Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa
File:                     d7c9f36b-a510-3b78-b345-9d35452555bc.roa (raw, json)
Hash identifier:          fIoz1R98emOm9qG3kpwyyIwflA6vXFvorRr3Rf5SlvI=
Subject key identifier:   6F:93:95:F9:61:77:A2:36:E1:E6:B9:97:F0:33:2E:9A:CA:EF:20:27
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581319799B0FDC8C2256D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:31:97:99:b0:fd:c8:c2:25:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5757dce6-94eb-4863-a1cc-8fa27237049e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:97:50:01:a0:73:3e:a3:65:b7:b7:f3:75:
                    fc:93:4b:dd:76:6d:24:ba:78:4a:44:0c:8f:77:b4:
                    5a:f8:4a:f4:91:a6:fd:24:60:9c:7d:79:3b:c6:e3:
                    15:0a:79:f2:d4:b7:b0:36:4d:28:74:d2:6b:80:67:
                    1c:53:85:76:b9:ce:fd:1e:de:4d:44:43:9b:94:ee:
                    cb:17:35:a6:94:cb:08:a0:01:d2:0f:71:62:3a:10:
                    e2:96:10:f2:f7:ca:86:a1:a7:b9:3d:4a:fc:b5:7a:
                    57:12:dd:31:e9:b1:17:0b:00:8a:f1:7e:59:b3:d3:
                    7f:db:df:85:cf:e2:2e:d2:ad:03:c0:d1:3f:ba:d1:
                    5d:5c:d4:6c:65:ee:9d:96:d2:a3:83:26:04:da:ed:
                    c0:85:26:00:50:81:e2:78:ad:fd:33:bb:33:fd:f4:
                    5d:40:c6:72:dc:05:f4:ba:3d:64:50:f2:30:d9:69:
                    86:81:8c:d1:27:75:60:d0:67:59:b6:02:4d:f9:18:
                    77:4f:ce:f7:72:41:45:35:9c:13:6e:4c:8b:e1:55:
                    f5:52:c8:c2:c2:b9:d5:37:77:ba:b4:ae:a6:0e:07:
                    da:1a:a6:a5:69:b0:1c:ac:c8:4f:b8:2f:c0:e2:c3:
                    2e:9f:db:ba:cc:43:15:9c:81:3c:97:4c:af:d6:0f:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:93:95:F9:61:77:A2:36:E1:E6:B9:97:F0:33:2E:9A:CA:EF:20:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:72:d0:10:cf:37:dd:60:e2:d6:01:eb:8b:44:ac:82:ba:b3:
         c4:e1:c3:bc:a0:2a:40:7a:ff:bc:91:db:1b:55:7b:90:52:9f:
         6a:1d:3a:fd:91:e5:8a:de:58:97:db:fc:d9:df:9f:7b:de:0f:
         fd:4b:02:90:4f:77:e5:77:3e:47:ed:fb:ae:46:d6:55:52:3a:
         4e:c0:ef:33:eb:0c:fb:ee:9e:64:b0:37:ac:a9:d2:b4:9b:ec:
         d4:e0:cd:81:b7:ea:6d:7c:9e:39:a3:10:ce:8e:41:d2:04:17:
         16:39:69:1c:1d:97:87:cd:1a:55:28:c9:2f:1b:33:96:4e:5e:
         5a:05:76:13:3c:77:81:c4:ac:ee:d9:20:1f:38:74:0f:43:5f:
         97:7d:f4:08:88:e0:ad:77:27:3b:17:b2:b0:45:c7:bf:78:a5:
         5e:72:31:c6:4f:29:f8:1a:fb:a1:f6:19:fa:5b:ae:d1:d6:40:
         16:bf:49:64:a7:45:b5:60:83:1c:6d:64:fd:62:16:30:1a:b5:
         dc:5b:ed:0a:1c:b7:7a:c8:86:ac:b8:94:c9:f6:e4:6c:60:53:
         a7:ba:9f:c1:54:dc:0c:31:32:95:da:8b:0e:f8:fd:9f:1c:4a:
         06:af:2f:04:05:f0:ba:7a:5e:80:25:6f:11:b7:4a:fa:71:3a:
         22:2b:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:56 2025 by rpki-client