Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa
File:                     ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa (raw, json)
Hash identifier:          kwT86uvYl7Ffy+5x6ZDMQyryusOldDLcTin5PWz3H0g=
Subject key identifier:   62:F9:FB:88:77:93:34:F2:2C:F2:26:65:8C:BE:3D:AF:4E:B1:23:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB230244F0D9AADE5F18C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.197.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:23:02:44:f0:d9:aa:de:5f:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=77185414-ac41-4581-a7c8-843f36ecab4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:cd:83:c6:a2:76:74:c9:42:15:20:e1:89:
                    6b:ab:ad:d4:40:44:9b:94:92:b3:11:1c:28:94:76:
                    c4:b9:c0:a0:b4:57:86:22:84:7c:5e:ad:88:75:8b:
                    50:df:8e:2d:01:e1:0a:1f:f4:58:53:27:e9:43:2b:
                    5f:62:5f:0b:03:d3:4c:9c:6d:81:c2:1d:b7:0d:d0:
                    09:ca:47:6e:1e:8f:35:06:3a:1a:9a:fe:75:6c:d7:
                    2a:9b:84:ef:42:e5:3b:ee:73:69:7c:a5:6d:06:94:
                    cd:cd:cf:70:b5:72:d0:e8:0a:c4:c7:5b:54:88:22:
                    b3:eb:07:54:4f:95:ec:ca:df:c2:4b:9d:31:25:a0:
                    69:24:65:bc:b2:04:69:37:e5:5e:59:60:cd:67:cb:
                    05:ca:b3:b9:47:a6:a5:e7:7f:ae:4f:4e:56:65:4c:
                    47:9e:21:5a:d4:1e:4d:f1:cf:da:c9:e6:2d:aa:0e:
                    7c:06:f8:b5:f8:80:f6:ef:d3:9f:08:3f:b1:13:4b:
                    26:74:1b:73:72:1c:11:36:0a:c1:1e:1d:b7:ee:42:
                    20:cc:6d:76:70:39:a4:fd:04:e9:e1:e1:b4:c4:1c:
                    e3:d8:9d:ca:1f:29:ae:03:df:85:32:7f:25:37:a3:
                    3f:f7:76:36:b6:f3:44:b3:29:05:57:b3:99:fb:94:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F9:FB:88:77:93:34:F2:2C:F2:26:65:8C:BE:3D:AF:4E:B1:23:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee6cafc1-7158-307b-8c4e-bc97bef28fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:c7:f9:2c:c9:fd:c8:e8:dd:22:d2:b6:28:29:3c:10:06:
         ba:6a:b3:d9:dd:6f:4a:93:54:47:33:2b:a7:ad:35:52:92:94:
         e9:a8:80:cd:27:e0:37:ad:af:be:82:d7:62:7d:e7:f8:4c:2c:
         1c:17:ad:06:83:90:15:7e:6c:82:5f:93:17:09:23:c5:58:90:
         8d:dc:97:01:fa:94:7b:f3:cd:2e:a4:1a:aa:3e:34:18:33:16:
         14:14:c6:94:13:df:03:48:0a:ed:c1:bc:11:ce:d4:52:b7:a3:
         83:13:66:23:8b:31:f2:5b:4b:7e:f2:ae:2f:78:9e:ec:06:e5:
         d6:8f:9b:ad:f0:a2:c2:54:1d:17:1a:6a:ee:6b:1b:70:e1:73:
         ff:75:96:4e:4f:a7:78:18:48:40:9c:76:56:2a:d0:70:14:a6:
         fc:66:7e:c7:e2:89:68:ee:02:ec:50:c0:fd:45:ab:e5:39:94:
         3f:6f:60:93:ab:dd:30:ba:43:34:24:6e:82:73:bc:3a:25:0a:
         a2:80:de:c1:f7:97:0f:13:01:45:f7:77:ec:96:e7:c3:df:ff:
         dd:71:36:7f:ca:f9:47:f7:a8:c9:74:49:9c:ed:df:23:87:7f:
         c8:ee:9f:21:d4:bf:b3:56:d4:9c:71:78:04:42:72:de:13:77:
         cd:13:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:49:32 2025 by rpki-client