Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa
File:                     a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa (raw, json)
Hash identifier:          Dl+jOJEjbYltYGnj2S41bp+TgjUj3BYzdgANCmwUAbs=
Subject key identifier:   CF:B2:E2:A4:41:22:BF:94:27:FD:79:43:C2:6F:8B:7B:46:EA:67:FE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C648D734AF4792B97AA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c6:48:d7:34:af:47:92:b9:7a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=54cb656f-71dc-4dc7-8cb5-012330c2d94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:e1:7e:af:53:a5:e3:c5:42:7d:fb:ec:67:
                    57:13:58:dd:48:61:19:5a:1a:4f:2a:0d:60:d5:b8:
                    51:52:c5:4f:48:52:a1:67:d3:2f:f9:05:b6:66:64:
                    8e:18:9f:80:fa:73:5c:25:25:db:3f:a8:f0:9e:81:
                    2d:18:0b:bb:78:d9:7d:32:2e:eb:79:54:0d:a8:45:
                    21:10:71:bf:ec:a8:e6:85:fb:dc:50:ec:dc:3b:20:
                    f7:d9:bd:6b:7d:ae:06:0e:f6:4c:90:44:95:e3:4b:
                    44:4e:51:6f:55:12:ce:41:03:8b:cd:d5:44:10:04:
                    7f:5d:31:a8:b1:d0:96:bb:bb:af:73:d8:ad:a2:06:
                    c3:e6:3d:b3:cb:79:f3:1f:ec:c8:3c:86:5b:90:d8:
                    94:dc:27:f3:41:ca:79:a0:cb:1a:ab:42:3d:c8:7c:
                    c2:15:84:27:0e:07:1a:f6:61:30:51:ce:0c:20:3b:
                    6e:19:bd:db:41:8b:b6:5f:6e:36:35:5a:60:3f:fd:
                    f4:93:81:60:37:9f:e8:87:e7:4a:98:b4:4b:03:34:
                    98:aa:6d:ce:84:3b:6c:d5:c7:91:71:33:b1:de:55:
                    e8:f4:06:5d:c3:78:f2:26:c6:7f:bf:4b:3a:31:f4:
                    16:99:3e:c7:95:f0:d2:13:44:28:c7:43:ce:b2:a8:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:E2:A4:41:22:BF:94:27:FD:79:43:C2:6F:8B:7B:46:EA:67:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:20:7b:65:42:99:68:c7:37:b2:ba:80:b2:0f:cd:68:6e:5f:
         0f:49:4a:6c:60:ed:4e:55:63:5a:2c:8d:1c:e8:c8:aa:3e:60:
         0b:69:f8:80:66:71:72:af:fe:6d:db:2a:1d:ac:f0:a3:b8:20:
         85:74:69:87:18:83:54:a8:a8:44:3b:cc:c8:b0:2a:32:86:3c:
         2e:14:60:1d:8d:19:b1:81:84:63:3f:7c:4e:40:65:fd:2d:b1:
         c3:da:ff:6b:f4:dc:c1:23:5f:de:1c:fa:e1:fe:98:cf:e4:d0:
         5c:22:db:e2:17:54:7e:13:33:2f:cd:ec:79:d4:c7:d1:5c:9a:
         92:2d:7a:be:3e:b4:d5:e2:96:62:ab:fc:7f:db:ae:96:f7:c1:
         93:ab:b8:56:36:c0:dd:8a:94:c7:b3:36:4b:8d:98:84:00:57:
         bb:ff:a9:83:ad:86:d3:c1:64:29:f0:25:d7:86:ed:31:53:15:
         72:a2:8f:2b:7f:a6:6d:52:c7:61:a2:60:93:f7:bb:a6:67:40:
         ff:d3:21:3d:be:32:42:ab:99:23:c9:f2:f4:86:04:e5:9f:ce:
         84:15:a9:01:77:ed:0f:85:50:a6:b1:a8:a1:01:15:51:61:40:
         71:10:dd:4d:bd:29:1d:02:00:17:c8:05:fb:8a:76:b3:c8:e5:
         0c:a2:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:23 2025 by rpki-client