Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa
File:                     5f996186-08c9-30f8-8f9d-644e0acea188.roa (raw, json)
Hash identifier:          Y5PTTA1XdKC41LBoxQf/FBTiN3IVM/A7sIB4pLgPKs4=
Subject key identifier:   24:F5:FF:18:C1:FC:80:4C:A3:43:5A:7E:10:CC:18:9D:D2:41:5C:CF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2AC14BBAC7AC413CDB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.198.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:2a:c1:4b:ba:c7:ac:41:3c:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=02f18558-fb65-472b-aca4-a856fd049c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4c:62:65:ed:e9:f2:0d:02:04:61:f4:2c:00:
                    ce:64:dd:e1:36:2c:2a:3c:52:91:db:9b:32:34:ba:
                    72:25:0c:6d:f1:68:9d:ac:70:09:d6:d8:26:c4:b1:
                    c1:19:4f:e6:ef:2f:3d:05:00:dc:e2:c5:ef:ec:d0:
                    c5:26:f9:95:da:80:b4:99:cb:d2:6f:68:33:56:0f:
                    72:48:b5:ab:41:2b:f8:7a:27:43:d9:19:3b:72:79:
                    c1:76:67:cc:ed:c0:80:fd:bc:b2:2f:cb:ab:08:90:
                    7f:d0:0a:66:a5:d3:7a:06:2a:20:e9:60:93:fc:cc:
                    c6:63:6f:02:02:5b:ca:9a:af:67:00:b2:1c:79:26:
                    af:09:ef:7d:34:19:26:0d:1b:3d:62:ba:29:93:75:
                    1c:d0:6a:62:9d:3c:2f:93:e6:76:cc:35:3f:f6:93:
                    34:83:7a:71:d4:8b:ca:d8:30:bb:57:3b:2f:91:4a:
                    68:39:c9:1f:15:ba:ae:da:5d:53:15:ea:34:db:ec:
                    6f:ea:ab:24:9d:36:d0:4b:bf:1a:f8:45:d8:c5:07:
                    f1:7e:e7:ae:d1:53:b6:c1:db:96:0c:64:b7:b6:fe:
                    1d:5c:ff:69:f8:9e:ff:32:79:fe:f5:5c:60:6f:21:
                    7a:a4:a1:53:72:59:ba:c4:27:2c:73:9f:16:5f:f6:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:FF:18:C1:FC:80:4C:A3:43:5A:7E:10:CC:18:9D:D2:41:5C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:0b:00:bc:a5:4b:cf:07:cc:8c:73:dd:9e:3e:4d:4c:4b:ad:
         47:be:90:df:91:59:3c:6d:73:fb:8f:6c:c4:1e:49:e2:c9:24:
         3c:e5:c6:b7:6c:a6:8f:25:65:65:d1:f5:9f:6e:2e:59:bf:59:
         67:98:36:f0:d6:09:e0:51:8d:ff:8c:15:86:f2:14:af:3f:8d:
         d9:db:d0:cb:0a:c3:0f:0e:0e:08:24:8d:3c:20:7d:5e:4b:83:
         61:1c:0f:02:8a:76:6b:5c:ee:a1:a1:94:4d:21:15:b8:72:f4:
         63:20:34:ae:4d:6e:de:31:2b:38:f4:55:87:b0:6e:85:7d:6d:
         93:74:37:b1:1e:77:6b:94:bf:72:e9:67:2f:a3:cf:87:c6:e5:
         51:1a:82:7c:87:76:58:1f:d3:23:19:f1:dd:52:f2:a6:97:bc:
         96:d2:92:38:f5:cd:15:af:f1:41:5d:cf:6a:86:2a:a8:72:91:
         28:d7:06:ee:84:71:a2:c4:12:be:e2:7b:bd:67:c4:b1:77:db:
         ef:18:13:6d:43:fd:80:d5:3f:f4:cb:9e:2f:ba:b6:e7:c8:9f:
         14:ae:2c:8f:59:0a:33:4f:4f:03:c1:3b:6d:37:fb:ac:de:3a:
         74:63:7c:27:7a:99:c8:63:36:31:f6:0e:17:2b:83:53:99:56:
         29:1a:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:11:12 2025 by rpki-client