Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4d7971e-d901-33a4-9869-7c705821c649.roa
File:                     a4d7971e-d901-33a4-9869-7c705821c649.roa (raw, json)
Hash identifier:          3zeocql6qTmRVyZkWgldknCxexIrRntGWUQoz+0ijuk=
Subject key identifier:   89:64:A2:C8:ED:43:47:DD:35:65:DD:2C:12:DB:53:F9:07:CA:79:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C2B30FCD077245786E20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4d7971e-d901-33a4-9869-7c705821c649.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c2:b3:0f:cd:07:72:45:78:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9b492cd8-90da-4245-917d-2634ce3cf286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:8a:ff:b3:83:19:e9:23:50:0b:66:f5:10:
                    5d:81:47:41:bd:4f:9f:0e:87:3a:4c:e0:65:08:3e:
                    1f:66:3f:7f:69:73:ab:ce:69:ba:01:31:4e:74:83:
                    53:1c:81:e8:c4:dc:d6:94:9e:24:e1:c1:ad:1f:c4:
                    e2:8e:08:64:0d:d9:69:67:92:a6:4b:69:f0:58:1c:
                    72:ea:6e:c1:12:a6:f6:53:3c:e2:50:c3:dc:f3:a5:
                    b3:08:15:1d:95:ed:c7:3c:bd:e1:ce:2f:83:8c:2f:
                    92:e0:a1:a0:b8:49:08:ba:f7:ee:6f:2b:29:8e:9e:
                    42:4e:67:32:10:76:77:25:be:67:2c:14:f8:cf:ae:
                    a9:91:cb:cc:fb:69:5e:1d:a4:40:58:33:22:70:61:
                    1d:b8:31:06:8c:20:8d:bf:07:46:0d:c1:75:70:de:
                    0e:b0:28:11:52:c0:37:13:13:b2:f3:9c:43:54:39:
                    e2:d3:dd:80:e3:9c:c9:74:fa:22:6f:ca:a7:ce:ba:
                    57:17:08:83:1e:49:f5:3a:0a:ac:74:2a:8d:6e:a3:
                    1f:bd:5e:9e:07:07:36:ed:51:84:84:db:84:ec:38:
                    dc:cf:c1:89:08:58:e5:dd:b3:d5:73:b5:4a:74:f4:
                    da:6c:0a:75:10:ac:ae:47:4a:3d:d9:78:56:d6:73:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:64:A2:C8:ED:43:47:DD:35:65:DD:2C:12:DB:53:F9:07:CA:79:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4d7971e-d901-33a4-9869-7c705821c649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:24:15:6d:13:f3:42:51:dc:01:b7:64:15:7e:1b:4d:d4:80:
         8e:2e:ae:df:cb:35:0f:a6:c2:df:1a:8e:9c:25:4c:3e:f9:5d:
         e0:12:3f:e1:79:f7:bd:f0:be:f6:e9:4a:ed:8f:59:bc:10:99:
         b1:b2:b5:d7:41:79:9e:55:7b:26:e1:20:2b:78:9f:f9:69:42:
         3e:4e:4c:c7:68:3f:87:99:bc:3c:d8:e4:40:74:d6:6d:49:14:
         36:00:8e:71:54:12:0d:45:7f:cb:53:74:b0:61:ce:0d:08:09:
         65:5f:4e:a0:1d:c4:50:78:55:77:90:23:34:f9:7a:65:dd:88:
         a3:a0:73:12:4d:bb:14:a8:9e:67:b9:6e:a1:80:48:08:36:7a:
         74:47:05:b4:0d:30:ac:23:f4:ff:7d:35:5b:a9:44:13:b4:08:
         41:2c:b0:18:33:96:3a:3f:37:cc:3c:79:03:5f:09:77:6a:c7:
         b0:4e:c5:a7:4d:23:1d:cf:9e:74:d3:b8:ce:25:60:b3:17:1a:
         4f:f1:95:a4:c7:65:eb:bd:41:83:0b:42:e8:44:c0:4e:e4:62:
         49:3d:23:0b:c8:cd:91:91:a7:37:57:88:13:3f:3b:17:b3:6c:
         d1:98:d1:a1:53:10:8d:c1:de:76:37:54:bb:6d:55:61:a0:6c:
         74:4c:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:59 2025 by rpki-client