Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74f1b2af-ff8d-3ecd-bda1-0ac7b1b60062.roa
File:                     74f1b2af-ff8d-3ecd-bda1-0ac7b1b60062.roa (raw, json)
Hash identifier:          dFSEmSRYeFRiFYOfs+roW4YjV1hrcILxS0rKpS5FOKA=
Subject key identifier:   72:8E:13:E2:43:B8:0A:37:99:FE:2D:E5:A9:CA:95:E3:17:4E:6B:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C5C1DE73F9EB9E1DD9C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74f1b2af-ff8d-3ecd-bda1-0ac7b1b60062.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c5:c1:de:73:f9:eb:9e:1d:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e15e0d6b-f17a-4227-b0b7-dd6c9661edc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:6a:c8:69:46:22:af:b1:2e:aa:11:39:de:
                    4e:e7:f5:05:bd:b2:b2:48:d7:87:96:ff:63:b6:a9:
                    bc:75:0e:2e:6b:b5:18:8f:f2:af:e4:73:84:ab:ce:
                    ff:73:fd:a5:99:20:b6:23:15:36:cc:d7:a6:14:99:
                    91:17:b1:3c:29:3a:a7:d3:08:76:b0:b2:4f:5e:c7:
                    b5:c8:ff:97:bd:56:15:37:1d:11:6a:61:21:f8:78:
                    9d:cd:1f:3e:0c:07:77:f5:f6:28:95:84:99:14:0f:
                    c7:d9:27:b2:10:40:15:d8:81:e1:ee:b4:83:b1:b1:
                    cd:c4:e6:d0:d2:d9:b0:84:58:75:31:00:01:7e:8a:
                    6b:54:d1:e6:9a:11:62:2f:db:f6:51:21:36:6d:07:
                    93:ef:c4:e8:ee:c3:1d:f1:12:dd:92:de:cf:b8:b6:
                    82:a3:ba:08:6b:e7:67:47:d3:a1:fb:67:bd:7d:55:
                    74:f3:74:04:e8:a9:c4:50:ef:bf:24:f7:14:a9:c1:
                    d9:16:0b:bd:d0:5a:94:dc:54:1e:9a:13:7b:14:01:
                    33:a6:52:d9:4f:31:43:0b:83:b6:8f:60:29:21:5a:
                    3a:e6:c4:d6:bd:27:f2:f7:7d:8d:80:5e:ee:52:88:
                    ba:9b:8e:b8:bd:11:cc:e3:bc:f5:f7:8c:fd:7e:b0:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:13:E2:43:B8:0A:37:99:FE:2D:E5:A9:CA:95:E3:17:4E:6B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74f1b2af-ff8d-3ecd-bda1-0ac7b1b60062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:73:3b:ff:da:b8:9b:7b:bd:97:d3:40:3e:df:46:b9:5f:bb:
         ff:87:e5:31:3e:32:f0:5a:7c:3a:d6:14:bf:21:23:d2:62:01:
         b2:18:e4:d7:85:f2:0e:cc:4b:34:ce:83:a2:73:15:29:0e:ea:
         cf:c1:23:a8:f7:0e:0e:2f:58:18:09:67:0f:70:8e:46:f3:c7:
         da:b2:18:23:35:ae:73:47:39:bc:a9:cb:bf:61:34:2c:79:2d:
         0b:ad:fb:8f:e3:eb:1f:a7:d2:7a:5c:dc:85:a5:6d:1c:4f:99:
         89:46:da:9a:4a:7c:da:05:b6:c6:16:61:72:37:fc:f5:c8:be:
         8a:3e:ef:45:30:88:bf:ae:bb:c8:38:da:f5:f6:99:75:58:f6:
         97:70:f8:26:e2:34:51:83:83:38:8d:b7:49:f1:64:9e:8d:71:
         f7:20:ca:9f:f9:74:4b:33:8f:ea:c6:57:62:fe:a8:03:d9:db:
         c1:0a:3b:ec:82:b6:76:7c:26:44:38:80:eb:37:fc:6d:1d:23:
         36:a8:44:0c:93:81:fc:42:9c:03:4c:4b:39:83:e1:73:8e:61:
         d9:19:fd:c3:cc:4f:f0:a4:26:4d:58:67:d7:91:d8:43:0b:95:
         69:09:73:49:70:12:52:da:9d:3a:96:77:c7:3a:a6:af:9e:37:
         55:80:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:03:12 2025 by rpki-client