Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa
File:                     2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa (raw, json)
Hash identifier:          ZhSyjIHwwklXOt39snnPZqBOEuZ8OqaPkCgdOJxHgNo=
Subject key identifier:   9B:1B:45:32:02:85:2E:67:36:3F:A1:94:BA:00:A3:94:61:3D:12:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2A66303432EB8F670400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.198.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:2a:66:30:34:32:eb:8f:67:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b7bae553-6b96-4eb7-8a8b-6e723ef93f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:63:3d:14:5b:03:c2:2f:9b:4a:31:23:2f:
                    1e:78:1e:de:4c:fc:60:e6:3d:6f:3b:c9:51:05:df:
                    ab:85:f8:cc:f4:4f:59:ba:fb:53:41:be:a6:cf:ba:
                    c2:52:33:32:c1:66:94:3b:53:fe:9b:a3:41:0f:9b:
                    03:04:54:fe:03:c9:b9:6e:a9:e9:25:0e:02:77:00:
                    e8:25:52:13:87:2e:9e:75:29:c3:9b:c6:cc:5d:41:
                    b4:ca:ac:b0:37:85:14:6f:c7:9c:5e:62:d4:5b:4e:
                    36:81:70:62:1a:b9:19:a6:2b:5c:74:51:42:ee:f1:
                    35:dc:c1:9a:45:68:77:3b:c0:b2:a5:33:dc:56:65:
                    ae:f3:75:ee:e4:c1:fd:08:5d:3f:94:7f:14:e0:40:
                    2f:eb:48:18:b0:92:71:68:36:6c:a8:bc:2f:9d:f9:
                    a8:87:34:26:ae:02:f3:f1:d7:66:f2:aa:5e:54:4e:
                    49:77:8e:2f:dc:6f:9c:9c:e4:c5:b5:f9:da:8c:05:
                    90:f6:20:d3:ed:f4:5b:b7:46:af:d1:38:c5:19:de:
                    db:03:ee:bc:93:c4:ea:89:f4:dd:a3:b0:80:87:0d:
                    39:7d:00:37:34:89:3b:31:20:17:21:3f:1b:49:5b:
                    75:22:8e:8b:b1:aa:89:60:92:17:b3:a7:6f:61:68:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:45:32:02:85:2E:67:36:3F:A1:94:BA:00:A3:94:61:3D:12:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:08:59:ed:e8:41:78:d1:53:09:62:93:c6:12:77:8f:94:cf:
         ba:a5:ca:1a:15:f5:9a:60:38:42:b9:fd:19:c1:c4:ba:12:d1:
         2c:6c:b2:9b:84:65:01:03:25:8a:fc:2e:6c:40:0f:3f:8a:b2:
         ab:45:27:bc:ac:51:f5:5d:59:a9:22:08:31:41:73:57:1c:cc:
         ae:c2:85:02:38:ce:af:f8:7d:62:dc:0a:bb:78:68:0b:11:55:
         ed:bc:e0:34:f9:be:73:c3:72:27:0e:e0:43:8c:47:1d:92:c9:
         20:df:e5:ae:e0:34:12:e6:bf:95:9b:0c:43:09:af:bb:29:5d:
         3d:11:7b:f9:1a:03:d3:ed:65:f2:0d:38:15:a6:43:d0:31:8e:
         a6:e0:a7:a7:18:b2:3a:cf:fc:22:30:73:7f:75:b7:09:ec:a0:
         40:20:06:89:cb:d4:b6:98:f9:19:50:e5:8e:24:f9:b0:6d:98:
         da:93:bc:bd:35:00:d2:6f:94:c4:94:9b:f1:78:98:79:93:71:
         07:a1:a9:bb:96:01:c3:0a:18:6a:4a:8b:3c:c7:ec:c6:ab:76:
         27:89:71:a9:e9:d4:1e:9e:f1:34:1d:02:93:db:41:f8:0c:b0:
         49:bd:ff:7d:4f:ae:f9:a0:f6:a7:3e:19:91:87:73:62:7a:4b:
         95:6c:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:27:33 2025 by rpki-client