Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d2b01da-e529-30c4-9881-489d8bea435f.roa
File:                     1d2b01da-e529-30c4-9881-489d8bea435f.roa (raw, json)
Hash identifier:          cMppB5c9r3N23Li5obcZEjS7662PvaRNDM2GYH2I+Gw=
Subject key identifier:   35:1F:B2:7B:3E:46:E2:E7:7D:49:1C:FE:E1:8D:79:6B:A0:6E:D3:14
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1CAB38D530969ACCCA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d2b01da-e529-30c4-9881-489d8bea435f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:1c:ab:38:d5:30:96:9a:cc:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=743bcbf8-b77a-41ad-b7f2-910ae50cda83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:57:53:0c:51:ef:76:75:6b:14:78:93:96:03:
                    6a:ea:d9:00:46:06:88:62:e9:0c:6a:97:ad:af:07:
                    e9:bd:fb:72:72:6c:cc:41:93:21:b1:16:12:b7:e8:
                    7e:49:ab:b6:35:cd:b7:bd:88:87:d6:08:25:16:e1:
                    ee:b1:88:fe:ee:3c:10:8c:2f:e0:b0:d3:5c:92:16:
                    c0:29:ce:03:94:0f:77:a4:ea:2f:f2:63:29:97:34:
                    18:8b:e6:c2:d7:fa:7a:18:05:bb:b7:81:fa:76:1b:
                    a9:1f:7a:67:2d:00:6a:54:f8:13:40:f2:84:0b:80:
                    ea:b3:06:cc:c9:e4:0e:6c:6d:7b:bd:6a:31:f3:59:
                    ab:83:49:e4:a6:cd:57:66:12:e3:b4:34:51:63:f0:
                    66:0f:84:1c:ec:d4:b1:33:8f:01:24:50:16:f9:24:
                    95:17:78:fd:d1:04:28:99:0d:4f:6e:b9:18:6c:7e:
                    49:5e:a8:e1:cc:98:4a:fc:a1:9c:a2:b0:63:73:ae:
                    09:01:39:97:62:ad:07:99:a8:54:a3:c0:bc:d8:c5:
                    7c:d2:39:17:25:15:f4:5c:82:81:7f:43:51:4f:97:
                    03:fb:2f:90:c8:ab:47:78:5c:a2:fd:e5:1a:9f:03:
                    de:6e:b5:e4:1f:44:b8:c5:a8:98:69:20:bc:e7:e4:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1F:B2:7B:3E:46:E2:E7:7D:49:1C:FE:E1:8D:79:6B:A0:6E:D3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d2b01da-e529-30c4-9881-489d8bea435f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:3f:9c:c8:00:9b:98:69:ec:4b:bf:e0:7a:8f:14:58:e6:
         18:b4:ed:6e:e5:ff:22:6a:76:5f:7f:42:ee:0f:de:d4:94:83:
         ee:85:ed:2a:79:b0:f1:a8:9e:ee:1c:a0:f0:52:83:25:e3:1a:
         76:17:a2:9e:72:80:84:27:a4:c5:5e:be:65:02:49:10:04:97:
         d6:7b:28:91:69:28:f8:e6:c8:67:af:c2:e8:fc:44:fd:f4:18:
         4b:4f:89:58:7f:0d:a8:18:a4:35:2f:bb:3f:1d:3a:f2:c5:bd:
         29:a4:88:c0:53:9f:6e:99:65:27:f3:fc:91:b6:a6:50:09:ce:
         7e:de:42:9d:9d:d3:f0:c9:ea:1f:07:b5:6e:2f:7c:9c:97:53:
         0d:f5:fd:33:58:34:3d:53:ce:a3:dd:7b:0a:85:2b:85:5c:4e:
         c3:35:95:29:ac:ab:ba:00:51:0b:33:4b:8a:58:04:9b:d0:ab:
         72:0a:47:b2:a9:d8:75:89:63:75:88:7f:3c:aa:60:0c:7b:13:
         76:95:4c:6b:81:2a:b7:d8:64:1a:48:6c:40:9b:7b:e3:36:5e:
         4d:ff:17:4d:03:69:8d:9f:ee:24:a1:68:68:90:ea:8a:30:bd:
         dd:87:b4:87:1c:20:86:72:a2:28:17:59:7c:8d:69:53:ae:e1:
         d3:ea:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:54 2025 by rpki-client