Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
File:                     b858aae4-a2d0-3206-926a-11f8600ccc2a.roa (raw, json)
Hash identifier:          +SFMGKsRC1jGkAhryGPcSlTfoSMlcKsjJAJvL90ovbI=
Subject key identifier:   04:E0:C5:66:32:FD:B1:A2:A1:15:D0:44:A2:86:F3:4D:FE:77:EF:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C580FBA507CAC0FC987B93C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        99.196.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:fb:a5:07:ca:c0:fc:98:7b:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=33e0f6a7-1a9e-483e-a2d7-6d66debb78d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:4a:0d:1d:9f:f0:eb:50:60:f8:f0:5d:d3:
                    fd:05:7f:77:e7:15:05:5c:db:f9:86:62:75:a5:a5:
                    62:34:1e:cf:9d:ed:81:47:32:bc:9b:c7:69:a8:f4:
                    fd:f8:3a:13:05:a7:42:db:eb:e5:4c:e3:c3:d3:a8:
                    a7:fe:0f:09:03:02:4e:f1:6c:ff:28:48:a9:7b:28:
                    ac:af:c5:6a:2b:5d:18:fc:1e:54:1e:df:21:08:15:
                    09:dd:51:02:d6:2f:03:5f:da:b5:ff:e5:a4:7f:09:
                    98:0f:42:63:f8:76:63:23:1c:81:07:69:dd:65:12:
                    08:d7:d9:94:cf:5d:b5:9f:bf:35:e2:a6:59:d4:ec:
                    46:87:5f:07:07:eb:5c:70:bb:1e:f9:81:5e:91:09:
                    56:d8:5a:7c:f5:9d:f5:1f:69:76:ec:7b:8c:00:c2:
                    b6:95:94:25:89:bc:c9:ec:4c:9e:05:84:5f:51:47:
                    d8:9b:39:f1:72:79:d1:3a:ae:95:3c:1a:39:42:3a:
                    b5:b9:10:d9:8e:ec:fc:9f:6a:d3:71:6c:9f:17:c8:
                    bb:ec:21:82:f6:2a:b8:91:2a:06:1a:4e:c6:68:63:
                    9d:d1:a7:9b:9e:96:d6:c7:5c:62:53:91:19:b1:c3:
                    7e:3f:af:1e:5b:9e:4c:ac:fa:08:5e:65:c9:b2:46:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E0:C5:66:32:FD:B1:A2:A1:15:D0:44:A2:86:F3:4D:FE:77:EF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:9a:53:b7:c7:6f:11:dc:47:5a:d4:fb:a5:55:da:d7:0d:
         82:07:61:7e:da:f1:93:68:e6:2a:7a:5e:8e:da:46:7a:f8:cf:
         10:4f:d7:9b:1b:a6:75:90:29:73:25:1d:3e:62:ff:10:f3:99:
         61:0e:00:5e:57:ad:10:8d:06:e5:27:2d:88:1b:fa:fe:49:6f:
         c3:ee:28:b8:b4:46:7f:bf:cb:0c:ea:66:3d:62:58:0e:80:72:
         45:2c:09:a1:46:7b:04:d7:1f:82:17:79:6f:f3:1e:f3:2a:f4:
         1c:a4:0d:c2:b4:5c:65:2e:92:aa:1a:e4:0d:93:fc:8a:a1:c0:
         7a:58:61:67:45:34:69:bd:bd:8c:eb:29:d5:95:ef:ba:21:9b:
         e7:44:37:a0:37:ef:25:e8:1a:35:90:48:34:10:3a:a3:21:2c:
         f9:7a:ce:3a:dc:16:e1:8d:af:8d:0a:59:89:17:f7:34:63:67:
         85:0f:fa:f6:df:ce:2e:94:b1:ec:5f:4a:5e:b9:2c:03:10:83:
         94:d8:1b:7c:0a:bb:01:96:f7:ba:3b:ba:a8:e8:1d:78:50:93:
         01:f7:1d:42:20:14:99:5e:c8:9a:df:7d:54:77:24:8c:46:30:
         6b:06:2f:ac:c7:08:23:ba:33:b8:3d:6b:ed:06:ea:f2:50:70:
         7b:6e:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:07 2025 by rpki-client