Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fef971a-a65a-3039-93a7-22a9c9bdca59.roa
File:                     2fef971a-a65a-3039-93a7-22a9c9bdca59.roa (raw, json)
Hash identifier:          y+lefnkwGKMa90u/zJReYuBRzRfdZbq5S6Ii2geKUXM=
Subject key identifier:   A8:5D:31:3A:54:D7:1F:59:C3:B8:BA:9E:A4:C4:22:71:1F:6C:9C:91
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7F2A4686FED7231CD3E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fef971a-a65a-3039-93a7-22a9c9bdca59.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7f:2a:46:86:fe:d7:23:1c:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=14e6a354-867b-4c91-9315-5f01e8f690dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:5a:5e:c9:e9:60:05:f8:df:5a:8f:f5:77:
                    96:37:14:9b:25:48:dd:fa:cb:40:20:e4:8e:bb:d8:
                    6c:fd:d9:64:70:da:78:08:6c:69:b4:9e:24:a0:fd:
                    2f:4d:29:80:8e:ef:0b:4e:53:a4:3a:f8:82:a0:67:
                    ae:aa:07:bd:cf:db:21:7f:5a:d5:45:0f:87:6f:73:
                    57:fa:fb:73:74:3e:4e:14:c4:0d:6d:02:74:e6:0f:
                    7b:ed:cc:d4:4d:c9:35:82:39:e8:d1:44:1c:31:39:
                    e4:a8:05:24:f0:6e:2b:61:4b:87:68:02:fb:c9:fd:
                    6f:f1:e0:c4:09:8e:87:6c:58:6c:dc:48:54:d9:f7:
                    d3:ec:15:13:a2:a7:df:b6:68:13:75:19:39:a5:87:
                    6d:4b:0d:c7:4a:62:62:3c:48:de:1e:51:16:cb:53:
                    f5:a6:10:9e:1b:a0:6f:e3:15:77:44:11:1f:00:4c:
                    51:c8:92:5a:c7:08:b1:d8:4e:ec:36:6a:29:56:de:
                    60:5c:67:b0:dc:52:ea:08:21:a3:1e:b7:fe:f5:dd:
                    62:e8:52:21:0f:43:2e:3e:b0:23:e3:3e:e6:34:f4:
                    f4:67:f8:08:9b:56:2d:83:e9:86:c1:f8:98:6a:44:
                    b0:43:71:73:0a:30:32:43:ab:03:40:aa:e3:cb:53:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:31:3A:54:D7:1F:59:C3:B8:BA:9E:A4:C4:22:71:1F:6C:9C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fef971a-a65a-3039-93a7-22a9c9bdca59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:51:53:73:d3:c9:a7:9c:dc:7b:8d:ed:2a:6b:cb:6e:ce:d2:
         c0:04:54:8b:87:e6:b5:f2:18:1e:a0:f0:a6:f8:fd:79:2b:02:
         ef:d9:b4:9f:55:71:b6:43:96:eb:60:af:76:16:e4:d4:eb:7a:
         4a:8c:3f:24:2d:92:b5:0f:38:d1:08:6f:03:89:15:17:49:96:
         d1:d7:4e:41:c7:5d:c6:57:8c:23:ab:8f:88:44:3e:48:36:77:
         fa:ac:2f:3e:96:ee:99:30:66:4f:ae:e4:77:5b:a9:75:87:b4:
         4f:e7:19:9f:35:0e:4c:98:80:c8:3a:c4:7a:54:61:82:15:bb:
         bb:12:08:9e:4c:dd:bb:ec:38:10:e0:44:04:05:32:ac:1a:dd:
         f1:10:34:85:6a:e5:5a:11:e9:09:1d:46:ca:59:c9:68:84:fc:
         cc:ce:a4:c2:15:8e:96:67:3b:99:90:63:6b:54:0d:d8:a7:c6:
         11:1a:46:be:1f:66:b2:88:db:9d:45:b6:23:18:25:5c:45:cf:
         c1:04:1e:fe:75:15:3e:31:6f:57:33:e2:42:6b:33:50:63:5d:
         1c:1b:30:1b:41:6f:50:c2:dc:64:14:ad:d5:74:e8:09:c1:38:
         2d:9b:8f:4a:c6:2f:e9:22:5f:d9:eb:c9:4d:5f:65:1d:92:29:
         75:f5:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:44 2025 by rpki-client