Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7c79ed-d65a-34ee-8689-92c45ad83c6b.roa
File:                     0a7c79ed-d65a-34ee-8689-92c45ad83c6b.roa (raw, json)
Hash identifier:          a10zFLK+VVh+AAGxaDMYEYVgMNNxasay/DepCjb/1Xk=
Subject key identifier:   DD:35:0D:53:60:BF:05:2C:FE:61:2A:F9:2D:CF:07:7F:65:3A:94:B4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F432858497279B762829F3A62140E3E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7c79ed-d65a-34ee-8689-92c45ad83c6b.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     40306
IP address blocks:        99.196.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b7:62:82:9f:3a:62:14:0e:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=242cc374-3025-41ce-8c9b-659ade3107a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c8:f1:92:9e:c5:7d:44:ea:ea:cc:b7:87:d2:
                    a0:5d:44:95:31:e8:d8:96:1c:ae:37:7a:2b:8d:94:
                    33:63:a1:8a:c5:10:68:fc:6a:7c:be:2b:05:d1:4c:
                    1a:86:fe:fe:6d:85:5f:fb:a3:b0:f5:45:00:ab:45:
                    10:ec:12:39:c1:ed:a9:50:0e:3c:d9:32:6d:09:40:
                    db:26:23:da:6b:65:41:21:1f:c5:48:99:98:27:6d:
                    72:e1:e1:8e:b6:5a:05:47:46:1b:bc:75:71:c4:36:
                    12:71:a2:8f:86:51:19:63:0c:b8:1f:3c:a2:f6:d5:
                    63:73:13:73:22:34:d4:44:94:49:90:9b:91:e2:10:
                    c1:f4:45:68:90:fb:73:46:bb:a7:e3:c9:2b:e3:7d:
                    84:06:bc:86:75:60:47:96:f5:3a:6b:eb:c9:10:18:
                    b2:20:b5:b7:b1:a1:5a:f0:05:39:c6:f3:98:a1:da:
                    f7:28:8d:59:ff:2a:5a:e2:e0:34:f1:0f:af:aa:60:
                    c0:d5:b0:23:7a:97:95:2e:c7:db:23:17:dc:3b:75:
                    c0:ec:9b:72:6c:89:81:91:4b:1d:68:f8:8d:a2:0f:
                    68:38:c0:95:27:d2:ae:2f:9c:33:84:70:1f:d3:c9:
                    da:6a:90:01:ff:38:bf:12:64:01:60:a0:ac:15:08:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:35:0D:53:60:BF:05:2C:FE:61:2A:F9:2D:CF:07:7F:65:3A:94:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7c79ed-d65a-34ee-8689-92c45ad83c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:84:00:5b:23:db:73:db:7e:fc:73:a4:dd:29:ac:54:21:
         9f:86:7e:50:c7:53:63:e3:34:8e:d0:ab:fc:3f:da:fa:16:b0:
         20:7d:8d:74:27:dc:02:b7:36:a5:6e:5c:ae:db:bb:cf:f7:d1:
         65:88:98:7d:c9:dc:57:32:00:1a:ce:b4:02:cc:51:00:5a:88:
         94:b2:35:c4:56:56:b5:e5:a2:51:03:54:14:e3:33:7c:52:e7:
         a5:e4:24:a3:8d:d0:c2:a4:09:cf:cd:2c:08:2a:a4:7c:ec:13:
         e1:49:92:09:27:11:04:f7:06:11:af:56:df:72:4f:5a:ed:61:
         69:2f:1b:2b:9a:72:9a:35:dc:6e:cc:ac:af:8b:3c:4a:d5:83:
         03:da:5f:18:90:70:7a:c8:71:60:5f:7a:43:a5:00:44:28:d3:
         3c:d9:d0:ce:aa:94:32:79:8f:39:2f:99:1b:47:5d:bb:5c:aa:
         8b:29:85:dd:3f:8a:74:61:c1:30:51:0f:1b:aa:e5:f0:31:9b:
         bd:6f:75:3a:01:c0:88:35:60:ce:ea:9b:bf:f7:68:c7:4d:ff:
         24:89:90:f8:a8:90:75:32:f5:6d:34:d8:14:cf:87:1c:0c:23:
         6f:c5:61:45:c0:f6:41:34:e4:75:0d:33:88:e9:1b:14:2e:97:
         18:a7:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:27 2025 by rpki-client