Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa
File:                     948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa (raw, json)
Hash identifier:          uf1NfZA05Zv/vKzvZPX9IiQukbq7mEFibR8nXfBK/z4=
Subject key identifier:   32:32:ED:12:72:92:F9:DD:7C:CA:EE:CF:9B:F0:F5:0F:04:67:A6:87
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5813BBE7179E64345473F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:3b:be:71:79:e6:43:45:47:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6da23826-aa3e-4763-80fb-3b3d648030e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:b2:48:4d:ad:7f:3a:f7:a0:29:b1:93:67:
                    64:1c:c4:0c:f6:27:b2:e0:71:31:f3:47:05:e8:24:
                    ec:1f:79:a9:f8:08:68:83:59:01:e4:39:ad:6a:45:
                    af:06:22:f1:75:43:03:5a:3c:4e:6b:70:dd:0a:f6:
                    1f:1c:c8:fe:e8:3d:af:72:71:de:0f:6d:e1:c3:61:
                    37:63:49:de:b0:c7:03:e5:95:39:66:14:41:52:ce:
                    31:72:b9:6f:de:64:aa:88:92:23:db:12:da:41:a3:
                    07:23:af:c7:d5:62:67:d4:56:66:2e:8d:dd:f2:65:
                    83:37:d3:5d:43:3f:65:ac:3d:8d:10:9e:8a:b0:9c:
                    5c:9d:5e:0c:b4:c2:af:8b:ca:05:e6:c3:87:15:ed:
                    9f:7d:33:0a:ec:ff:5d:13:74:f3:12:09:73:c2:55:
                    99:63:44:c7:35:a0:bc:78:76:57:7f:f9:84:ef:e1:
                    50:5f:6e:f3:8f:52:b1:f3:d9:9f:f0:26:cb:b3:24:
                    b5:7c:20:da:26:19:6b:7c:d3:e8:49:33:3a:e9:25:
                    ba:e4:a7:24:8a:98:1f:b5:11:76:6a:f0:11:c3:bc:
                    f2:f9:3a:aa:6a:3f:63:9e:df:8e:09:e2:4d:3c:5d:
                    13:20:7c:c4:41:a0:b5:77:6c:5e:71:93:ba:b9:6b:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:32:ED:12:72:92:F9:DD:7C:CA:EE:CF:9B:F0:F5:0F:04:67:A6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/948404ee-1bb7-3b0a-8e46-108cec6dd5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:8b:bd:38:42:4e:c2:4d:5b:b7:1a:3e:b7:82:dd:60:0d:
         47:11:80:2d:95:7d:04:cc:8b:01:88:ad:4d:1a:d3:af:16:8f:
         e8:d7:0e:39:9a:17:c3:b3:5e:2c:52:10:a7:5f:9f:ec:04:8f:
         b5:c3:79:39:1e:62:f4:08:e9:1b:fb:91:a4:f7:0e:e4:1a:48:
         dd:64:5a:24:3e:bb:84:54:76:a4:d1:c2:0a:50:0c:05:c3:0b:
         e9:26:34:18:ea:01:2b:37:41:68:7d:2f:c6:f9:33:33:36:e4:
         82:8f:b8:c6:bd:05:62:e1:9c:c6:f7:29:74:87:56:9e:e6:59:
         b9:60:69:b8:e0:26:f0:b3:f5:35:fe:db:34:a5:35:80:db:59:
         fe:da:ce:2e:0d:6c:0c:c3:b4:0b:d6:2f:3d:25:cc:76:12:75:
         cd:be:91:a3:c4:51:32:37:c9:6f:36:00:2e:88:1f:69:e8:96:
         9f:bd:2c:76:8d:9e:4d:96:22:26:44:05:0f:9e:92:74:db:f0:
         96:ed:50:ae:fe:ab:90:4c:cb:eb:2c:2f:84:75:b4:09:47:96:
         a4:1d:b1:c6:92:44:b6:72:80:a0:dd:e9:54:0a:01:27:1e:e7:
         cf:d0:30:30:aa:18:02:2d:2d:33:a0:ea:aa:8d:3e:ab:67:78:
         a7:30:3f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:01 2025 by rpki-client