Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66946b99-e241-386a-9d82-f437ab155ef0.roa
File:                     66946b99-e241-386a-9d82-f437ab155ef0.roa (raw, json)
Hash identifier:          h70q29uUjSPOC1pXxlQh5OQ3uaB4/9GtsiFTRRDbt+U=
Subject key identifier:   25:CE:B9:E6:4F:5C:4C:F8:59:31:A6:9D:63:1A:16:4C:E4:B1:9C:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C9CD4E57EFBA3F6F4700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66946b99-e241-386a-9d82-f437ab155ef0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c9:cd:4e:57:ef:ba:3f:6f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=1ae3d614-f7aa-4b6c-9d92-c56257a54885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:90:c9:60:37:4e:18:4f:d1:de:ad:d3:b7:
                    8c:43:2b:f6:ef:41:53:d5:5e:a0:60:7a:a4:ff:30:
                    81:2d:f4:2d:df:12:ab:3a:24:28:64:cb:84:84:9a:
                    0d:3a:b1:59:81:a8:34:7e:9b:89:5a:45:ee:c7:25:
                    2f:9d:59:93:e3:d2:8f:c0:f5:db:8d:e0:b0:4d:34:
                    e4:07:e0:a0:10:a3:4d:49:03:0f:2c:57:cb:f3:d3:
                    95:cf:f9:8c:a2:29:a5:06:e8:a0:58:e1:11:88:dd:
                    57:68:fc:57:a5:88:29:5c:e4:31:f7:be:20:84:71:
                    b0:46:5f:7d:6d:91:de:ce:0f:13:9d:aa:47:d8:d1:
                    c1:42:2a:91:d7:7a:da:9c:07:e9:17:ab:aa:45:29:
                    5d:4a:aa:84:16:9f:9b:6b:a0:01:43:87:69:6e:a5:
                    a8:c8:ac:24:74:e2:21:2b:f7:7a:e3:1b:f8:46:c2:
                    7c:ce:71:33:93:f6:cb:7a:e5:b9:e9:4f:54:36:11:
                    1d:da:be:91:21:5d:0b:76:bc:65:48:bc:0f:5f:d0:
                    fa:61:f3:1d:2f:23:66:a0:5c:84:81:df:d0:b2:36:
                    6c:4e:08:da:67:bd:49:b0:db:d5:42:87:26:a3:1a:
                    6a:55:14:cf:6f:69:fa:cd:78:0c:19:ac:6a:78:67:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CE:B9:E6:4F:5C:4C:F8:59:31:A6:9D:63:1A:16:4C:E4:B1:9C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66946b99-e241-386a-9d82-f437ab155ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:cc:a6:32:06:b0:af:7b:02:3e:c4:b5:dd:27:be:b4:fd:b8:
         0c:fa:2e:62:00:ed:91:66:f0:bf:d3:7f:fd:e2:48:37:27:3b:
         13:03:e3:70:b1:68:a4:62:d2:83:64:b1:d1:b0:ba:e4:b3:5c:
         ce:8b:2a:44:98:b1:a6:5d:6b:69:96:9f:4f:f8:f6:ce:27:02:
         ba:e4:38:38:7d:bc:ba:5b:07:87:18:c3:a6:e0:2c:b8:20:c4:
         cf:17:16:8a:d7:14:3f:3d:72:4f:e3:6b:7b:31:17:7f:6e:97:
         45:2e:2f:16:83:d6:77:b1:b7:9e:c8:0e:c7:81:a3:c6:9e:cd:
         5f:f6:4c:6e:32:4d:b3:9e:3f:3e:fd:cc:1b:36:6a:68:9f:cf:
         b4:04:5f:87:b1:3c:a5:74:8d:4b:1c:b9:94:f9:f2:0d:35:0c:
         4b:06:ba:51:e8:7a:4e:8b:ec:b8:8e:9c:0d:97:8b:55:05:60:
         c4:16:ba:1b:e0:4a:1b:72:64:0a:03:1f:e9:a4:23:ae:aa:ac:
         13:1d:4d:79:76:35:de:9f:fa:f3:73:15:c0:a1:89:0a:75:ef:
         6f:1d:03:8d:52:47:3b:b0:06:bd:9d:8c:a7:52:5d:92:b4:ca:
         0f:b8:db:88:80:5f:11:f9:a9:58:ff:e9:73:94:9b:ab:a0:49:
         08:d1:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:05 2025 by rpki-client