Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/332d63c2-3999-31a4-8a15-60aca8e080af.roa
File:                     332d63c2-3999-31a4-8a15-60aca8e080af.roa (raw, json)
Hash identifier:          NET3+YQzEEdKM1WdoMejySFEHc32AV9E83vOFuUELFA=
Subject key identifier:   97:41:B3:35:3D:9F:B5:ED:C1:F3:39:D5:AD:18:87:0B:A3:46:B1:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7E576F4BDE4FF4A98200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/332d63c2-3999-31a4-8a15-60aca8e080af.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7e:57:6f:4b:de:4f:f4:a9:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=19944d99-3765-48cf-bf55-4752c73ff02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:1d:2b:fa:b9:be:52:15:97:df:a4:ad:72:
                    ef:64:66:65:40:0a:08:21:6b:df:ee:43:8a:f7:5d:
                    e1:bd:49:00:04:d3:9d:79:8e:a7:ac:5e:7f:c7:00:
                    60:31:fa:34:33:88:01:a8:2d:0b:67:37:39:0c:59:
                    42:d1:1d:12:0a:76:a1:ae:de:47:4e:cb:9b:22:b6:
                    05:59:0e:82:76:db:d6:86:25:e6:1a:d0:1a:a1:a7:
                    fc:6f:46:3e:20:af:d3:84:c6:e7:6c:78:b7:16:e6:
                    d9:3c:2e:41:2c:cf:9d:2a:cb:af:95:67:98:38:d4:
                    8f:27:66:2c:aa:a4:76:cf:0e:fd:95:d1:44:5d:88:
                    f9:8a:a5:38:72:0d:4b:58:49:80:2b:a6:52:f0:46:
                    c3:41:47:a5:92:4f:86:5a:78:73:0b:cd:7d:1e:86:
                    35:c1:66:19:49:31:45:3d:41:bc:a0:c4:2d:4f:bd:
                    40:72:bc:99:ad:cc:e7:27:aa:ef:23:18:53:5d:01:
                    59:6d:99:cc:22:96:23:15:df:f0:ae:60:22:02:09:
                    d4:ae:75:15:49:b1:71:56:14:a5:23:56:2a:56:69:
                    96:8c:8f:39:de:ad:91:00:ce:fb:cb:81:2c:4a:ea:
                    62:a3:a8:70:d4:56:18:dd:53:d9:ba:09:28:29:34:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:41:B3:35:3D:9F:B5:ED:C1:F3:39:D5:AD:18:87:0B:A3:46:B1:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/332d63c2-3999-31a4-8a15-60aca8e080af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:6f:14:15:97:f4:f8:26:21:8b:2c:f4:bc:15:5d:96:7b:
         f1:65:d9:4f:ba:62:66:c9:de:a7:17:19:8b:a4:8a:d3:39:0a:
         71:7c:95:e9:be:da:93:ec:0f:e0:7f:a9:bd:99:cc:ac:b2:31:
         3c:e9:da:3c:e6:80:67:c0:3c:f7:94:85:f9:62:34:53:d0:dd:
         85:d0:d5:11:1a:54:6b:9b:a4:8e:5f:15:1e:c0:d2:c1:12:a6:
         3d:76:55:64:02:ea:e3:bd:c7:0a:2e:d2:a0:a4:ff:bd:10:03:
         62:ae:6f:40:18:1f:85:69:48:e3:28:c2:a8:49:26:44:4e:3e:
         6f:23:1e:d4:e0:57:38:39:0c:18:ef:f5:54:d2:03:95:eb:c4:
         56:6d:10:e9:4e:d7:91:44:8b:ee:18:6b:69:31:2b:7a:80:a7:
         b6:97:09:03:ff:2a:24:74:2a:f5:b8:7d:bc:0a:c4:69:45:1e:
         fa:e9:64:cf:d2:5a:1c:5b:f2:c8:cb:f2:97:65:6a:6d:40:b9:
         5d:9a:04:52:d3:ec:b4:04:b3:c4:a9:67:8b:6a:43:ae:35:fa:
         c0:04:52:b3:2a:d9:44:70:d8:cb:2f:59:51:f7:bf:ef:94:ff:
         a6:21:8b:a2:0d:e0:d3:71:f1:9a:dc:2d:bc:98:48:96:2b:50:
         63:30:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:23:07 2025 by rpki-client