Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f58105-2b45-391e-b560-fad84823eb96.roa
File:                     a6f58105-2b45-391e-b560-fad84823eb96.roa (raw, json)
Hash identifier:          SdbLPKwPqnSyeltsd1h9N+brixMcYefISYuK9phdB0g=
Subject key identifier:   90:35:84:16:6D:6A:88:57:8E:4F:F9:96:71:B6:2D:15:6F:17:F7:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA86AC92604C4E2AB3B240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f58105-2b45-391e-b560-fad84823eb96.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.197.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:86:ac:92:60:4c:4e:2a:b3:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ac6108e7-4e05-4f74-8798-ca9424f85cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b9:a7:cb:8d:13:ce:c3:bf:6c:3c:86:23:66:
                    93:81:e8:dc:4e:a6:ea:98:8b:29:e7:13:89:7a:36:
                    92:8f:36:8e:5c:67:c2:4c:92:f5:8b:18:91:1f:75:
                    6c:88:c8:c5:f5:e3:4c:cd:20:5e:34:79:85:15:77:
                    e8:c9:d5:8b:08:e3:3d:ce:e9:4c:b1:a8:2a:67:35:
                    3d:9c:5b:9e:48:c0:9f:94:5b:f6:29:78:56:b6:d1:
                    56:b4:45:89:87:ab:2d:ea:f3:bc:54:23:1d:55:51:
                    b2:f8:89:8e:dd:9a:77:12:fa:c7:02:fe:13:64:b6:
                    65:2e:ed:4e:0f:9b:38:c6:b3:a1:9a:cd:9c:94:1e:
                    3d:b3:d5:bf:2c:61:63:da:40:30:60:10:41:ea:7e:
                    27:ce:60:c5:ce:f4:f3:cd:14:e9:62:c4:e8:c1:8a:
                    cd:b2:e5:1d:c3:8b:fd:8b:86:dc:08:9f:b5:f5:f0:
                    3e:69:f7:0a:b6:a8:1c:46:c4:ed:05:20:d6:db:b8:
                    4a:40:70:74:8a:75:97:24:1a:95:80:21:81:29:65:
                    7a:74:68:e8:48:78:b5:4c:da:18:fb:6d:d7:9d:2e:
                    00:9f:a9:46:77:47:d8:fc:f4:b9:91:be:81:48:82:
                    57:7d:c5:f6:87:07:80:77:ad:60:e3:f2:23:e3:3c:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:84:16:6D:6A:88:57:8E:4F:F9:96:71:B6:2D:15:6F:17:F7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f58105-2b45-391e-b560-fad84823eb96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:5f:d1:7b:2e:31:21:eb:c4:b4:77:9f:da:41:e9:5c:ea:
         35:6a:fc:f8:cb:d6:1c:59:3d:e6:a0:82:6f:9b:3e:31:63:46:
         6a:d0:c3:35:bb:dd:fc:de:bf:58:2c:24:ea:2d:d0:b0:bc:44:
         6a:bd:78:c4:ee:df:ed:7a:18:22:dd:3f:72:2f:c7:af:6a:86:
         7a:07:95:b7:24:f3:eb:fd:c9:0d:70:9f:40:90:84:46:fd:0d:
         79:08:fb:83:29:28:25:e8:29:1a:cc:40:c5:c0:57:79:fd:53:
         c6:7b:1f:98:f2:8b:f2:10:68:1f:e1:ff:85:54:c8:65:32:d2:
         c2:38:e9:46:af:ec:d6:d3:08:4e:6b:91:10:89:71:ad:85:18:
         1b:cd:e3:50:91:dc:22:80:27:57:bc:ac:a7:60:04:65:e3:82:
         14:78:eb:a0:0d:90:4e:6e:53:a2:72:93:1c:6d:86:f6:f6:d9:
         98:a9:68:36:92:fe:3b:21:70:de:6d:27:7e:a5:b3:b0:7a:4e:
         86:19:da:14:55:13:e0:f2:9d:9b:01:81:69:1d:a7:3d:1f:eb:
         93:aa:fb:60:b7:8e:99:04:4f:77:0f:09:e5:da:2d:c9:23:72:
         c6:d3:e8:a9:10:90:3b:b0:55:42:78:43:aa:de:4d:7c:80:16:
         32:62:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:58 2025 by rpki-client