Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e7f9d837-9fa9-3407-84ff-6dcaf9b5a556.roa
File:                     e7f9d837-9fa9-3407-84ff-6dcaf9b5a556.roa (raw, json)
Hash identifier:          PwC08mUgtV/ui+KcA8k/NF9lvgJfPik/5kREBOKB+Eg=
Subject key identifier:   40:B3:A2:B1:90:CE:A8:6E:16:5E:ED:DC:1E:A5:35:36:AA:00:0A:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2064C46773E3836436C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e7f9d837-9fa9-3407-84ff-6dcaf9b5a556.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:20:64:c4:67:73:e3:83:64:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7ccd7ad6-7ac3-43bf-9300-2dcf046b2e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:74:94:38:4b:fa:3d:b6:fe:db:ef:00:67:
                    94:82:14:9b:7b:d0:ac:80:3f:cd:26:98:b8:5a:d5:
                    da:69:62:76:94:b5:35:98:11:73:da:16:25:2e:9f:
                    5a:71:33:82:e1:20:af:57:ae:1e:50:fa:27:a3:41:
                    86:9f:13:c2:f0:f7:81:24:18:87:a6:70:57:cf:9d:
                    d2:2a:1b:6b:e7:c0:4f:84:59:6c:f7:9d:75:25:c7:
                    b1:f0:1f:0d:3b:95:94:4c:f4:9a:c0:97:05:ca:b3:
                    b3:99:65:8e:7f:bb:b9:66:67:87:07:35:76:b4:b2:
                    d1:4b:1f:8a:6d:a3:96:b2:18:dd:c8:9a:4b:91:ec:
                    66:42:d6:91:22:bd:6c:03:87:36:ad:fd:96:88:fc:
                    9e:14:5b:83:75:71:b5:1c:be:75:fa:cd:e5:a6:22:
                    90:e1:11:f2:1b:2b:7f:51:81:94:99:99:bc:06:83:
                    8e:c4:df:0e:c1:fc:54:77:10:3b:2c:90:65:07:c5:
                    e4:d0:25:7c:a7:c4:79:d7:63:e3:30:7e:ab:17:65:
                    b7:9b:a1:c2:ea:8e:c1:6e:86:12:29:17:49:0c:e8:
                    1c:9e:24:09:5a:7b:5c:17:5c:eb:d8:95:78:ed:7d:
                    a5:b2:4c:61:43:88:1a:d0:9c:9c:fb:b5:9d:da:ac:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B3:A2:B1:90:CE:A8:6E:16:5E:ED:DC:1E:A5:35:36:AA:00:0A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e7f9d837-9fa9-3407-84ff-6dcaf9b5a556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:84:b4:d9:a7:c6:6c:f8:e7:72:a6:dc:03:c0:8a:fb:60:
         5b:52:58:d8:25:4e:53:0d:84:35:2a:6b:dc:1a:12:16:c0:cd:
         b2:c6:5e:e5:d2:3f:e4:d2:0c:35:69:6e:06:cb:53:70:58:07:
         dc:da:09:ae:fc:30:ee:d8:d3:6d:17:32:78:97:f8:eb:b5:88:
         a2:84:d6:56:48:84:49:a3:a6:ef:9b:68:90:e0:df:89:96:ad:
         04:f9:c2:72:bb:74:0a:5f:68:48:6c:55:02:2c:27:e0:0c:e6:
         1b:67:de:b6:05:f8:33:fd:26:0f:d6:07:4c:1c:fd:4a:20:c6:
         7a:7e:90:d6:55:80:7b:07:cc:00:8d:50:7c:fa:f2:58:55:c5:
         46:10:7f:33:b8:0e:e5:0b:8c:e5:57:87:47:21:4a:b9:49:bc:
         d0:64:7f:12:44:b6:9d:2d:a7:30:55:f0:0c:d8:ba:45:df:ca:
         d8:f5:cd:b8:22:b9:a1:c0:bf:a7:38:a5:7e:40:d5:ed:33:32:
         bf:5e:f1:f0:f7:e0:5d:2c:b3:51:ea:88:d6:1f:7b:a4:68:09:
         20:f8:35:95:b7:88:ed:23:05:38:d6:81:8f:c0:26:1f:75:dd:
         bb:62:d9:7a:ff:6f:1b:5b:f8:7e:5a:27:d3:bc:1d:72:94:41:
         f8:7e:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:18 2025 by rpki-client