Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa
File:                     b4af4962-eb4c-3a28-9fcd-fcb141322279.roa (raw, json)
Hash identifier:          0/hgvUvxiDW2wPSry0yl+o59ZmV6whN83Sxt/dwk8DU=
Subject key identifier:   4A:95:A9:13:20:31:19:58:34:D9:52:5A:1B:5E:BB:51:51:EE:0F:61
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB26780F214DDFA07E8EE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.197.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:26:78:0f:21:4d:df:a0:7e:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=869ade9e-4529-4710-8c5a-ee816c3a635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:79:c4:76:1c:dc:41:5e:03:70:5f:9e:a9:
                    92:3e:6a:23:51:e5:fe:88:a6:b9:80:ff:0e:08:f9:
                    04:b4:f2:d9:7d:9a:7d:cc:2d:19:af:23:6b:4a:14:
                    b0:de:5a:d3:1f:7c:dd:44:27:8b:83:00:d2:8a:3e:
                    d8:27:c7:da:32:77:bd:53:93:aa:eb:2a:af:34:c8:
                    93:73:54:f8:b8:50:3a:6d:3c:db:5b:4c:53:bf:79:
                    0c:96:ac:c4:13:a9:2f:51:68:28:89:55:ce:f2:eb:
                    31:47:1f:31:e6:9c:0a:f7:2b:f1:0a:16:24:98:4f:
                    31:4b:98:3e:ed:6f:d0:a6:0d:a5:82:be:f7:08:a3:
                    33:22:f1:5d:0a:d8:75:a9:57:3c:1e:a0:e2:15:28:
                    3d:dd:68:0a:c6:c6:7e:14:94:b6:82:f7:dc:cf:54:
                    9f:d5:2d:36:d5:0d:ce:ad:a8:d4:be:8d:54:d8:12:
                    35:29:64:a7:eb:24:4b:6f:0b:9a:d6:49:79:7c:b8:
                    53:a3:4c:25:a3:fc:1c:73:5c:9f:9c:e8:6b:de:56:
                    1e:55:73:91:07:ab:a2:c7:bd:63:ae:67:4f:b1:85:
                    b5:5e:a6:06:2f:eb:22:a6:50:0d:fb:9e:0e:22:8c:
                    ed:27:a2:53:d3:fa:f8:3d:63:f7:aa:56:c9:58:8a:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:A9:13:20:31:19:58:34:D9:52:5A:1B:5E:BB:51:51:EE:0F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:c7:58:17:02:60:a7:36:d9:67:57:8e:cb:20:bc:87:ad:e7:
         55:20:3a:a6:73:2f:97:d5:e0:d8:4b:04:c3:53:12:99:72:e7:
         5b:2a:ef:22:d3:72:50:82:70:a8:d1:48:a6:fe:d1:62:e9:73:
         f4:1b:b9:93:d7:dc:88:f5:83:10:b9:c9:13:36:5c:f6:75:03:
         f6:f4:e3:51:1e:f2:20:b1:c2:d3:c6:8c:27:2e:54:4b:b4:2a:
         30:e8:5a:68:9a:8a:eb:2a:0d:2a:16:80:79:45:b6:b4:1c:80:
         26:ec:db:ab:e6:2b:3d:d5:01:ec:ae:2e:76:11:f8:7f:2c:48:
         0d:6c:e5:38:87:80:f0:c9:19:0e:48:f3:31:74:aa:4f:fd:c7:
         15:4b:5f:81:9b:20:d5:cd:5a:72:3f:4f:c9:73:fa:0c:5a:35:
         e7:77:6b:36:e4:54:23:e7:1a:80:77:5e:d2:9e:dc:4f:40:42:
         c6:e3:b4:ab:cc:9e:32:2e:b1:49:4e:e3:d4:8e:46:3d:19:f4:
         ac:38:c8:95:86:26:49:98:79:2e:8f:fc:4d:be:d4:52:04:4f:
         6d:9d:30:55:5f:8a:9d:dc:29:f0:26:dd:48:c6:c1:59:fe:4a:
         28:1f:a7:05:36:64:8a:b7:47:ba:44:76:1c:eb:05:c8:16:3d:
         ff:28:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:41:01 2025 by rpki-client