Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9900e476-5bed-3c68-9c91-455d9e7f05dd.roa
File:                     9900e476-5bed-3c68-9c91-455d9e7f05dd.roa (raw, json)
Hash identifier:          TVCsUyMBOtZ1bOkKJfAz8x9Ge3REXombVJW3/3ME+mk=
Subject key identifier:   AB:55:45:C6:FC:8F:D3:40:30:71:22:EA:95:13:BD:90:38:80:B4:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB62566E8EE8A9D796E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9900e476-5bed-3c68-9c91-455d9e7f05dd.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        198.45.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b6:25:66:e8:ee:8a:9d:79:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d9b14a8a-3280-4c15-a3bf-0e480092cc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:f9:6a:f4:86:63:32:2f:6c:95:a9:22:2e:
                    b2:bc:07:76:c3:2c:5e:1e:fb:ea:7e:bd:44:66:dd:
                    0a:23:72:e3:00:b4:7f:bd:a8:ec:68:ed:1c:77:60:
                    e0:5f:e8:1c:84:33:c8:e6:7d:84:ee:41:59:a0:fb:
                    37:19:d1:22:49:ed:88:bb:73:0d:65:89:7f:1b:95:
                    3d:4f:8c:5b:c9:0d:af:c4:55:99:72:49:88:7a:16:
                    d7:1d:c6:1c:59:b1:45:38:20:12:48:9a:27:d8:47:
                    f7:4a:32:e9:22:4b:0b:f2:46:fd:6d:2c:ee:ac:f9:
                    ef:57:1e:ab:85:00:08:ec:4d:6c:0f:9f:13:86:df:
                    7e:84:a9:de:5e:8e:98:ee:c8:25:ef:95:37:30:a1:
                    6b:26:43:93:52:75:1f:3b:27:f0:94:aa:ff:82:6f:
                    26:36:91:71:aa:7a:0c:0e:7a:e3:39:02:71:ab:13:
                    b1:32:bb:bd:88:9a:76:de:33:a1:0c:68:60:74:12:
                    92:f8:33:58:e1:3f:67:f0:3a:2f:b4:b9:b8:07:79:
                    5b:5c:d2:68:8d:e9:3e:0a:e7:da:56:74:68:68:91:
                    e0:5c:91:46:70:5a:f5:6d:f5:86:77:37:6c:e2:3c:
                    b5:cd:04:18:78:d3:09:91:28:12:b5:0e:f7:c9:fb:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:55:45:C6:FC:8F:D3:40:30:71:22:EA:95:13:BD:90:38:80:B4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9900e476-5bed-3c68-9c91-455d9e7f05dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:4d:69:88:1f:f2:48:73:a5:21:76:bb:8d:1d:12:6b:59:
         b5:b0:8f:60:ff:00:cd:9d:87:18:5b:07:8b:b4:1c:ad:33:56:
         1b:81:a5:99:72:ca:12:0f:91:db:e1:f5:94:57:b4:f9:06:a2:
         d8:71:da:19:1d:29:c8:20:1c:3d:d2:87:8b:fa:cf:4f:fe:a0:
         9f:35:d2:d4:ec:17:7e:27:aa:fc:01:34:77:0d:56:7d:c5:ca:
         c8:10:c0:98:9a:18:e0:81:e7:52:58:dd:31:25:c7:35:1d:53:
         4b:65:26:59:c6:0b:69:ef:c4:53:b2:8f:1c:e2:bd:45:1e:8a:
         9f:65:b2:48:ec:cf:50:98:a6:71:fe:3a:9e:85:cd:1a:9a:2f:
         2f:c6:c1:a9:80:f3:44:aa:5e:6c:aa:46:39:62:aa:f5:a0:55:
         f4:a4:f8:61:94:65:5d:57:da:d5:8f:6e:e7:eb:c0:8a:41:97:
         bb:5b:57:9a:b3:34:f5:47:9c:b9:a8:e9:3c:3c:f3:82:a2:57:
         49:fc:be:29:83:12:af:8c:72:75:b1:df:58:1c:a3:75:0d:25:
         13:94:1a:85:cd:4d:7a:4e:dc:8b:cb:b3:8f:44:be:7d:00:d3:
         d1:1c:6c:db:3c:57:41:eb:fe:a0:b2:90:88:cb:9d:05:3d:a9:
         7e:8f:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:19 2025 by rpki-client