Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/230e8cfb-a8d9-36cc-8b03-7aa65dd6aeb1.roa
File:                     230e8cfb-a8d9-36cc-8b03-7aa65dd6aeb1.roa (raw, json)
Hash identifier:          Jqww2xeR6grAvcH95cgKgO8uzm/oB9qllCMWfPcmyho=
Subject key identifier:   1E:5C:39:7C:EA:6E:D3:E2:1C:E3:7F:46:79:65:55:F9:4F:8D:39:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581CBE231763FB583FCD780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/230e8cfb-a8d9-36cc-8b03-7aa65dd6aeb1.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.198.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:cb:e2:31:76:3f:b5:83:fc:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=1fe97789-7990-42d3-99ac-9857ddedf3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:f7:01:8c:12:5c:dd:b3:cf:b8:b6:54:dc:
                    2b:1a:35:51:8e:c4:30:4c:4b:a6:18:76:3e:11:21:
                    6c:a5:92:f6:06:c5:11:76:c3:76:f5:7c:35:f5:1d:
                    4e:6e:7c:61:6d:6c:7e:38:d5:23:9b:7b:ee:42:d8:
                    bc:ae:64:e5:23:4d:50:08:13:ce:d2:d1:a3:02:d6:
                    27:92:07:04:24:8c:56:3a:3a:df:c1:2d:e5:11:85:
                    57:d6:b0:02:2f:2b:15:83:19:36:b0:c9:c3:30:8d:
                    40:1c:c9:30:13:08:7e:06:50:6e:f6:19:40:65:c3:
                    b7:cc:a3:13:d6:d4:d6:e9:40:28:c4:7c:2d:69:89:
                    76:7f:94:9d:bd:2f:1e:01:67:c0:02:9a:6d:38:3a:
                    63:14:ae:62:d5:9d:94:de:1d:bd:a8:60:2e:0f:7f:
                    b1:27:ae:8f:21:f2:e4:fd:92:89:28:4c:70:47:a1:
                    8a:90:0b:c7:2a:c4:ce:aa:0e:8a:15:99:36:81:39:
                    33:97:b0:c3:af:79:cd:fd:74:e5:4a:6c:17:59:33:
                    95:cd:be:ce:42:94:34:ec:1b:fa:e2:93:33:cb:6e:
                    39:12:ce:66:fa:6f:4f:2c:ca:23:8d:63:c9:e6:22:
                    72:cb:22:c2:48:45:b3:20:49:90:0d:eb:34:07:8f:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5C:39:7C:EA:6E:D3:E2:1C:E3:7F:46:79:65:55:F9:4F:8D:39:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/230e8cfb-a8d9-36cc-8b03-7aa65dd6aeb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ff:9d:ba:25:6f:db:ff:7b:6c:1d:1c:f2:5a:2a:7b:af:6d:
         66:61:80:59:b5:53:71:3d:21:5b:b5:09:61:10:42:4b:6f:fa:
         1d:06:43:8e:27:10:12:14:bd:ee:d1:0c:3e:e2:e3:2d:e2:8a:
         95:c5:aa:ea:ea:39:5d:28:76:44:47:c1:fe:8e:93:55:76:81:
         82:34:c6:ad:73:bf:64:af:dc:7d:71:32:9b:48:57:96:69:90:
         ac:9b:93:56:26:3e:3c:aa:67:39:ec:ac:4d:fa:9f:21:ed:f6:
         fc:cc:4a:64:c7:02:a7:29:69:54:0c:f7:b8:7b:b8:3e:76:ed:
         1b:0a:79:ab:db:ad:7e:71:70:b9:1d:5a:a8:a7:e9:eb:40:fd:
         90:b2:df:d4:8f:97:61:7c:54:21:1c:f7:be:07:6f:b4:e0:1d:
         fe:fd:f5:bd:70:93:a9:06:46:ea:33:9c:85:07:a7:d1:cd:7d:
         59:d9:49:93:ef:e7:10:79:2a:39:20:ef:90:8a:87:af:eb:a6:
         ad:f4:53:ed:e5:ad:de:72:1c:21:c0:ae:25:2d:4d:e8:f7:28:
         c0:01:cc:13:b5:51:e7:c2:0e:17:1b:a3:f8:b5:f9:9f:af:73:
         a4:ad:1e:b2:76:68:aa:df:3d:c2:b1:da:43:f1:55:12:df:45:
         50:cf:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:06 2025 by rpki-client