Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa
File:                     bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa (raw, json)
Hash identifier:          gv2P5GfTUq0j+redLkqlWWxo3pDxROTvcht2/IgTRdM=
Subject key identifier:   28:9E:97:00:9C:F3:C7:3F:5A:DE:56:C9:21:5E:A7:78:3F:FE:AD:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7F8078C287FF246BD180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7f:80:78:c2:87:ff:24:6b:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a27042c7-0dd5-4a36-a945-9ba43f2eb4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:80:75:da:e7:98:a6:78:08:c3:aa:47:85:
                    66:2e:a3:10:a8:d4:2f:48:11:34:02:79:01:79:ce:
                    2d:e6:48:ec:cb:2d:af:07:89:28:1b:50:62:77:05:
                    36:6c:6c:b8:5c:80:84:fa:94:b5:0d:4d:26:2a:b6:
                    45:9b:fe:64:21:15:13:33:12:b9:e0:1a:7a:21:28:
                    99:39:49:fb:26:87:41:0a:2d:31:70:fa:d1:87:21:
                    69:40:fa:52:20:84:ac:33:4e:57:a9:fd:74:f2:08:
                    4c:fe:73:f1:7b:a1:e7:26:7b:d1:8d:49:c3:79:75:
                    2b:60:a4:d8:d3:1c:73:34:29:a9:8f:4f:fa:86:ff:
                    f5:b1:f8:cc:06:3c:b2:95:77:1c:c0:81:be:61:0b:
                    02:9c:12:67:64:ec:28:19:1b:28:9d:e5:40:48:17:
                    21:3b:f4:5b:8c:f0:9f:85:d9:ec:7f:a3:18:ff:31:
                    7a:4b:4c:92:23:a3:85:c8:80:a2:62:20:44:88:f1:
                    30:c8:57:73:b4:f8:59:3d:16:47:cf:69:b2:3a:c8:
                    ad:6b:cf:5d:60:a3:c3:5a:b1:8f:77:ae:0c:3e:dc:
                    ff:7e:7f:12:04:3b:07:43:2b:0f:32:96:50:5f:c2:
                    af:b1:f9:ef:c6:aa:80:af:fc:ba:ae:df:f7:57:b3:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:97:00:9C:F3:C7:3F:5A:DE:56:C9:21:5E:A7:78:3F:FE:AD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:64:91:8c:9d:9c:f7:1b:32:d1:f9:d0:bf:6f:22:6e:8b:4c:
         20:1c:94:77:0e:5c:37:e4:cf:89:50:14:86:d3:1d:a1:b6:cb:
         5b:b4:bb:f9:1a:d4:8f:07:a8:7b:d8:b0:8f:6c:44:e0:70:16:
         5c:f2:20:a3:9c:94:a3:85:0c:9d:bd:ca:df:ee:4e:77:4f:92:
         aa:59:e0:a0:64:cf:c7:b8:00:1f:80:6f:f8:8a:ae:bc:4e:a4:
         d8:c7:a4:07:cd:cf:24:f9:37:b8:f9:7b:4b:a4:8d:2e:e1:0e:
         cb:ca:13:f5:24:5e:9e:83:f8:8a:80:c5:37:70:70:f8:7e:a1:
         66:ed:d1:b1:d6:37:a8:f9:90:9b:ca:cc:f5:a9:32:c9:84:b0:
         ab:b5:a2:5c:34:7f:88:63:27:9c:c0:21:ad:c6:8f:f1:a1:79:
         00:ee:1e:50:d3:67:d2:dd:45:da:8b:10:83:f6:51:d3:34:74:
         45:65:a7:9e:ff:f0:e0:8a:84:68:f1:fb:34:67:f1:bf:68:18:
         a4:88:f8:20:01:f6:44:13:a7:62:10:4f:be:67:59:0f:b0:74:
         c2:18:96:c8:1b:dd:20:3f:0d:9c:86:52:43:59:f8:cc:25:a0:
         4a:6d:21:2b:f8:4d:7f:54:d4:ca:04:27:72:2d:bf:06:1f:bb:
         7e:12:57:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:18:37 2025 by rpki-client