Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17699418-fd5e-3953-b45f-ced88c522fa6.roa
File:                     17699418-fd5e-3953-b45f-ced88c522fa6.roa (raw, json)
Hash identifier:          M4FO31IHdfs6cTmHQOhSqAZnqXiOLtPBf/9t6FVgLCw=
Subject key identifier:   6B:F7:4E:19:FE:D4:B6:AF:58:0B:4A:E4:55:DE:C1:7D:B0:B6:EB:1C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB21F2B167360954897300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17699418-fd5e-3953-b45f-ced88c522fa6.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.197.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:21:f2:b1:67:36:09:54:89:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7da7c12d-29c6-455a-a9e4-6e2a461a803b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:0f:be:8e:f0:85:2f:ed:c4:c9:43:1e:ec:
                    2b:88:78:48:9e:91:91:ec:f0:46:51:e6:ec:d7:35:
                    66:e8:1f:86:60:90:c6:0b:71:24:7b:f8:15:93:2e:
                    1c:d9:c0:d6:c8:14:30:9a:96:1f:c2:13:b5:d5:68:
                    44:5a:d2:6d:30:91:11:7d:01:56:ab:c4:97:4c:55:
                    72:8e:36:a0:5d:50:ce:b8:be:af:b2:4d:81:84:48:
                    47:0b:c4:26:70:00:25:ea:20:c4:4d:5b:49:a8:5f:
                    92:e4:f5:87:44:52:f9:59:df:f6:44:70:b4:ef:61:
                    37:00:2c:74:f4:16:40:c1:97:3b:c6:76:54:b6:70:
                    0f:0b:64:de:02:58:48:a8:8f:1f:11:4a:5c:74:c2:
                    bb:50:77:a0:98:97:62:38:25:42:15:d0:78:77:08:
                    ff:f4:3c:ae:62:94:3a:53:3e:1e:96:26:9b:24:2f:
                    5b:fb:70:2f:8c:9f:41:80:ff:6a:b6:c4:88:57:34:
                    76:5d:1d:96:96:90:52:6e:75:0c:84:3c:1c:da:e3:
                    f3:fd:d7:b3:14:4a:21:ed:fe:8c:59:ea:5a:1f:0c:
                    29:a2:34:6d:23:4b:ef:07:b0:11:52:e0:39:5d:cf:
                    9a:03:3d:9b:43:c5:c5:43:a0:38:66:40:05:0b:51:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F7:4E:19:FE:D4:B6:AF:58:0B:4A:E4:55:DE:C1:7D:B0:B6:EB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17699418-fd5e-3953-b45f-ced88c522fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:b2:97:c7:55:c1:71:f5:b9:05:d2:32:2a:8c:4e:16:a4:
         18:20:98:a4:0a:15:4d:2f:25:8c:48:d7:7b:75:83:03:7f:47:
         d6:2c:7b:d3:3b:17:89:7f:5b:02:04:e6:f1:b8:47:41:8b:a1:
         9f:e7:dd:08:30:d2:d2:c5:a9:98:aa:84:03:81:c5:dc:7a:cb:
         cf:f9:ca:64:ac:7f:65:a1:ce:0f:bb:2a:6a:3b:7b:50:26:55:
         f3:ba:58:86:96:c5:93:b7:44:de:05:fc:c4:e8:dc:50:b4:47:
         24:ec:88:df:a0:1c:53:6a:81:7b:5b:64:3e:8e:c0:6c:f4:e6:
         bd:a8:dd:b4:60:b8:a7:a8:d4:49:af:43:8f:eb:ff:74:17:86:
         c9:e0:ea:a5:47:ac:84:b1:86:7d:c4:43:b5:04:50:2d:9a:4d:
         8c:bd:f7:fb:7c:14:40:7c:15:60:da:b9:fc:98:5d:7c:7f:a3:
         9a:24:2e:3c:12:d5:6b:e3:c7:fe:c0:69:fb:d3:7f:e1:a2:21:
         05:df:14:86:ce:bc:94:38:a4:5d:81:2d:49:90:e6:ab:60:8d:
         a8:df:ef:14:1d:2a:ac:b9:2b:ba:10:bf:a1:6e:7e:4a:29:7c:
         00:05:e8:00:86:54:30:bb:da:56:b7:ab:85:1c:5c:4b:93:6d:
         db:b3:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:33 2025 by rpki-client