Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173dec05-25b0-3c8c-99be-ceb9975978f7.roa
File:                     173dec05-25b0-3c8c-99be-ceb9975978f7.roa (raw, json)
Hash identifier:          7xxCP/BVxGwfxWGNML1JsVw2LYxyA5h6h/Subrvgc/I=
Subject key identifier:   A3:50:79:08:17:11:B4:CE:AD:13:1E:72:65:AC:04:2A:3B:15:96:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58137F8FADCF2F1B0FB1500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173dec05-25b0-3c8c-99be-ceb9975978f7.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:37:f8:fa:dc:f2:f1:b0:fb:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c3cc003f-4281-4834-806a-9555fb961414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:03:ba:eb:3b:61:86:c7:a5:d2:21:53:c9:
                    f3:8b:13:fa:cf:04:e3:db:4f:95:8a:90:0b:fc:b1:
                    dc:39:b2:e7:f0:74:2c:7c:0c:07:92:ae:bd:27:f5:
                    5d:7d:65:09:81:b5:0a:18:1d:c9:50:b8:6f:a1:d3:
                    9f:71:35:91:7a:0b:82:20:ed:a6:98:3a:9c:4e:23:
                    d3:9c:2f:a2:b4:b7:34:00:e6:49:1e:97:2e:32:3b:
                    5c:cb:dc:dc:6e:54:8b:9b:43:2d:54:95:e2:ac:dc:
                    44:d1:db:4e:d4:ed:21:27:45:6a:f5:66:81:6e:b5:
                    75:9d:59:bc:d2:1d:f2:3c:83:81:6b:ca:6e:3c:90:
                    2a:06:44:d9:1a:5a:0d:de:14:35:aa:ec:80:ed:cc:
                    3c:d6:fc:dc:ab:4d:08:e5:93:22:a5:49:71:c4:3e:
                    63:cc:df:82:3b:4a:de:11:cb:65:be:c3:6a:62:aa:
                    91:2b:13:ba:58:07:d1:84:1f:86:5a:7e:db:1f:3d:
                    3b:fe:2a:d6:62:8f:3b:3c:08:ad:5b:48:07:7b:95:
                    7e:47:98:b2:bb:a2:58:4d:69:ed:d8:c2:8c:25:44:
                    cb:fb:2c:05:3a:63:08:6c:aa:d7:37:3e:40:e4:02:
                    b8:9d:bf:e5:9b:ef:26:1d:32:fd:b2:d4:d6:03:17:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:50:79:08:17:11:B4:CE:AD:13:1E:72:65:AC:04:2A:3B:15:96:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/173dec05-25b0-3c8c-99be-ceb9975978f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:e3:66:7f:33:9e:3c:24:bb:c8:54:7b:89:04:49:4b:91:
         de:ac:0e:59:07:09:0a:4f:e1:5b:f2:b6:52:d3:8d:af:45:3d:
         6f:cb:63:7e:1a:af:8a:8d:df:71:1d:c9:04:3f:4c:ef:76:8e:
         d2:b9:74:6c:08:01:34:ba:92:48:ec:9e:99:70:2f:22:98:64:
         a2:72:7d:69:90:a0:ce:68:21:be:0d:3f:0c:51:94:9e:2c:8f:
         3a:21:5a:88:67:84:32:a5:b7:37:98:b0:e3:0a:e9:a3:dd:66:
         e8:45:7a:43:c2:51:44:70:41:20:61:4b:60:97:c1:b9:e3:6a:
         d1:a1:5c:f1:3d:5b:d4:31:c6:7c:6c:27:9d:5e:88:89:d9:65:
         58:15:4e:7a:ef:85:70:ad:34:44:3b:22:57:5e:88:eb:59:6a:
         ef:e8:89:28:c8:e5:60:ab:a0:bd:4c:d9:13:bc:c6:bb:5d:c4:
         59:84:ba:7c:42:41:f9:a6:53:a4:74:54:d2:12:df:99:e0:92:
         40:e2:cd:03:ef:ab:dd:c5:e4:1a:43:23:9e:25:58:22:69:af:
         1a:e7:e5:1e:97:57:d0:cb:d2:09:60:23:8c:e0:a7:ab:4e:da:
         c2:af:8d:a7:56:7d:98:0e:a0:48:18:a3:23:8a:ed:54:a4:9b:
         a5:40:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:30 2025 by rpki-client