Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa
File:                     ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa (raw, json)
Hash identifier:          LlPJ7nSj1Wst1moZj7UdFqrHpB754ieyJ+hdkiJ7JFE=
Subject key identifier:   9D:9A:C6:66:FA:94:96:C6:2E:E8:B0:7C:65:F1:1E:37:77:F9:5C:99
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584875F05200FB9EE35E69F40A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa
Signing time:             Tue 07 Jan 2025 02:00:39 +0000
ROA not before:           Tue 07 Jan 2025 02:00:39 +0000
ROA not after:            Mon 07 Apr 2025 01:00:39 +0000
asID:                     270764
IP address blocks:        198.89.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:f0:52:00:fb:9e:e3:5e:69:f4:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  7 02:00:39 2025 GMT
            Not After : Apr  7 01:00:39 2025 GMT
        Subject: CN=3c198279-4587-43d6-b617-8a4cf480317b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:26:fc:53:97:56:55:68:28:6e:99:2d:d3:
                    40:fd:88:ae:15:d6:cc:7e:02:0d:9c:c5:4d:8f:b7:
                    d6:68:99:30:35:7f:06:7e:b8:93:7e:dd:78:2f:1d:
                    56:4d:47:60:87:00:07:80:52:ef:f9:ef:eb:ee:33:
                    d3:7e:47:a1:d4:f1:2d:78:ac:f9:24:08:b2:30:56:
                    5c:b7:f3:d1:b7:89:c1:65:cb:81:3c:b8:c2:c1:0d:
                    a7:e3:5c:47:31:40:5d:28:9e:17:7f:5a:a3:6e:88:
                    59:98:03:5e:45:32:1d:bc:7a:b5:5a:a0:ad:79:ec:
                    b4:89:a3:55:74:74:3c:42:a8:6d:8d:68:5b:e3:ab:
                    c8:cc:09:b8:7b:80:2d:17:aa:c8:54:49:e5:7c:c5:
                    6b:55:3a:18:a2:ac:58:ec:7c:6c:95:79:22:09:66:
                    7f:37:5d:df:e6:0d:f0:b8:78:95:7e:a6:8e:42:5b:
                    ca:55:88:13:45:8e:35:2d:6e:74:eb:ac:24:77:4c:
                    77:3a:37:67:1a:ed:f6:3f:0c:da:a8:b2:ee:25:aa:
                    69:8a:e5:89:4c:22:6a:96:c2:93:3a:97:14:fd:88:
                    0d:f9:32:38:bd:91:ab:bb:79:6a:29:d2:16:20:f5:
                    5a:bf:55:75:8b:9e:3d:61:08:7a:18:35:0b:12:ea:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9A:C6:66:FA:94:96:C6:2E:E8:B0:7C:65:F1:1E:37:77:F9:5C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca2310a7-bdf7-3b65-9373-030d07dab3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:dd:b6:76:09:c0:41:b7:4c:68:13:0a:91:0c:b6:8f:b2:29:
         b8:9d:3d:1e:19:0d:28:1e:b2:2b:fd:85:d3:8c:40:02:07:f8:
         f8:74:fd:c1:3b:59:67:2b:46:ae:7c:6f:1f:7a:00:c0:fd:5f:
         07:cf:d9:06:b4:ac:da:98:cf:4a:4a:17:08:27:87:02:a6:a5:
         3d:0c:ab:c0:4e:e1:a3:2f:71:01:c3:7b:e4:62:80:ef:f6:85:
         ae:ef:53:a3:43:6c:be:ea:0f:d6:77:a5:6e:ff:bf:4c:62:2a:
         46:6e:4c:9a:c7:be:cb:1b:e6:c1:93:63:7b:d3:f4:ee:bf:c7:
         f8:f4:23:f4:72:b4:86:d6:a7:06:df:1d:13:6e:92:3e:ca:b5:
         80:5c:c7:1f:8f:53:de:37:a2:2c:0f:59:74:f3:38:56:8e:38:
         f0:4a:7e:47:61:02:13:69:13:71:f7:0e:ed:86:e3:11:d3:13:
         9a:b9:1c:c0:26:a7:4e:5b:e7:0d:6f:12:e5:f5:0f:09:63:d3:
         c0:b9:8a:b3:78:de:45:7d:08:e8:2e:98:0e:78:94:28:18:2e:
         f6:2a:fb:7f:94:68:4d:b5:dc:7f:7f:1b:fa:32:c8:5e:f7:fd:
         14:7d:c5:3e:92:98:3e:c1:9f:23:7f:cd:6c:87:6e:ac:22:19:
         fd:c5:04:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:11 2025 by rpki-client