Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe9e6757-570e-363b-850d-4698ed7a34d9.roa
File:                     fe9e6757-570e-363b-850d-4698ed7a34d9.roa (raw, json)
Hash identifier:          Taz0XcSq/d7H5caE37ldBo6Q+t5Ktd7ctbUPHyHbbsE=
Subject key identifier:   A3:CD:96:FF:88:64:49:63:5D:CD:F9:6E:E4:B1:CA:84:7D:7F:F6:C3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A6611C5E8593494413B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe9e6757-570e-363b-850d-4698ed7a34d9.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:66:11:c5:e8:59:34:94:41:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=dfefa0ee-afb9-40bb-b588-d51410e5ad0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:b7:b7:89:30:33:7a:40:aa:0f:93:5b:2e:
                    de:6b:da:9e:2b:7d:2f:69:77:3e:e4:c4:35:62:53:
                    26:4c:ae:0b:f9:e5:d3:05:76:a9:18:ce:34:2b:ee:
                    15:14:8e:67:e3:a5:6e:16:3a:f7:e3:84:ae:8b:af:
                    86:00:81:02:fc:d9:52:ce:07:75:d8:b7:78:45:83:
                    3f:f3:82:36:18:6f:d2:f8:f9:04:0a:2a:3b:59:b8:
                    e0:e1:3a:78:72:b5:58:4a:7e:8e:e6:a1:74:9c:44:
                    cf:9b:c3:a6:a0:f8:a0:0e:72:64:29:93:d9:fb:69:
                    b4:98:00:87:8c:e6:f0:d8:4d:30:90:ca:fd:de:ba:
                    c8:d9:ed:f1:a9:78:38:28:6f:38:c0:dc:71:59:93:
                    58:c9:87:ef:18:a7:b4:df:dc:6d:ad:6e:ff:bd:51:
                    e7:99:72:2d:ed:38:ac:1b:e8:92:bd:63:bc:dc:6b:
                    56:d7:ac:e4:85:e2:ba:40:16:8e:2b:3f:b5:48:bd:
                    7f:8a:dd:b6:0b:b6:ae:d0:c8:76:4f:a4:52:79:93:
                    be:31:2a:5b:c4:ae:71:74:31:85:d9:33:d8:df:4c:
                    97:80:22:41:ed:79:96:4e:90:f7:a8:2b:ae:84:ac:
                    5e:5b:bf:23:55:ee:de:84:fe:7b:66:47:65:cb:29:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CD:96:FF:88:64:49:63:5D:CD:F9:6E:E4:B1:CA:84:7D:7F:F6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe9e6757-570e-363b-850d-4698ed7a34d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:06:75:e0:ec:3b:cb:30:24:42:1e:5c:52:73:08:0a:16:1e:
         03:c2:f7:66:0a:8a:92:7b:59:34:d7:49:08:59:c6:72:ec:b3:
         56:fb:bc:d1:54:66:74:d2:53:4f:8f:e0:da:97:4a:bf:b1:59:
         e9:9a:88:b5:7e:b7:2a:5e:ca:9d:ee:b0:35:6c:11:1d:01:bc:
         17:48:0b:f4:a6:ae:36:7c:1f:87:e5:33:97:98:fe:17:7c:eb:
         4f:47:13:0d:88:d2:db:f7:79:25:3a:b5:42:6c:f7:04:ba:58:
         96:90:3a:39:c1:c2:01:e8:46:a7:1b:cd:30:6e:82:bf:48:21:
         26:14:51:68:1c:93:b6:8f:64:1a:d6:48:f6:e3:80:b2:ca:4c:
         e5:e9:e1:57:8a:28:1e:9e:6d:0c:52:20:47:82:cb:82:94:20:
         4f:17:8b:7d:a9:8e:a4:5d:76:4f:43:52:59:a0:66:7e:78:77:
         ad:d3:eb:5a:a5:f9:df:d9:4b:c6:0f:bd:81:d0:11:32:13:b6:
         7b:ab:47:52:f2:c6:f4:d2:d8:60:3c:3c:b5:fb:87:ec:f6:b2:
         ca:db:64:12:24:cf:76:13:c3:bb:c8:69:6e:31:b2:b9:a7:73:
         14:70:cd:5e:06:cd:04:e7:6f:e2:42:44:7b:7c:ab:3f:69:aa:
         63:dc:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:21 2024 by rpki-client on console-ams.rpki-client.org