3:d2:d9:93:1f:3e:93:c4:95:ed:15:b8:da:9d:b9:
         c0:96:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org