Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa
File:                     b4af4962-eb4c-3a28-9fcd-fcb141322279.roa (raw, json)
Hash identifier:          luHWZBpYhgcxYMjoHSVsLFRu74UVNse/miQOB4QOkP8=
Subject key identifier:   09:84:45:09:4C:CE:83:00:7B:59:E6:25:12:2B:18:37:72:25:E0:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581C892E0F0457541515300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:c8:92:e0:f0:45:75:41:51:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=96c8c724-38b6-451c-9bc0-44ee50b10deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:09:14:6c:e4:b9:0c:c9:6a:f1:11:fd:42:
                    9c:90:89:b5:c2:ae:01:32:d2:9b:a8:b5:cb:ed:1a:
                    1d:e0:a2:ac:2a:0a:1c:bf:3c:49:44:06:dc:09:1a:
                    58:b9:71:97:90:e8:3f:c3:f8:5d:b2:86:50:26:2b:
                    e8:67:78:28:92:40:3e:16:c1:6b:7d:f8:7a:61:59:
                    49:73:d1:7e:18:77:fc:ff:55:48:a8:54:c4:37:0b:
                    d6:5c:4f:11:1d:11:fe:c5:ce:63:4c:9e:6a:86:94:
                    c1:37:2a:e2:9c:08:c7:ea:d7:41:50:40:6b:94:7d:
                    09:4e:a8:3c:f1:76:09:3d:4d:54:f8:f7:47:9b:b3:
                    05:ae:70:75:15:85:9f:29:29:a5:3b:a1:6b:ac:64:
                    38:ae:c7:15:75:8a:1d:f0:a3:5f:7f:53:09:87:b7:
                    38:0d:e6:0b:f0:6c:05:74:65:08:33:66:ac:31:07:
                    ed:61:87:c0:0c:fe:49:7b:7a:25:df:9d:23:02:67:
                    3f:21:06:4a:98:77:bf:ff:9d:70:e3:c2:d7:63:97:
                    da:26:d4:73:e2:21:ba:69:16:0c:97:1d:e1:7f:a6:
                    f6:4a:76:ba:c0:dc:39:bb:cd:a9:6a:6c:c3:5d:9a:
                    46:72:bf:10:a9:ca:6c:d0:65:6b:14:85:53:b6:d6:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:84:45:09:4C:CE:83:00:7B:59:E6:25:12:2B:18:37:72:25:E0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:64:9d:d6:af:15:d4:61:b0:d3:09:bb:e1:34:0c:6f:e3:
         7b:db:6e:0f:50:0e:c1:a1:45:9e:93:16:53:8c:28:10:53:13:
         ac:22:a0:7d:c3:de:69:4d:ab:b0:96:7c:ae:67:97:e6:ca:6b:
         71:d9:1d:e3:d3:55:66:f5:3f:44:2f:e6:24:9b:ac:ba:c6:5d:
         09:d7:12:03:5a:e0:38:8f:75:4e:f1:21:52:1a:71:d0:3a:12:
         f9:2a:e0:2d:34:9f:b0:8e:ad:b4:ac:be:09:49:13:e9:ca:55:
         47:db:f4:5b:5f:b7:d5:7a:86:8d:80:30:50:79:2e:e1:1f:0f:
         e1:0f:4c:69:86:dd:97:bb:fc:54:c2:93:22:d3:97:44:08:68:
         8f:ca:18:f0:b2:a9:5c:63:fe:58:fb:c1:ff:b4:f4:46:c8:c9:
         7a:41:b7:31:b6:64:df:fb:b9:c3:dc:03:38:38:0a:18:cd:1e:
         f1:11:78:24:a6:fa:a9:09:e7:1c:27:9d:85:87:dd:41:e9:59:
         31:0a:c0:51:bb:e2:76:e0:d9:6f:4f:80:e5:a0:52:9c:69:3d:
         d7:40:d6:85:67:eb:7f:49:ee:99:56:42:b6:6f:d6:9b:c8:f2:
         04:e3:fe:81:a4:2b:81:20:73:ea:53:63:6a:3e:fb:12:13:26:
         dc:8d:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:15 2025 by rpki-client