Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17699418-fd5e-3953-b45f-ced88c522fa6.roa
File:                     17699418-fd5e-3953-b45f-ced88c522fa6.roa (raw, json)
Hash identifier:          Ut+GNn926oRct3yO858DBqDAjjqUbyVh3VCA4gQUCPg=
Subject key identifier:   71:E2:54:FF:D7:18:EA:54:82:88:54:B3:3B:99:31:F5:8C:01:FE:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C43A774DFCD6E03347C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17699418-fd5e-3953-b45f-ced88c522fa6.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c4:3a:77:4d:fc:d6:e0:33:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=4dda5de1-1f70-4e4c-9d3a-5506fe328c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:8e:f1:db:ed:79:76:ee:e3:8b:63:57:58:
                    b4:ad:b4:15:57:9c:74:cf:ee:6d:d2:c2:48:5d:89:
                    67:34:d7:dd:36:03:b9:40:25:3d:8b:47:ac:94:74:
                    47:12:73:ea:12:70:b3:75:50:05:b9:c6:90:e9:2b:
                    db:ae:58:5b:14:17:ab:e0:dc:96:75:71:82:41:43:
                    31:e1:0c:c1:6d:14:ad:2d:9c:71:e8:b9:18:e0:7c:
                    66:2f:92:74:a0:4f:f8:3c:78:7a:c8:d2:25:56:ba:
                    54:17:3d:08:97:b1:0d:51:14:3e:7a:b3:b8:d8:26:
                    54:f7:14:77:81:ea:ca:e9:5a:c1:f9:3b:28:95:f9:
                    5d:76:ec:97:db:7a:52:18:33:ba:6b:eb:c9:d5:7e:
                    b5:0b:e0:39:ca:70:c2:7c:89:d0:1f:f6:51:30:cc:
                    0f:ae:c5:35:81:7e:3b:c0:7c:37:64:c2:56:7b:ab:
                    bc:a6:4f:d0:be:53:ff:47:c0:ba:e4:81:8e:c9:b0:
                    68:4c:1b:3d:8b:2f:06:bb:ae:02:d3:62:00:da:6e:
                    c1:5d:6c:f8:21:ac:25:af:01:bc:bc:c3:01:a3:c7:
                    be:15:af:f9:5c:4f:91:47:d0:91:83:02:34:8c:b4:
                    50:ae:ce:8e:57:b9:28:bd:d7:96:a0:3f:ff:b0:4d:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:54:FF:D7:18:EA:54:82:88:54:B3:3B:99:31:F5:8C:01:FE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17699418-fd5e-3953-b45f-ced88c522fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:65:22:05:aa:0d:ed:fe:5b:ca:59:35:0d:1e:0e:04:7f:98:
         08:39:e7:12:a9:71:a7:7c:b8:00:83:0b:88:71:86:2a:a2:7c:
         90:40:84:65:6b:2d:76:70:9c:63:6c:27:04:0e:27:5c:48:dd:
         ad:8b:67:e1:22:59:72:4f:e4:e5:a4:b5:27:d1:51:93:46:c2:
         47:27:7f:cc:3c:8c:50:a6:5e:d5:76:c4:9b:28:7b:53:7c:70:
         03:ed:84:21:26:14:3c:26:98:7c:00:ce:69:cb:e3:68:ed:01:
         63:98:45:7a:fe:86:97:40:48:81:85:61:0e:ee:1e:12:52:53:
         5a:dd:95:c9:99:0e:9d:4b:34:7f:02:8d:43:76:e7:30:88:ee:
         99:32:be:ef:78:53:14:91:d0:23:15:2d:a2:42:09:b1:d2:55:
         71:70:d9:97:30:5c:ed:ca:84:7e:df:42:61:08:ec:79:19:de:
         cc:af:b4:66:15:fa:3d:f4:de:83:8c:6d:d5:35:dd:ca:43:05:
         01:b1:c5:34:99:f6:fc:82:2e:cd:b6:a9:1a:25:85:1d:54:35:
         7f:ef:52:c8:b2:6e:85:f6:8f:da:f0:62:3a:0d:0d:3d:af:b6:
         fb:4b:f2:94:c2:73:aa:a8:ef:34:b2:f7:a4:cf:51:93:8b:5e:
         d2:f6:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:31 2025 by rpki-client