Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63262692-58d5-3e3b-83e3-a1c6fe8abf4f.roa
File:                     63262692-58d5-3e3b-83e3-a1c6fe8abf4f.roa (raw, json)
Hash identifier:          mPBkiGnCXxihZeMMYfdSr6xQYPraV2ZMHSqSmJQHKwA=
Subject key identifier:   D3:8D:17:6B:60:24:9D:AE:CF:07:2B:40:44:9F:C9:49:24:B9:34:EB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581CD3A691F5AD1D37591C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63262692-58d5-3e3b-83e3-a1c6fe8abf4f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.198.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:cd:3a:69:1f:5a:d1:d3:75:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a3fa4817-906d-48bb-93f0-f9babe3c04ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:55:be:2d:28:11:7f:e0:8c:e0:76:03:b4:
                    01:56:d0:32:92:d5:3f:94:6c:02:4e:8b:ec:e4:4e:
                    82:bb:2c:1c:bb:9a:5a:9a:f2:9b:a1:7a:fe:c2:81:
                    fd:dc:85:3b:66:e4:07:a0:7d:02:14:c0:b3:7e:a6:
                    f9:e9:99:a2:09:38:05:fc:3c:ab:41:a8:55:27:9e:
                    bc:14:ec:6a:db:d6:0a:92:66:fc:b5:09:bc:7a:c7:
                    d5:4e:f8:a2:eb:85:b3:41:cb:0d:c4:52:63:bb:51:
                    e3:ed:d0:5c:22:78:0d:f6:e5:81:b8:4e:94:d9:53:
                    36:a8:43:58:dc:ee:37:08:50:d4:c9:33:e5:a6:55:
                    49:fd:58:fe:1c:00:05:7a:dc:97:b0:d8:2e:6a:43:
                    32:98:e2:62:7b:ca:5a:19:44:1a:ee:f9:43:12:d0:
                    e6:98:f3:2b:b3:e9:8b:6a:9c:62:c8:01:3c:99:1d:
                    6a:21:9a:95:d5:0e:51:42:fd:eb:1f:52:4b:1b:f5:
                    c1:6d:d3:14:da:76:de:5e:fa:59:f4:ec:ff:a8:11:
                    55:6e:35:50:d0:7c:0f:cd:07:e8:d3:51:0e:99:bc:
                    cc:1a:a9:e1:31:42:a3:08:c4:79:e8:9b:0f:db:04:
                    c7:45:1d:59:65:f1:ec:42:be:05:d3:f5:09:7d:df:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8D:17:6B:60:24:9D:AE:CF:07:2B:40:44:9F:C9:49:24:B9:34:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63262692-58d5-3e3b-83e3-a1c6fe8abf4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:02:a8:a0:c5:46:02:c7:bd:7d:08:8e:97:21:86:62:1e:1f:
         67:05:9a:0e:01:73:15:2a:2a:41:12:4c:7d:00:85:47:14:4f:
         8d:c2:1f:88:67:b7:eb:55:25:78:d6:55:4a:7e:e0:b3:93:7f:
         08:62:12:54:13:2d:e6:1e:7f:e4:1e:44:2b:e2:33:de:78:fd:
         e8:5e:1b:a9:1e:7b:02:81:13:cd:eb:ac:0b:31:f2:b8:e6:84:
         08:9e:09:60:9b:2e:ec:fb:3b:3a:a3:95:f0:bc:db:15:da:14:
         bc:d4:5b:1a:0b:fc:d4:d9:9a:04:c7:57:2a:22:60:17:e5:f0:
         b1:f7:9e:2a:fc:ee:25:3d:e5:65:e6:fd:ad:d7:7e:cb:16:4b:
         01:6f:0a:68:0d:19:9d:72:da:35:ab:fd:bc:3e:9a:28:6f:d0:
         12:58:e1:00:29:a2:9c:cb:f9:c1:28:9b:6a:21:16:46:03:44:
         ab:e5:87:78:45:8a:19:aa:35:1f:05:8d:53:b6:0f:71:7f:5e:
         a6:04:29:45:e3:58:19:29:0e:c4:b1:21:a3:c5:a9:b8:d0:0c:
         ba:2e:7a:f2:81:fe:ef:13:68:59:18:e1:4b:15:ae:75:0b:54:
         e4:b9:2c:30:e4:cc:47:16:87:f5:20:ef:03:53:53:6e:46:a2:
         ba:b7:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:00 2025 by rpki-client