Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa
File:                     d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa (raw, json)
Hash identifier:          9TBvI9HkJEtr/0lTLhz23bgYWXurqOLg0l4bluLdmag=
Subject key identifier:   3D:FF:98:79:CE:77:04:29:03:5C:A4:6C:3C:DE:15:2E:49:26:CA:E7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58136E7BE93749BE8337180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.197.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:36:e7:be:93:74:9b:e8:33:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b993cdc1-5674-4bd6-8f3c-8bac1569c3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:9c:bc:9b:4c:5c:16:14:02:74:62:55:c1:
                    09:47:3a:97:54:dc:81:22:24:f3:dd:de:2a:85:c7:
                    c6:00:ba:e1:68:a5:1b:5c:9f:a9:4a:30:90:af:d2:
                    55:cc:06:67:d9:9a:a4:5e:1a:5d:cb:32:15:52:1b:
                    45:24:85:1d:fb:3d:46:bf:f0:24:39:73:4f:ce:91:
                    83:50:22:17:61:9c:d6:9d:8e:7d:6d:2b:71:5f:f7:
                    a3:70:84:57:4a:16:a2:59:5c:a1:4d:9e:e1:4f:ab:
                    a7:9c:17:20:3a:e8:d8:1f:52:d6:e0:6d:0c:11:2e:
                    85:b3:14:55:84:25:27:54:87:12:90:63:9e:95:e6:
                    be:93:77:f3:80:7e:41:71:d7:50:27:20:3b:5c:26:
                    57:dd:c0:d6:84:b2:7f:07:4d:f3:91:ca:45:e2:49:
                    cf:57:61:91:34:42:1c:c8:7f:e1:75:e0:54:a2:6e:
                    71:80:9d:46:44:11:ca:bb:e3:6a:c3:bb:2c:7f:80:
                    2a:7b:20:9f:34:0c:23:2e:fa:00:11:a5:c5:d9:44:
                    ef:13:cd:fc:38:69:25:a4:06:b1:c3:49:02:be:09:
                    2a:cd:87:e7:34:fb:bd:6e:8b:b8:9a:89:ca:f7:de:
                    f3:ae:9c:07:f3:2f:62:a6:78:91:99:28:96:40:ee:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FF:98:79:CE:77:04:29:03:5C:A4:6C:3C:DE:15:2E:49:26:CA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:29:c8:cb:2d:5f:97:e1:8b:3c:62:d4:19:d9:21:4d:26:
         b8:a2:1c:54:60:26:a8:40:05:63:6e:ab:f0:f2:67:29:c4:fb:
         3d:47:74:b3:95:f8:c1:73:ff:3d:55:96:84:7e:73:12:19:04:
         79:0e:b8:ee:c4:e6:b6:e4:75:4e:8a:6f:0d:d7:76:3f:69:66:
         dc:14:8f:cc:dc:9c:31:19:ed:af:77:c6:a9:8a:e3:a2:b6:f3:
         ed:81:85:3f:87:a0:0e:d9:14:c2:02:b0:dc:b1:c8:a6:31:cb:
         65:9f:13:64:f4:a7:8d:4c:20:20:98:1a:b0:7a:09:20:35:e3:
         31:1f:b8:6d:92:98:89:0d:60:46:6f:dd:ba:9b:f0:8d:5e:7a:
         53:76:a3:cc:c8:de:35:e2:a5:04:a2:cc:69:eb:10:f1:74:8d:
         11:ae:01:80:c9:5d:b2:b1:07:72:c9:58:6d:c7:f6:ac:8d:cb:
         e2:d7:a0:e8:19:ab:71:5b:e5:48:50:5f:fc:d1:78:75:4e:98:
         64:75:0d:92:d4:65:5f:cf:59:47:26:71:bc:d6:99:20:03:14:
         be:1c:77:1e:b8:73:bd:86:ed:c1:89:8b:33:d1:68:61:43:bd:
         56:25:78:94:22:80:e5:53:5b:7b:68:a5:80:f4:06:78:25:e0:
         26:07:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:35 2025 by rpki-client