Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71b31eb7-eef6-3416-af20-9637b4111edb.roa
File:                     71b31eb7-eef6-3416-af20-9637b4111edb.roa (raw, json)
Hash identifier:          PTHsxhTafT5s9U8MOlQVgaTtoI55hqFXDSxsB4AoZHU=
Subject key identifier:   38:95:AE:84:9A:B6:56:9F:E9:3F:1A:D8:B8:85:5C:A7:5E:15:52:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7D87C8D533137644FA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71b31eb7-eef6-3416-af20-9637b4111edb.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7d:87:c8:d5:33:13:76:44:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=635012e0-5985-4917-809f-b886339b5f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:d4:d4:a7:c4:cd:ad:90:88:bf:68:1f:74:
                    44:2d:7a:a6:0b:14:54:54:96:6b:53:79:22:4c:8f:
                    b8:bc:6a:df:4f:d6:5e:cb:20:98:d6:a1:55:4b:31:
                    81:12:d9:2b:d2:f8:00:79:83:04:d5:0c:00:c0:67:
                    66:88:51:4a:9e:cc:82:43:ac:41:d8:5a:36:e8:33:
                    9a:ec:cd:9e:76:5c:8b:11:9d:71:ca:56:e6:51:ad:
                    b9:85:4f:28:36:f6:35:d2:2e:b8:0f:70:e2:0d:bb:
                    75:5d:4d:d4:d6:b9:a9:6d:d0:48:27:c2:cc:27:92:
                    8b:e4:8d:c7:bf:f1:a8:c9:a0:ed:51:1b:5a:87:df:
                    8d:d2:31:b3:a7:c3:85:e5:f4:e4:cc:86:f5:2f:25:
                    9c:f4:9e:52:40:97:d2:c7:aa:8d:dd:07:fe:94:e0:
                    0a:62:ed:81:0a:21:83:ff:06:51:21:bf:49:2c:ea:
                    c8:ed:68:d8:bd:a5:86:f6:09:ae:26:13:06:7f:eb:
                    9b:36:3f:b8:af:23:30:fe:3f:ba:1e:4f:92:78:00:
                    a4:a8:49:8f:a0:a5:e7:56:01:2d:d0:55:d1:d3:90:
                    89:9f:22:14:f4:89:5d:a1:4d:c6:74:98:7c:f5:13:
                    a2:7e:4f:76:9a:6c:81:d6:d3:94:0f:bb:fe:16:08:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:AE:84:9A:B6:56:9F:E9:3F:1A:D8:B8:85:5C:A7:5E:15:52:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71b31eb7-eef6-3416-af20-9637b4111edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:1d:a5:fb:45:f5:94:c8:92:34:75:23:aa:35:3d:93:7e:c3:
         b8:a8:49:0f:db:4a:d7:16:0c:e2:bf:a7:7e:a2:c8:6b:52:05:
         62:f6:51:5a:28:b7:aa:52:0a:57:4d:7e:57:c7:72:a2:ae:8d:
         1a:be:af:44:3c:d8:d3:03:ef:97:6e:d1:44:f9:bf:b1:1e:5e:
         20:02:aa:9e:2f:a8:9f:87:6c:ff:6d:9b:a8:ce:f2:8a:d4:e7:
         d8:b9:8e:79:bf:02:3c:ba:43:4e:d0:6a:a4:4f:89:e0:23:c9:
         b8:fc:fb:da:1d:7d:45:73:0b:4e:36:34:57:6f:a9:37:79:c9:
         4c:a8:28:4b:06:a8:f7:89:ec:da:6b:26:d8:a9:a5:19:64:14:
         bf:20:2f:6b:d4:ab:09:1c:40:71:9f:cc:b5:85:ed:ac:72:42:
         8d:73:4f:78:e8:eb:89:24:e2:03:3c:41:f5:ac:64:ca:2b:50:
         98:1d:6d:6f:1e:6e:94:5c:30:f6:cb:91:a9:86:f8:c6:1b:63:
         7f:1a:74:a3:30:0b:c5:9b:f9:5d:9f:a0:72:c1:ff:46:cf:1b:
         b7:60:f2:cf:41:01:cc:7a:9d:85:38:ce:42:11:40:78:51:b1:
         9a:72:e8:e0:f0:fc:ba:3b:26:40:41:39:3a:1e:1c:71:44:20:
         00:e9:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:53:35 2025 by rpki-client