Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aebafbad-a1d0-318d-a7ea-60be76b6c3a8.roa
File:                     aebafbad-a1d0-318d-a7ea-60be76b6c3a8.roa (raw, json)
Hash identifier:          jQSbIu1VyCB2KoeEqkjo4v6/AOT8806mPFkEErpukxQ=
Subject key identifier:   8D:05:23:07:8A:2E:DE:FE:5A:4D:62:96:EB:ED:A9:E6:1D:7D:47:92
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581BE809E1DCC8648C266A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aebafbad-a1d0-318d-a7ea-60be76b6c3a8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:be:80:9e:1d:cc:86:48:c2:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=527d9046-2875-445c-8321-1e9d9afe16a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:20:3c:e4:50:b7:7b:28:96:f2:d3:5d:2f:
                    f5:c0:d6:50:19:c6:c0:ae:97:5f:65:93:bd:87:d8:
                    39:30:ab:27:5f:09:15:bd:6a:0c:fe:92:2a:53:72:
                    b0:b1:db:c4:0b:8f:2e:b0:80:d6:51:64:2c:01:c6:
                    7f:7e:14:2d:d0:d5:4f:31:de:93:9d:ca:b5:31:9c:
                    c0:63:3e:87:e0:af:19:fa:53:c1:66:b6:8f:4d:bb:
                    9f:fc:c2:a0:69:ef:dd:13:3e:2d:5c:db:eb:2b:98:
                    33:72:ac:7e:a1:6a:a9:dd:77:2e:68:99:f9:17:80:
                    3e:a1:74:9a:68:d7:bc:d4:51:9b:a2:d2:35:f9:b8:
                    5f:3f:74:8c:8a:53:e1:b3:ae:35:86:61:5e:0b:98:
                    3b:4b:f1:7b:69:9d:e7:f6:47:49:41:48:65:a6:6d:
                    e4:3a:6e:a4:94:76:4b:c5:c6:4e:30:32:8e:1a:c3:
                    55:cb:6d:f1:96:b4:f2:89:7c:94:be:df:ea:17:a5:
                    df:30:3a:3b:cf:37:5e:a2:3b:8c:69:1c:bd:7c:a7:
                    b9:f2:9b:5b:90:58:32:ad:5c:c6:9f:0c:19:03:2f:
                    5d:60:fe:30:8d:84:59:e4:9a:b4:a3:ec:b0:07:de:
                    e9:a8:37:69:da:a9:d2:e5:3b:62:30:98:97:bc:37:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:05:23:07:8A:2E:DE:FE:5A:4D:62:96:EB:ED:A9:E6:1D:7D:47:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aebafbad-a1d0-318d-a7ea-60be76b6c3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a1:be:86:36:4b:9e:98:a6:57:3d:82:db:b4:8d:87:0d:8e:
         87:22:13:00:a2:cf:db:ef:ce:67:d7:c4:3c:d6:34:41:bc:1b:
         8e:a7:d3:07:40:ce:53:cc:07:2b:78:70:65:3d:c1:10:26:c0:
         09:0e:5f:8c:6e:39:f4:2b:53:f0:2b:dd:42:5e:ac:0c:44:fc:
         25:87:f9:84:f1:33:84:ab:e5:37:63:79:04:6f:13:59:87:4a:
         c9:8b:9b:e1:c5:ff:41:0b:e9:9a:b4:4a:2d:fa:c7:36:c7:e6:
         c3:bf:fc:87:94:f0:d4:8c:b4:27:db:67:af:e0:98:6b:ea:5b:
         d1:9d:cd:7d:ec:62:d5:82:8b:53:fb:4c:75:2c:91:09:22:91:
         d3:dd:ff:72:dd:16:c8:4c:72:1f:b0:4d:7c:fa:26:c0:ec:1d:
         dc:b2:f4:4c:3c:c9:6a:e9:96:3c:0e:bb:bc:81:73:fc:44:b1:
         9f:08:1c:99:30:d7:f6:61:6d:36:ef:d3:fd:66:de:46:56:93:
         b0:88:29:e9:6f:f0:bf:12:0c:14:b1:c6:6c:eb:62:07:63:3f:
         dd:2e:24:6e:d3:14:1e:1b:f4:f8:90:71:ed:d7:6b:5b:c3:bc:
         a5:26:cd:3a:c2:db:22:7b:84:fe:9f:4d:67:2b:f0:01:1d:e3:
         32:e9:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:57 2025 by rpki-client