Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d036b30b-496f-319b-833a-2f0f9bf3fd27.roa
File:                     d036b30b-496f-319b-833a-2f0f9bf3fd27.roa (raw, json)
Hash identifier:          vtYhilzqA6PH49VJWBd6E63gTLvuJZ42zVmaydiE5ZY=
Subject key identifier:   B3:06:60:47:4C:9C:82:39:AE:74:69:CB:1F:43:1F:55:B4:E5:78:F7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA88BFDC12E29BFE496500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d036b30b-496f-319b-833a-2f0f9bf3fd27.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.198.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:88:bf:dc:12:e2:9b:fe:49:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=816071a1-35f6-4614-8322-ce8eeba6dd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:5a:f6:1d:f6:f2:49:6d:39:d0:7f:9f:2c:
                    29:f0:6d:33:77:2e:a3:0f:58:1d:23:fe:0e:74:3d:
                    f9:b7:10:58:ec:b7:7a:d2:51:08:61:f7:18:0c:30:
                    11:0d:44:ad:b2:0d:dd:70:90:7d:d5:81:71:c5:64:
                    d8:6e:b8:c0:b1:32:52:44:7c:8b:32:28:2b:59:37:
                    36:74:15:c7:51:0b:a4:56:86:e4:eb:ea:82:7b:16:
                    86:42:54:07:f7:a5:1c:2d:5e:bc:46:29:e9:9b:49:
                    1b:6a:49:56:c3:1e:9f:5a:7f:48:44:31:0e:b8:9e:
                    49:2a:0d:ab:e7:15:2c:fe:36:be:4f:b8:52:17:76:
                    6d:15:b9:5b:73:11:e7:8f:0b:17:1d:53:60:ab:d8:
                    21:43:ce:17:f3:66:4b:05:0a:00:d1:58:90:49:fc:
                    18:f1:8e:67:0a:ea:06:20:c7:1a:3d:ec:69:50:75:
                    2d:47:89:82:67:82:21:f0:b8:77:5b:fe:8d:e1:5f:
                    87:00:1e:0e:20:23:55:10:5f:4b:08:70:30:5b:08:
                    ab:36:b5:4e:b0:a4:f1:54:c4:2c:45:c7:b2:b8:b9:
                    80:90:e1:3e:f1:2a:36:18:f5:2e:96:c1:62:91:89:
                    de:f2:61:86:88:c5:36:08:c5:8e:6f:3e:26:e4:98:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:06:60:47:4C:9C:82:39:AE:74:69:CB:1F:43:1F:55:B4:E5:78:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d036b30b-496f-319b-833a-2f0f9bf3fd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:9b:2e:95:e5:6d:96:13:d8:16:79:09:fc:47:de:df:bf:
         82:dd:4d:28:d0:d0:5d:3f:19:52:59:96:1b:07:2a:56:cc:29:
         1e:d3:da:df:c8:1c:5d:0f:0b:37:f4:bf:e3:d7:82:17:4a:28:
         79:6e:59:9c:df:e5:6b:32:ee:7c:d3:55:68:1c:bc:a1:25:18:
         c9:bf:a7:c8:de:93:52:42:f0:7f:cb:31:c8:0b:2b:9e:a6:a8:
         18:d2:2f:af:59:7d:aa:0d:8d:89:0a:44:ca:24:1a:2f:50:d0:
         3d:d8:d2:6d:74:36:e5:4d:5c:2a:fa:c9:d4:d1:80:37:4a:d4:
         30:9c:94:5a:79:b4:0e:f8:ca:1d:a7:a9:33:d0:26:2f:bf:7a:
         d1:26:a7:0c:b4:e7:65:93:be:03:b5:2d:29:5e:46:3d:be:bd:
         91:97:ca:8c:97:e4:c4:c5:41:3f:44:0b:5f:b4:49:f9:49:21:
         8b:ae:7e:18:91:c4:48:fb:3c:a4:fa:8c:c7:be:38:12:a3:49:
         e7:87:a7:2d:34:e3:2a:b9:3f:50:c4:8f:9d:c0:41:04:07:0b:
         93:5f:57:b7:03:08:ac:8c:13:83:bd:e1:f9:ef:4f:77:6d:55:
         c5:bd:fc:95:d4:a2:9f:64:84:6e:bc:ef:8d:d8:72:52:fa:ab:
         94:55:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:14:01 2025 by rpki-client