Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6426dd3c-eed4-323c-8c43-822cd0d4837d.roa
File:                     6426dd3c-eed4-323c-8c43-822cd0d4837d.roa (raw, json)
Hash identifier:          B63XMhY97fUrLEUCsC8/1BNC1sOZXK0gMzFyP5cZjIs=
Subject key identifier:   23:B4:47:36:A8:2E:A4:31:52:56:A6:92:3C:33:19:13:C9:22:5F:E2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5813485E266A8AF4FF8BF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6426dd3c-eed4-323c-8c43-822cd0d4837d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:34:85:e2:66:a8:af:4f:f8:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0e0dd289-72b0-4d1b-8217-893eae953343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:d6:b5:d1:12:8f:6e:b7:a0:fe:1c:99:59:
                    ed:ac:c9:f3:f0:fd:00:40:7b:1c:bf:02:34:4e:b6:
                    df:2f:da:93:b6:ac:bf:c2:ac:93:97:ff:d6:44:a9:
                    fa:6c:ca:20:35:9a:d7:83:0f:6c:8c:99:13:00:b5:
                    29:98:e4:51:79:bc:43:86:13:60:9f:0e:91:47:79:
                    e7:5b:20:39:12:45:f2:c2:86:f5:2d:19:05:9b:18:
                    27:c1:b1:95:9c:c8:9d:bf:fd:68:e8:fc:b3:7b:a6:
                    9a:41:48:fb:98:28:ab:7c:b1:b7:8b:b5:2a:49:19:
                    71:1f:8a:86:3c:b8:b5:f2:b6:c9:f4:5f:bd:d4:99:
                    9a:a2:86:e5:c1:6d:97:87:5b:2d:6a:07:e1:87:04:
                    fe:e8:82:96:30:7f:8d:f7:d5:6a:f0:03:64:fc:1d:
                    06:38:83:89:f8:58:5d:a6:34:97:86:0c:f1:55:f4:
                    ad:0c:06:f7:c0:da:c2:59:04:cf:d1:41:99:bc:28:
                    b0:bc:b3:0d:69:e6:04:3b:e9:e0:c0:63:9f:f3:19:
                    08:55:25:74:fe:af:37:4f:0d:22:da:6c:02:81:be:
                    cb:2e:58:9f:e1:f5:e1:39:46:8d:48:c6:2c:60:c5:
                    66:67:c0:53:89:7d:27:99:c6:0e:0a:9a:11:d3:2c:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B4:47:36:A8:2E:A4:31:52:56:A6:92:3C:33:19:13:C9:22:5F:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6426dd3c-eed4-323c-8c43-822cd0d4837d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:bb:5d:93:51:43:be:16:98:aa:5e:1a:2f:28:44:1a:2e:
         4c:7c:b1:d6:d6:f5:cc:f1:72:f1:38:b7:b5:5e:38:8c:24:ff:
         45:65:6c:39:88:81:3b:34:b8:34:e9:5f:4c:41:81:72:c4:74:
         83:d0:93:91:ac:b6:bb:cc:e7:64:b1:e6:41:51:9e:22:63:72:
         01:73:dc:9b:50:1b:2e:6a:fe:1e:a3:25:61:ce:d1:c0:21:57:
         3f:45:90:15:fc:d1:7a:a6:71:89:69:9f:33:1c:12:d1:86:f6:
         7c:96:2a:ee:32:86:3d:fb:23:c9:65:dc:29:d2:8b:6f:68:e7:
         ed:f4:78:d0:98:5b:85:3d:7f:f6:b4:ff:63:9c:05:4a:29:1c:
         2c:d5:1b:2c:15:2e:b1:7e:77:ba:28:48:ec:0a:3c:ed:06:bb:
         28:b7:e4:b5:9b:48:ae:cd:a2:a7:42:05:cc:48:d7:66:3c:d2:
         b1:b3:a2:49:94:83:c2:4b:69:2c:2d:07:2b:84:2a:93:44:e1:
         4e:ad:ae:e1:22:f9:c6:69:76:89:12:95:16:99:3e:2d:91:17:
         ac:05:d2:dd:a5:e6:ca:65:26:73:8a:f9:40:e4:26:c2:9f:30:
         23:3d:75:df:6b:a1:c8:66:26:11:8e:50:64:65:94:eb:73:7a:
         e0:47:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:49 2025 by rpki-client