Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff309459-c434-3e8e-881b-083ef3c22705.roa
File:                     ff309459-c434-3e8e-881b-083ef3c22705.roa (raw, json)
Hash identifier:          M8mxTFLVeXdrmwyhjBEWSehOEPpI/fzE6rSyYveLOUQ=
Subject key identifier:   03:64:AB:C0:C0:32:1B:56:E7:8F:C4:B1:71:DD:A3:57:49:8D:F1:66
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DB0BA92E8C23B71CB6400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff309459-c434-3e8e-881b-083ef3c22705.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        99.196.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:b0:ba:92:e8:c2:3b:71:cb:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=95e2f1f5-4e73-479d-82c1-6a696bc1311d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:3c:e0:80:83:87:0f:d5:37:bd:a2:55:f3:
                    07:a3:f9:96:79:73:c2:ae:ce:96:e3:4d:c2:6a:dc:
                    26:1b:0a:35:6f:68:ea:1c:30:3f:73:c0:39:07:e6:
                    01:8c:c6:2e:3c:16:f5:64:96:dc:a7:50:bf:fd:4c:
                    60:b5:d6:22:fe:98:bb:31:00:d9:25:eb:3e:a8:52:
                    ba:8f:c5:26:fa:38:c6:da:ba:9c:f7:3f:0d:27:d0:
                    fb:a3:e9:a2:cc:1d:be:e5:ad:cd:32:a0:52:4d:ed:
                    09:e5:d9:c4:72:5e:8c:af:33:3c:79:22:85:b3:4e:
                    74:89:07:61:e0:4e:ca:8d:f7:28:50:31:89:0e:09:
                    8e:22:c2:45:b4:85:d0:41:1f:bf:8f:3f:ea:da:88:
                    34:a7:90:a3:ed:ee:49:03:5d:7e:e4:d3:3b:b4:7c:
                    e8:76:c4:03:11:66:40:b6:b9:01:06:4f:81:0c:20:
                    75:ce:a9:73:b6:41:7b:ea:c7:46:2f:18:eb:31:7d:
                    49:e7:c8:ac:6e:a9:ac:7e:0b:90:86:65:eb:00:09:
                    e3:0d:89:1c:1f:74:60:6e:cd:84:8f:4c:a3:d1:80:
                    c2:b7:81:75:b5:ed:9d:4b:28:8b:af:d7:73:22:14:
                    db:92:c2:de:14:58:3f:8d:12:48:25:91:44:18:2d:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:64:AB:C0:C0:32:1B:56:E7:8F:C4:B1:71:DD:A3:57:49:8D:F1:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff309459-c434-3e8e-881b-083ef3c22705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:89:b6:8e:cb:43:31:45:d3:64:a4:fb:db:e5:ee:5f:1d:
         7f:3f:1a:92:d1:3c:59:41:fc:6f:c2:17:48:7a:5a:7e:18:d5:
         f8:67:d3:24:30:db:bf:95:c9:2e:70:f4:cb:67:e9:6f:31:e7:
         3b:0c:14:5f:c4:fe:29:60:73:85:2e:ae:d9:e9:10:77:3b:a9:
         2f:50:7c:b2:57:41:ae:c8:91:af:3b:b5:49:c1:f8:34:23:d4:
         d9:27:b8:c0:01:de:d7:f9:50:60:b1:a2:7d:77:1c:67:d4:d1:
         df:3e:eb:39:89:1a:c8:d8:77:aa:40:8f:04:03:c9:71:d7:26:
         e2:67:73:2a:08:43:f7:8e:0e:58:16:d2:39:0e:4f:94:a8:a6:
         93:8f:bf:ec:07:34:a7:c8:7d:e1:4c:fd:96:33:f3:b9:f7:84:
         97:9b:31:75:19:f4:5f:1f:05:b7:54:69:e4:b3:c1:49:23:fe:
         fc:30:77:ce:97:26:95:17:92:66:35:c4:73:12:f8:ab:02:a1:
         51:8a:ee:40:ac:d5:07:94:5f:05:4e:c0:7c:12:a9:d5:32:91:
         00:da:7e:1d:4d:32:76:0f:79:fd:8f:c7:c5:32:20:ca:5c:e6:
         6d:9f:4a:3d:ef:47:a8:89:59:b4:d9:67:45:10:d5:af:1e:58:
         b4:58:18:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:54 2024 by rpki-client on console-ams.rpki-client.org