Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa
File:                     fa809409-0782-3bc7-912c-a72823c91156.roa (raw, json)
Hash identifier:          1c+XzRKfq4bOvTknwebE0d4mjnmWnuQnVB6TliYKa3M=
Subject key identifier:   9C:AC:AD:FB:F7:6E:9D:BA:C6:E2:62:4C:F6:06:5B:06:B7:64:81:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847B3CC14F61BB52150B9CA1C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     40306
IP address blocks:        99.196.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:14:f6:1b:b5:21:50:b9:ca:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=1452327b-a8de-4b0f-813b-770417663823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:51:d0:ae:e0:50:3d:a1:d0:27:83:64:26:
                    a9:f6:d7:94:13:42:81:20:43:f5:fd:51:93:bc:03:
                    f3:14:b3:c0:3d:ed:00:08:ad:0e:f5:3a:4e:fa:31:
                    98:d2:79:e5:24:c6:f5:28:3a:bd:67:ec:e4:16:47:
                    d6:b2:4a:9b:a0:b2:fa:03:f8:9a:d3:24:b6:ac:49:
                    93:26:ba:3d:07:b0:c4:be:6c:51:ce:30:a3:41:21:
                    9d:37:3e:e6:87:cb:e1:56:04:0f:ea:17:cd:31:0e:
                    ae:ed:dd:a5:69:e7:f6:38:3e:0e:e6:b7:4c:01:07:
                    62:5f:08:91:85:4a:b8:27:62:b1:36:41:43:86:19:
                    55:7e:94:33:2e:0b:10:e2:b8:9f:d7:6e:d7:c1:5b:
                    e9:54:ca:87:ac:9d:13:a6:ec:73:b9:92:ac:e5:b6:
                    9a:0d:1c:62:2a:f6:ca:b7:69:8f:a0:39:a8:54:08:
                    24:ed:35:a2:cf:b2:aa:a7:b7:9e:24:ca:50:57:92:
                    8a:2a:67:d2:3b:8d:d4:58:73:10:f8:25:4d:17:91:
                    04:a8:aa:5f:54:70:f4:4c:21:0d:be:4d:5c:30:14:
                    2a:99:ef:30:ce:8f:aa:05:e5:b8:b3:d6:a6:94:6e:
                    57:1e:16:60:bd:9d:af:b1:6f:cd:d9:db:39:cf:42:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:AD:FB:F7:6E:9D:BA:C6:E2:62:4C:F6:06:5B:06:B7:64:81:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:66:ec:5f:f5:2a:2a:c5:e4:38:18:1a:47:c0:47:05:5b:08:
         e8:a4:27:6b:30:63:d3:24:94:39:dd:ab:79:56:dc:be:08:25:
         4b:88:df:62:86:a9:ca:6c:97:32:8b:86:97:c7:4d:46:bb:b7:
         18:a6:0b:3d:ed:dc:a6:7a:41:0c:d9:10:ba:4c:6d:7a:f4:f5:
         3f:da:b4:2e:82:05:c2:b2:01:55:14:24:24:8d:4a:8e:cf:0c:
         84:9d:bd:e8:08:f6:27:ad:80:22:f1:d1:6b:0f:62:af:1f:1b:
         94:a8:69:63:96:88:9a:a0:c3:76:99:98:53:4b:e3:57:c4:cf:
         a7:87:0f:d2:db:5b:c8:ba:1b:4d:6d:f7:5c:af:9d:cf:9c:ed:
         d6:2d:2e:f9:47:2d:d6:e2:53:28:ae:31:f2:ef:6f:9b:66:09:
         24:21:97:fb:0e:1d:4d:4f:da:fa:40:6e:fd:98:ff:c1:47:2e:
         ff:fa:91:bd:62:fa:e8:12:09:27:93:42:19:a9:aa:4b:00:10:
         15:84:39:b0:2d:e6:48:79:96:e7:55:81:b4:57:ee:6c:0e:cb:
         fc:ee:b1:7f:68:5f:58:63:d7:99:0c:e3:de:c5:f5:76:af:4a:
         22:e3:3c:b7:be:15:ac:de:30:65:e0:28:e3:6b:36:81:9a:4f:
         c2:0b:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:18:32 2024 by rpki-client on console-fra.rpki-client.org