Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa
File:                     ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa (raw, json)
Hash identifier:          lL6w98a4CrbN/TDd9UoA80q2bwFdQ67Mghqp3tkxCUM=
Subject key identifier:   E9:14:04:48:74:91:91:07:18:03:97:F8:D8:4E:1A:01:B6:0B:1D:4D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858495529534A7C54D0DC51C15100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     270764
IP address blocks:        198.89.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:53:4a:7c:54:d0:dc:51:c1:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=7c4e9eee-2ee6-47a3-ba2b-6424be9199f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:4b:ef:51:18:be:31:a3:6c:dd:e9:e5:92:
                    b9:f7:16:32:b2:8b:d2:44:b3:0b:fb:3e:8b:6e:87:
                    ac:a9:73:05:63:78:6b:b5:1b:df:c7:02:a3:9a:81:
                    8c:ea:0b:a2:4d:44:54:ad:95:bd:c2:db:f2:e4:ea:
                    45:a2:f3:1b:2f:65:2d:c6:1f:db:3d:b7:46:6c:1a:
                    4d:65:18:1b:52:c2:8e:67:bb:50:b2:bb:30:a6:43:
                    2a:1f:12:83:9c:5e:60:e1:38:90:f2:28:91:1f:2f:
                    a6:fe:85:14:28:0f:2c:ab:29:9f:e6:ec:5c:2c:1a:
                    c1:3c:ee:e6:d8:8f:9f:05:52:f0:49:79:99:0b:79:
                    11:ee:1b:a2:36:5f:b3:9d:dc:f9:ac:1f:e7:d7:f0:
                    7e:fd:37:10:40:45:25:a5:7b:79:04:f3:2e:a0:c8:
                    d1:e8:12:48:4a:ac:54:40:c1:01:c6:fb:af:53:2d:
                    e2:93:2e:e7:c5:40:ac:74:ea:da:48:af:54:87:cd:
                    e9:6d:81:00:10:fe:fe:ad:d8:9b:19:c8:2d:ed:1f:
                    b6:b7:0e:37:0e:b2:a3:8e:73:be:24:37:06:7e:f6:
                    15:59:10:61:60:e9:2a:c9:84:65:f2:1b:66:1b:ab:
                    59:65:e4:3c:c5:ce:8f:04:34:e1:1a:f2:e2:9b:21:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:04:48:74:91:91:07:18:03:97:F8:D8:4E:1A:01:B6:0B:1D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:01:52:0d:e1:32:1c:55:6a:c2:31:e2:ee:c9:16:06:4b:d4:
         e6:5b:96:79:21:a6:34:2a:7a:22:d9:91:04:49:37:7b:15:e2:
         c8:99:68:39:a5:80:9a:fc:91:e7:99:50:3f:2c:66:0c:37:2b:
         47:04:c1:89:ab:f2:d6:f0:b0:38:fd:d1:a0:90:17:7a:1f:6e:
         26:5f:28:d9:5c:87:10:fb:7a:8a:e7:ae:fc:85:6b:c6:d7:29:
         32:c4:b3:e9:5c:1c:93:64:92:cc:23:39:fa:b9:09:b8:12:73:
         62:49:e3:eb:94:60:2f:c1:55:0f:6f:91:c0:be:6b:f5:33:e6:
         b4:8a:a3:95:9b:66:70:f9:6c:99:5e:4b:8a:20:b9:d0:f7:e0:
         fc:8b:4d:e8:e8:bc:67:c2:e5:e9:fe:24:b4:3a:cc:5d:4c:5c:
         25:86:c9:b7:ae:ca:cf:db:72:9b:75:55:3a:65:77:78:40:11:
         3e:32:12:89:18:c7:05:cc:13:79:c2:83:6f:29:cf:d1:19:c4:
         16:ec:e9:37:2d:cb:72:23:e8:a9:48:63:1d:b5:b2:96:dd:84:
         ed:ba:6c:d9:93:63:77:83:7b:cc:d5:82:c4:42:15:6a:fe:0b:
         58:57:88:bf:76:b6:a8:25:9a:a5:71:d8:f2:81:6e:f9:fc:eb:
         80:c9:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:05:15 2025 by rpki-client