Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b5d89cf-ec4f-31e9-bd03-52f32f50bf5e.roa
File:                     0b5d89cf-ec4f-31e9-bd03-52f32f50bf5e.roa (raw, json)
Hash identifier:          uaOBUAusBxmpGIcudfzM7BeWSTBqUxR5Kb2V1wj+drg=
Subject key identifier:   8D:C3:E2:CA:13:84:CA:4E:12:8F:30:C6:2A:94:5D:9C:A8:33:9B:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA84231E3FE9DBAD9DAC98
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b5d89cf-ec4f-31e9-bd03-52f32f50bf5e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.197.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:84:23:1e:3f:e9:db:ad:9d:ac:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2d9e80d5-347b-4e7d-bfdf-3e79eefe823f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:c8:82:e3:51:f0:45:f4:8f:de:42:63:ce:
                    58:57:e0:5a:32:7a:81:d1:aa:9a:9e:fd:c7:ae:87:
                    91:79:0e:88:ef:1f:e4:8c:90:52:d6:92:c2:a4:2c:
                    54:b1:59:42:c6:d0:e2:e0:29:57:fd:1d:a4:91:a0:
                    b5:04:d5:65:ba:ec:d9:07:91:85:6d:b9:a7:d9:aa:
                    d9:5b:19:4c:7f:5d:c8:40:8c:c1:9e:07:c4:a3:44:
                    f5:74:c8:d2:97:48:bc:40:49:85:f4:c1:40:f3:66:
                    16:7e:93:0a:30:71:e8:37:2d:2e:ec:8b:28:9b:1e:
                    b5:86:4d:dd:0c:e1:95:98:76:48:00:ea:6c:36:e4:
                    cb:98:cd:48:e3:8f:cc:75:e1:e0:2e:c3:cc:46:e0:
                    31:70:67:97:fc:68:cf:0b:24:6c:33:86:e7:f8:0c:
                    0d:ed:db:23:26:7a:85:8c:f7:7d:54:5c:8a:e7:59:
                    bb:2b:60:7b:55:c3:ae:73:37:05:71:be:4f:a8:0f:
                    8b:3f:d5:03:3f:f5:50:65:99:84:05:58:b6:a3:5d:
                    c2:c3:c0:52:2f:b5:47:e0:0f:df:d9:97:45:82:91:
                    3c:31:0d:38:66:15:9b:50:32:3e:d0:1c:00:e1:d8:
                    6a:37:17:02:cd:b2:47:65:3e:03:a3:54:1c:a5:78:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:E2:CA:13:84:CA:4E:12:8F:30:C6:2A:94:5D:9C:A8:33:9B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b5d89cf-ec4f-31e9-bd03-52f32f50bf5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:64:a1:8d:19:f9:f9:83:1b:54:02:9e:15:7a:1a:cc:92:
         8e:03:b3:32:eb:76:d5:7a:f5:6b:af:c0:f2:1c:91:4c:54:a0:
         6e:a4:71:81:cd:cb:b5:ee:e9:86:23:27:d2:72:96:9d:6f:ca:
         56:09:06:1f:f3:93:5b:0a:bb:4b:62:3a:d1:da:d0:97:1c:73:
         30:db:61:77:be:d1:bc:bf:95:29:80:3b:aa:32:0a:41:d9:a7:
         98:d8:76:50:ff:cb:08:7e:6f:c5:29:a4:65:24:68:ec:7b:52:
         4b:0b:95:4d:59:17:79:99:32:23:26:14:0c:e2:62:3c:c3:43:
         27:52:39:9e:e1:a8:4b:9e:b1:88:47:a5:21:6c:99:e9:93:a5:
         44:1f:99:31:0f:c2:2e:32:b6:52:ed:f4:19:0b:84:b6:4b:95:
         d8:26:09:4a:32:9e:52:35:b6:64:b7:07:61:01:d1:a9:7b:c6:
         70:f7:de:08:b5:0c:8a:65:d6:35:89:30:d7:f4:1a:60:f9:17:
         de:7e:91:89:63:05:82:3e:e0:41:c0:47:d4:b0:3d:05:1c:e9:
         81:73:df:dc:89:0b:78:51:03:05:f5:37:cc:f1:b7:bd:ed:5d:
         b4:49:b5:2f:ca:d6:df:8e:e3:8d:81:33:f5:59:81:4d:e0:4c:
         ea:ea:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:25:30 2025 by rpki-client