Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/adaebf31-61ab-3c1d-9a31-e6b3bf9129b2.roa
File:                     adaebf31-61ab-3c1d-9a31-e6b3bf9129b2.roa (raw, json)
Hash identifier:          ApWmLHEmV/QlV4QxT3X/DcAnMqtqotIYAxS0v1H8NkU=
Subject key identifier:   A8:78:E1:E4:07:5B:E9:6C:C6:5D:6B:6B:C1:1A:94:EB:04:B8:FE:0C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7F97C8C35F07401124C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/adaebf31-61ab-3c1d-9a31-e6b3bf9129b2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7f:97:c8:c3:5f:07:40:11:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=024f9460-18c0-48cd-b444-25006cc0625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:53:9b:cb:73:4d:fc:cb:44:78:dd:ee:72:
                    74:a2:db:83:b4:f3:9d:92:6f:ac:bb:33:f0:40:c9:
                    57:ae:80:8c:88:7e:c5:02:82:3d:34:fe:52:5b:94:
                    7a:94:5f:c5:02:d0:ba:75:0d:66:c2:b2:c9:6f:e8:
                    3a:6b:d4:82:5f:de:52:18:56:30:e8:85:5e:79:1d:
                    c5:cd:9a:f4:d3:2f:4b:8e:15:c6:03:b7:d1:a8:5e:
                    66:55:13:ba:35:56:de:5b:ee:d0:46:7d:6b:21:ea:
                    01:f0:c9:08:f1:5c:1c:8b:fd:21:df:3c:9d:b8:e0:
                    3f:78:06:a6:d7:18:8d:38:50:e1:b4:92:31:bf:c8:
                    9c:7b:fd:b9:e6:c0:92:e3:44:21:51:64:e4:3a:6c:
                    55:4f:af:a2:91:19:82:3b:a7:cf:9e:23:eb:52:e7:
                    2d:c7:61:c4:91:60:8e:7c:34:c4:67:df:19:98:f8:
                    3e:fb:fc:2d:8d:ce:55:35:c3:05:b0:f4:91:b7:2b:
                    8b:fd:a3:bb:11:26:8e:43:6a:55:31:45:e9:b6:bb:
                    d6:65:0f:0d:68:7b:f4:c2:70:91:d7:6d:1a:25:bb:
                    60:4d:40:a9:05:8a:80:23:a3:ff:a5:e7:42:18:24:
                    f5:f7:69:aa:44:bc:d0:7c:11:e2:42:23:5d:8b:e1:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:78:E1:E4:07:5B:E9:6C:C6:5D:6B:6B:C1:1A:94:EB:04:B8:FE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/adaebf31-61ab-3c1d-9a31-e6b3bf9129b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:91:3d:1c:1b:b1:18:6b:2b:1d:b1:40:67:ae:b5:7b:10:
         84:91:27:55:3d:94:c1:68:df:6a:90:87:ab:c8:b7:02:71:4d:
         36:32:fc:25:3b:ea:bf:92:22:f0:c3:45:8e:1c:7e:85:13:01:
         bb:b4:30:78:2b:66:8a:cc:d5:53:dd:79:3b:63:63:7d:83:b9:
         cc:09:08:5c:d7:52:ad:b6:67:6c:f3:23:44:e9:d8:e1:e3:bd:
         af:be:f3:3f:33:e7:3d:64:fe:58:1e:69:d2:e0:cb:bb:38:e8:
         f0:0a:15:12:62:6d:b5:be:c8:4d:57:df:d2:ff:63:5a:ce:c7:
         fc:e4:a4:73:e0:84:fd:a9:bb:28:42:1d:ff:8c:da:47:6a:9b:
         e2:73:33:6f:c9:78:25:c2:82:09:11:55:5d:05:d1:b3:9d:ff:
         23:d7:6c:48:b1:95:05:7e:36:13:9a:67:ba:6b:f7:04:53:5b:
         5e:aa:5e:f9:95:70:c0:9a:09:e6:7d:68:ca:7b:df:8b:7b:96:
         c1:2e:54:86:52:88:6a:22:1d:d6:92:77:87:45:e5:85:53:f6:
         5c:a1:b8:8d:6d:cf:5d:1d:cc:ae:c1:34:80:f3:8b:36:c2:72:
         62:26:3b:c4:22:6d:2b:21:d2:0f:93:5c:70:26:93:43:90:04:
         06:d1:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:02:09 2025 by rpki-client