Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa
File:                     a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa (raw, json)
Hash identifier:          o5Ac1yoVABd4EG/MGt0PCqrEY0XuOu6/xXyGMnodIBk=
Subject key identifier:   76:9D:FC:5C:17:D6:E3:0B:D8:27:86:2F:5F:18:B6:BB:22:F6:9B:B8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB242AD135F30B5AE35C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.197.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:24:2a:d1:35:f3:0b:5a:e3:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b6386076-7caa-4dd0-b9b7-1fc3cdcff7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:c6:90:88:11:eb:a3:ff:02:ba:f4:7e:9b:
                    15:d1:1f:f2:4a:58:f1:35:85:57:98:d7:d6:bc:92:
                    31:46:9d:6f:cf:e9:66:05:75:f2:1c:fe:c8:2c:40:
                    74:d3:b3:06:c9:62:4d:7d:4c:de:b0:25:12:a7:dc:
                    12:b1:d4:a0:cd:42:6d:90:40:44:5b:a4:27:78:90:
                    c4:fc:f8:d4:ac:cb:56:d9:04:c6:50:b3:d6:5b:ec:
                    c9:ba:11:51:75:7b:7e:35:81:f5:09:44:f5:1a:ab:
                    45:1f:c8:5b:7f:0b:e2:6d:19:27:4c:3b:af:40:ca:
                    fe:f9:d4:cc:bc:83:94:23:bc:eb:b1:25:13:f9:70:
                    32:e9:d9:5a:38:3f:18:cf:11:6f:f6:98:10:a3:00:
                    99:9a:04:ab:bd:4b:9b:4e:a6:3a:4e:98:92:f9:13:
                    2b:de:d2:76:88:1f:03:0a:3b:58:c4:5d:db:50:9b:
                    e4:77:87:17:26:94:78:bd:7a:dd:54:2d:0a:6b:8e:
                    e3:2a:56:b3:6c:36:1a:e3:2b:70:59:36:dc:f2:e8:
                    57:85:73:18:b2:f2:be:6e:44:ea:a8:f5:be:da:97:
                    34:d8:1d:56:52:02:92:a4:aa:ac:84:d6:a0:db:2a:
                    7d:44:df:3e:33:62:a6:d4:5d:b4:1f:d6:3b:92:24:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9D:FC:5C:17:D6:E3:0B:D8:27:86:2F:5F:18:B6:BB:22:F6:9B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3cc83d8-631c-3aa6-934c-7eb03d9b139f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:75:34:54:27:e5:64:b0:6d:36:5d:19:52:23:f3:65:a3:d7:
         10:47:0e:ba:1e:a6:17:6a:0c:76:39:a2:2e:ab:80:53:ea:e2:
         1b:98:b4:5e:67:62:fd:af:b4:2e:82:a9:5b:84:f8:39:e8:78:
         1f:55:89:d1:89:55:09:4e:7e:c7:be:92:b8:e9:d0:89:7c:69:
         d6:5d:e0:00:1b:74:07:0c:c5:44:a5:fa:a5:a1:68:12:74:b1:
         54:08:a7:27:46:d1:2f:dc:fd:99:66:de:1c:53:69:90:b0:03:
         25:4c:50:5f:5a:d8:e9:5e:a4:84:f5:9c:01:7f:0e:8b:1a:17:
         f5:08:99:e8:1d:59:4a:ac:a6:3a:98:91:38:19:c0:4d:5d:08:
         e9:59:65:3d:5c:eb:2a:06:bf:86:90:2b:12:83:79:62:6c:09:
         12:a1:a3:40:30:e1:0e:84:87:2d:60:c9:c9:2e:f3:0c:12:85:
         02:4f:62:13:3c:07:10:e2:18:05:5d:ab:b6:33:da:58:a5:4a:
         f6:74:db:77:f8:33:47:5a:e1:00:b8:13:26:d3:49:2f:c3:f0:
         8c:e8:26:df:d0:6d:52:cc:8f:09:e7:db:de:88:67:63:52:41:
         4a:ea:37:d5:f2:34:88:c3:95:ad:0b:21:b9:12:6f:83:43:54:
         d0:8e:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:58:26 2025 by rpki-client