Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa
File:                     c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa (raw, json)
Hash identifier:          LLx4XhWwCnyfogAOhzdrejro3naGgflnct+WVkRn6mo=
Subject key identifier:   36:BE:BC:23:8D:0D:11:2D:22:F8:C5:C4:DD:CB:77:41:67:E8:E3:6D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5813A5E0B1A1A6A9A291136
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:3a:5e:0b:1a:1a:6a:9a:29:11:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=42daaa80-a446-4ded-ac1e-f921d48f6dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:aa:2a:27:98:8c:d4:24:8a:df:52:47:bf:
                    2e:6c:14:cd:1d:2e:69:f7:2d:38:83:b3:95:1e:2b:
                    ef:92:7a:3f:db:87:9d:ad:de:f4:56:31:10:ce:23:
                    9e:47:73:a5:01:cb:2e:2e:a3:29:27:50:6f:b5:7a:
                    54:84:10:1a:2f:70:be:89:06:5e:9e:6b:4f:d4:12:
                    df:18:d5:2d:41:fa:2a:ae:88:2d:e4:b4:ad:37:5d:
                    13:c2:01:97:fe:b0:a0:36:54:54:66:ab:bf:10:4c:
                    22:9a:27:5c:31:41:59:ec:eb:a8:aa:f6:78:64:e7:
                    a4:64:1d:b8:a8:e3:79:bb:66:14:4a:29:ae:13:7f:
                    2a:39:ce:fb:f9:a6:4a:97:4a:8e:1e:e3:81:6b:6e:
                    19:1f:ea:fa:91:c5:28:43:0c:1d:1e:0d:08:24:39:
                    0f:99:f3:eb:e0:d0:8d:12:9e:a7:23:77:27:5c:23:
                    18:5c:93:71:bf:68:03:15:53:cf:da:cd:0f:34:71:
                    52:d7:56:fc:fd:77:22:ec:15:7a:37:77:4c:18:ae:
                    83:66:2b:2d:d2:6d:a2:87:d6:d2:fe:9f:2a:80:36:
                    3c:7f:2e:a9:85:d2:4b:19:72:02:4c:11:da:bc:3e:
                    41:f7:b6:0c:ad:ca:a8:15:5c:18:f7:f3:06:32:75:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:BC:23:8D:0D:11:2D:22:F8:C5:C4:DD:CB:77:41:67:E8:E3:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4af29e4-5c20-3c16-baa1-a6cbf0619261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:d3:c0:c2:b1:37:b4:e9:13:98:7f:44:1f:3f:c2:00:c3:
         bf:d8:f6:42:f2:f0:b2:5a:41:1e:d0:a0:38:07:f6:be:ee:75:
         d9:b9:fd:06:82:f1:ce:0f:d3:45:db:d3:df:a4:04:dd:f8:29:
         7d:2e:c5:79:5a:51:b2:77:fc:b7:e5:3e:e8:10:b0:d2:e5:4b:
         b9:1e:9e:76:d8:24:90:be:17:83:13:b5:87:e2:51:ed:22:d3:
         02:25:9a:f5:35:0d:92:f6:7c:2e:2c:7f:4a:dc:8f:90:11:66:
         9a:03:5f:02:44:9f:af:b2:45:f1:aa:99:7e:b5:a3:5f:3c:6c:
         f8:e8:f2:d4:90:ef:73:e1:43:22:ec:28:cc:65:f1:1a:66:f8:
         cd:7e:4e:15:c9:87:39:75:f2:50:b4:82:16:89:d6:35:04:ec:
         6b:b2:1a:9e:e0:a3:4d:95:3b:03:3c:d5:81:46:61:31:7e:14:
         70:3c:54:9d:8b:bd:d2:cc:ad:d9:2f:22:7f:d9:65:7b:71:c9:
         f5:08:1b:48:7c:e3:c9:85:f5:1a:31:02:e3:8f:fc:16:8b:1d:
         84:ac:d5:33:22:94:ee:74:de:85:a3:b2:33:74:76:8e:98:ff:
         86:1e:c4:7e:40:fa:b8:13:3b:1c:0d:5e:f5:f7:fc:14:f1:c6:
         d4:c5:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:00 2025 by rpki-client