Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa
File:                     8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa (raw, json)
Hash identifier:          MakEBSq8XwGkojsXRA9Eg/9F2xIcfsVbjt7/hLSkIoE=
Subject key identifier:   FA:CE:72:04:74:0D:EF:C8:96:27:25:51:C5:1E:CB:C2:ED:AE:E5:83
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C6051A72EDB1E39FBD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c6:05:1a:72:ed:b1:e3:9f:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=01fd1658-5996-4367-b09a-a299e646e0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:f3:38:73:70:d3:b4:a0:e2:95:b8:7c:01:
                    73:d0:fe:f7:3b:df:1d:03:9c:bb:c8:26:3c:33:49:
                    e8:1b:90:5a:49:7a:ac:67:6d:de:90:2d:05:55:0e:
                    0c:4f:b4:94:fe:24:3a:e9:68:6d:d3:97:55:65:6f:
                    84:5e:44:c8:99:c6:af:2a:a6:4e:70:06:67:92:a9:
                    ab:58:3d:19:6d:d1:1c:bc:25:bd:82:d1:be:d9:54:
                    41:d4:ff:44:f5:02:91:1e:bc:5d:73:36:78:ee:18:
                    5f:19:62:68:05:59:7e:dd:5c:c7:28:48:76:41:38:
                    a1:2f:4d:41:d5:b8:29:6d:56:81:00:8d:c6:32:6e:
                    9c:1e:51:b9:9e:0e:2b:5b:3f:6c:c2:3d:62:eb:f3:
                    b6:09:16:e0:fd:03:f3:a8:e2:eb:71:09:54:6b:f9:
                    62:3c:8d:13:fe:53:2c:ef:fe:e9:f1:e9:b1:41:de:
                    0a:6d:25:22:92:fb:2e:4e:5b:cb:bf:f6:05:a5:3c:
                    67:a2:fd:f3:be:c7:77:4e:e8:80:3a:1e:bf:eb:35:
                    fd:b2:2f:44:55:27:c2:8b:d9:24:84:bb:e5:d0:05:
                    68:fd:45:b6:42:b3:2d:98:06:9d:51:d3:02:c0:a7:
                    77:54:5a:e6:f2:61:77:08:2b:45:45:7f:dd:3d:14:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:72:04:74:0D:EF:C8:96:27:25:51:C5:1E:CB:C2:ED:AE:E5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d00d24f-c679-3d3b-ae8f-a6328b5506be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:b5:c1:33:fe:89:4b:1e:eb:5d:47:68:40:b9:20:cd:c0:
         cf:ab:36:1f:6a:2b:0c:9d:bc:be:b6:e9:04:f9:51:1f:01:e8:
         1c:6c:82:fc:a2:ab:db:e6:5e:37:00:41:43:d7:07:f2:35:30:
         78:c7:47:1f:9e:29:f5:6e:d4:0e:1d:4a:b2:fc:0f:17:3b:01:
         44:60:ce:0a:66:73:6f:26:6c:de:de:24:5e:e3:ff:cd:0c:b6:
         4d:a9:28:1e:32:3a:ab:7f:01:4f:4b:da:8c:c1:f5:d5:dd:fc:
         f0:a2:0e:4f:2c:09:1a:4b:c4:e9:82:63:e9:e9:13:e8:c7:fb:
         3b:7d:c5:33:c0:b4:90:b7:1d:12:70:2e:af:9f:2d:15:11:d4:
         5d:f4:a4:90:a5:06:92:1d:b1:59:b3:ac:86:fe:fc:ba:30:cc:
         9a:bc:d0:39:66:f0:1f:2e:a6:08:fa:f9:cc:97:c5:c2:db:73:
         36:d7:59:0c:b0:65:d1:22:4b:a9:55:a2:07:50:fe:b6:f4:b1:
         67:77:43:c7:a5:28:dc:a2:32:ce:5a:2c:68:d0:50:5f:d1:1e:
         ce:80:ef:0f:dc:31:8e:37:c6:3e:65:4d:56:a9:60:b2:49:83:
         2f:c4:01:e0:45:72:81:4d:9b:32:a9:be:18:55:30:45:66:6d:
         57:c8:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:41 2025 by rpki-client