Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19d4e38f-f1a5-3e9d-b709-272250531c8a.roa
File:                     19d4e38f-f1a5-3e9d-b709-272250531c8a.roa (raw, json)
Hash identifier:          kenKu8Xc/lGCpvHOwxPPXik6f3GjPZUjgkjfN/lWrm8=
Subject key identifier:   AE:64:A3:40:D2:B5:F1:84:A8:E5:EE:0A:EA:C3:71:E4:79:A2:26:71
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581374DAA25274F119DFA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19d4e38f-f1a5-3e9d-b709-272250531c8a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:37:4d:aa:25:27:4f:11:9d:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=baf2d4ef-476c-4d43-8e97-feeb1605a240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:88:ac:1d:96:88:e5:5c:12:f2:50:ab:20:
                    fe:f0:63:86:7a:78:b6:5d:40:ce:7b:5f:43:1b:eb:
                    f0:14:d1:0c:57:6a:63:74:5a:d6:1d:98:df:0d:a7:
                    67:c2:93:32:03:fe:e8:7b:15:b9:9f:cf:68:78:b8:
                    2e:45:66:ad:29:2f:19:d9:d3:3c:1e:fa:6e:ea:ea:
                    f3:e7:4e:12:f1:c0:7d:80:d5:b0:ef:11:45:1d:87:
                    17:b7:a7:bc:2e:69:c7:8a:82:7b:f6:2d:6e:16:da:
                    2a:cf:e3:fc:72:df:6a:a5:76:46:37:cf:09:11:6f:
                    c6:02:92:bd:3e:6d:fe:23:38:79:92:8b:ef:da:be:
                    8b:e9:e0:44:1b:49:22:f2:0c:11:98:3d:bf:be:7a:
                    03:68:4d:3b:d1:f5:cb:6b:6d:e3:1b:1c:a7:9e:06:
                    b7:76:d2:c3:58:b1:3f:54:9d:c5:d9:c6:b4:38:0d:
                    d4:f5:7e:23:4d:7d:bb:74:52:db:ab:b7:6f:5b:ad:
                    21:31:e0:ab:25:4b:94:ba:09:88:29:5b:cf:66:5e:
                    da:f5:59:ce:14:cc:e3:6a:ac:a0:57:e1:ec:06:bf:
                    f4:6e:e2:67:46:35:96:6c:d6:1b:54:cf:f9:0a:85:
                    64:c5:a2:4e:0f:17:76:0d:0b:98:d3:7b:df:39:1f:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:64:A3:40:D2:B5:F1:84:A8:E5:EE:0A:EA:C3:71:E4:79:A2:26:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19d4e38f-f1a5-3e9d-b709-272250531c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:56:a3:72:1c:5b:d6:14:64:8e:e7:11:4d:dc:a2:97:2c:
         2d:e5:37:fa:5d:ef:bc:ac:4b:16:70:d6:c9:36:a2:18:32:af:
         2e:d5:97:71:8c:fd:c7:29:a4:cf:c1:84:c7:8b:60:68:7a:f3:
         7e:50:ce:26:9b:fd:6e:91:02:ec:f3:e6:da:c3:71:a0:f4:cb:
         0c:ab:b3:d2:7d:87:4d:69:a8:7d:f7:be:60:33:11:46:2d:aa:
         51:b1:aa:38:51:bf:16:3a:61:3b:75:38:29:b8:9f:62:f1:e7:
         11:c5:c0:b1:1f:24:bb:fd:0e:3e:c4:01:f5:aa:a4:0c:eb:29:
         1d:e3:54:fb:ea:db:8d:02:65:e9:49:a0:f9:54:01:a8:b5:ba:
         e4:37:fb:c8:45:9b:99:ec:e0:f9:8f:5b:d7:f6:c5:21:9e:1e:
         34:8c:32:1c:fb:c8:f2:33:40:83:ea:ea:7b:23:18:a7:a4:87:
         40:72:c3:fb:2d:d1:7a:b6:20:a3:58:0a:ce:14:30:a9:8e:d6:
         f0:ff:f9:51:09:e0:ff:65:a8:67:0f:b6:8f:e9:2e:12:9b:4d:
         ce:10:fb:21:6e:b9:95:e6:59:46:bb:45:df:29:71:c0:03:15:
         8c:5c:38:09:d7:6e:eb:11:7c:16:22:82:ec:f8:66:85:fb:f5:
         ac:d0:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:15 2025 by rpki-client