Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd33e32b-7019-3a96-a2a1-595455ca08bd.roa
File:                     fd33e32b-7019-3a96-a2a1-595455ca08bd.roa (raw, json)
Hash identifier:          cUsK1ac2rH1yfu7CKwTaXp5UHyYv5FpjACEahVZ9bRU=
Subject key identifier:   19:F1:27:79:EB:E8:52:3B:11:22:77:66:75:59:EA:89:90:C4:02:96
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A62F2235B33AA3033DC28
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd33e32b-7019-3a96-a2a1-595455ca08bd.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:62:f2:23:5b:33:aa:30:33:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e0c857d9-adab-427f-80e8-66c67feb4d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:78:ac:f1:c2:3c:2f:87:57:90:b9:c9:f1:
                    03:13:73:09:75:1a:dc:8c:02:29:6a:f6:ae:ab:d2:
                    bb:74:7e:47:1c:5b:99:3b:0d:a0:00:9a:de:4f:f3:
                    a5:f7:8b:83:25:81:4c:87:eb:66:b9:c9:43:e4:d6:
                    3f:e6:dc:a5:cb:3e:21:30:c5:46:9e:99:58:2d:9a:
                    47:78:25:61:21:bf:7b:98:0d:b9:92:ac:8b:53:d4:
                    e4:21:66:8c:ba:25:f2:60:42:1f:a8:ee:d3:79:8e:
                    55:59:43:49:30:d3:06:4c:93:4e:db:ac:d9:3b:a9:
                    3a:12:2d:81:59:cb:01:9b:7c:0b:67:14:6e:0c:c0:
                    ed:39:c0:66:bd:e7:e3:d5:9a:6c:fe:e0:e6:ee:53:
                    b5:fc:27:ff:e6:db:3a:cf:9f:a7:28:89:84:a1:b4:
                    f7:44:27:1b:38:d0:08:4d:47:c5:e7:6f:d0:5d:5b:
                    b5:9b:50:ec:cd:30:11:87:70:50:a0:c9:a3:97:ff:
                    eb:c0:4c:74:32:3b:7e:d1:79:7e:44:e0:dd:2d:60:
                    f6:6d:e7:f2:48:8f:78:7f:e1:c7:7e:ce:3f:66:0a:
                    45:f6:83:9b:2c:bb:51:9b:07:24:0b:e5:eb:0c:69:
                    30:2c:8c:92:d7:0e:ad:04:d0:62:42:cd:3d:28:cd:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F1:27:79:EB:E8:52:3B:11:22:77:66:75:59:EA:89:90:C4:02:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd33e32b-7019-3a96-a2a1-595455ca08bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3d:84:64:97:46:70:be:51:d9:c4:69:e4:94:a2:de:fb:68:
         ad:96:e5:6c:be:85:bf:dd:56:fb:2b:8f:b5:1b:58:1e:86:59:
         0d:52:7a:d5:c9:24:6f:7d:44:4f:eb:75:24:8a:c2:ac:53:94:
         4c:59:ca:0f:b8:dc:74:39:a4:27:af:f8:06:8d:65:ee:22:c6:
         85:95:5f:35:3b:06:a4:e2:e9:b6:e5:ba:4d:68:aa:30:13:bd:
         97:c3:6b:96:c9:66:86:ff:fe:b6:02:23:38:fd:eb:ba:c5:ec:
         40:2e:ba:b8:34:cf:b7:e7:b6:32:d2:a2:31:23:a4:c9:8a:6b:
         f6:28:cf:2b:55:8b:f9:b6:79:55:35:87:f1:fb:6b:9d:63:17:
         15:da:45:ef:42:e7:96:d6:dd:5d:cf:ff:73:c1:c2:3c:a8:c7:
         94:6d:f0:c6:17:07:3b:8d:de:1c:82:57:ff:50:a0:40:2a:6c:
         91:9d:23:90:50:3e:95:a2:fd:ba:54:69:d7:9e:12:58:18:fd:
         44:bd:0a:11:73:9b:ee:76:b4:48:61:92:d1:e4:fd:ab:8d:4b:
         d9:8d:c6:9a:86:53:4e:dc:7d:08:91:8d:c7:d0:af:61:26:6a:
         f6:f4:3e:1e:8d:96:56:43:59:92:ef:fe:30:0b:53:22:aa:8a:
         e2:78:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:47 2024 by rpki-client on console-fra.rpki-client.org