Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c9e24fd-eb89-31ee-9316-40001af0c7fc.roa
File:                     6c9e24fd-eb89-31ee-9316-40001af0c7fc.roa (raw, json)
Hash identifier:          SaiYUQxTTxVBm/7Htpfw73MRQRukPIhkLujpLyQczgE=
Subject key identifier:   7A:F9:B6:9B:2B:49:A9:88:CD:3F:85:DD:76:0A:07:9F:BB:A8:64:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1D827706DF532B318A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c9e24fd-eb89-31ee-9316-40001af0c7fc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:1d:82:77:06:df:53:2b:31:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=4a80b730-b4da-4730-a3fd-d78d3180a3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:fe:ce:dc:a9:70:e1:1d:bf:23:8d:d3:c8:
                    48:1a:a8:98:81:49:fe:5d:04:06:71:e3:11:f5:1e:
                    85:74:80:e4:42:78:01:51:1c:6a:57:7f:31:2e:6f:
                    50:14:0e:a9:e2:72:fc:fd:30:1c:ab:ef:d0:bf:e6:
                    70:fd:f8:72:1f:64:63:c3:f9:c5:56:c9:e8:21:97:
                    7f:fc:08:ac:09:1a:01:55:a9:ed:04:56:74:b2:d6:
                    f2:09:f3:18:ff:94:e7:d7:bd:b0:92:6e:43:9c:af:
                    87:52:f4:72:13:94:21:2e:eb:16:6e:2e:58:5e:21:
                    c9:61:da:37:b0:2c:62:9b:e9:93:8e:62:22:e8:72:
                    63:0e:39:d9:4c:d4:2d:ea:af:4a:30:ab:5e:66:de:
                    a7:8e:8a:97:b9:b6:ab:56:e5:c4:9d:38:49:ec:6b:
                    25:4b:d5:78:92:75:63:13:1d:56:96:1c:f4:c4:01:
                    51:fc:0c:8d:09:bd:8b:41:08:b1:5c:81:2e:a7:db:
                    be:5f:c0:b8:9e:2f:d6:79:7e:62:54:ef:c8:c9:df:
                    57:77:66:14:3c:7c:70:5b:37:cb:a8:ef:89:8a:f6:
                    46:61:c9:35:86:6d:6c:27:55:7e:72:26:b5:49:74:
                    87:1f:63:b0:78:fd:10:90:7a:8b:67:5b:87:91:89:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F9:B6:9B:2B:49:A9:88:CD:3F:85:DD:76:0A:07:9F:BB:A8:64:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c9e24fd-eb89-31ee-9316-40001af0c7fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:37:6d:fa:89:68:59:6a:90:f7:88:ec:8b:83:88:bb:e0:23:
         f9:b9:27:a1:20:28:0a:b6:76:2b:bd:5d:23:f4:71:7e:7f:d2:
         5a:15:60:7c:d0:8f:46:7b:eb:2a:a7:ad:04:b8:23:a9:b0:77:
         db:ad:5b:14:83:0d:c3:e4:f0:b3:d3:3f:37:11:de:34:1a:88:
         d4:27:ff:fe:98:1f:4b:69:53:55:f9:c8:fc:f7:5f:45:24:7c:
         07:f4:6b:68:d4:ef:b0:98:9e:86:a7:3a:be:aa:c0:d3:f1:3b:
         98:5a:8f:39:b9:77:72:47:6e:ef:b6:96:a8:f9:72:52:90:51:
         aa:f4:c1:ad:e3:23:9c:22:a5:b6:82:fe:0b:49:d6:35:e0:70:
         29:fe:e2:1b:6c:0a:7a:9b:a7:48:11:ba:05:75:ee:4c:91:f6:
         da:93:49:a5:da:2b:1a:dc:25:9f:f8:28:f9:a1:f7:ff:82:28:
         8e:43:e2:8d:e0:9b:45:e5:07:f1:04:23:f9:fc:6a:c1:df:35:
         6b:bc:8b:36:20:f3:e6:4a:b9:f4:7d:2c:4b:24:b9:9a:da:05:
         85:d1:76:e1:b1:c2:77:61:b7:9d:47:84:27:d8:e4:a7:ae:dd:
         dd:a4:b8:38:a5:86:ad:57:a5:51:8a:28:c5:f6:31:0b:62:48:
         f4:d1:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:20:43 2025 by rpki-client