Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e8a6e0-9574-37cd-bb19-e53d1b65c5f0.roa
File:                     d1e8a6e0-9574-37cd-bb19-e53d1b65c5f0.roa (raw, json)
Hash identifier:          RiV21JMxAcgKXOBDYVr7Z0qwzeMPdLqSt6vUR+mErf4=
Subject key identifier:   A8:BF:DF:C6:40:BB:7E:E7:BB:31:A8:B3:A0:32:AB:C4:CB:97:94:7F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1E6E409A96AC3ED25380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e8a6e0-9574-37cd-bb19-e53d1b65c5f0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:1e:6e:40:9a:96:ac:3e:d2:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2978f3dc-a2db-409d-bc0a-3ca366a30c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:ea:d7:e1:30:28:53:c4:3c:2a:5c:7b:d4:
                    ba:fa:f6:b2:4b:54:d7:d3:2b:15:cf:f5:59:ab:0a:
                    35:23:d6:25:5e:ca:f5:d2:f7:2f:28:9a:5e:ec:f1:
                    9b:4d:42:65:de:12:36:6c:ec:b3:5d:00:0d:c7:89:
                    5b:77:bb:7c:9e:60:bf:4b:b7:e3:48:a8:21:83:b1:
                    32:f6:e0:56:48:62:3e:5f:9a:fe:a0:52:e2:e9:14:
                    a7:bf:be:b8:e7:fb:cf:f2:b8:8f:03:80:a1:08:c3:
                    4c:02:65:ea:5e:74:ba:81:8a:b9:dd:09:3d:41:2b:
                    d6:c7:6c:75:82:c1:48:1a:7a:46:e0:7a:7e:82:b3:
                    c1:e7:d3:0a:6d:93:6d:39:9f:b7:e7:5f:7d:2a:bc:
                    b2:b2:ea:ce:94:cc:5c:5a:c8:8e:67:df:34:bb:da:
                    e1:6c:db:66:42:9a:2d:04:da:f4:d4:1f:c2:7d:1f:
                    03:e3:85:b0:18:e7:4d:a7:53:81:29:93:3b:c7:37:
                    db:ec:79:4e:b3:48:59:cf:49:70:e0:d8:1c:5b:7d:
                    8e:b0:c2:d8:27:f5:05:11:e0:13:65:5e:91:8d:14:
                    e6:f2:0c:ce:aa:fd:22:86:b7:c5:75:1a:67:79:fc:
                    83:88:43:4e:d9:91:c2:8f:f0:20:3f:37:8b:c4:7d:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BF:DF:C6:40:BB:7E:E7:BB:31:A8:B3:A0:32:AB:C4:CB:97:94:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1e8a6e0-9574-37cd-bb19-e53d1b65c5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:0a:9b:66:05:b1:95:5c:76:98:1a:d5:e8:52:9a:5d:a9:
         bf:44:6e:58:0d:f1:7f:54:fa:84:6b:10:77:e3:b7:56:f1:e9:
         bb:4a:b1:8d:23:b6:30:fd:83:ba:fd:78:71:3c:40:ec:2e:eb:
         60:6c:eb:ba:8e:e3:e8:91:14:89:0e:63:f8:fa:5f:79:43:54:
         e8:d6:cc:8b:ff:51:26:d4:38:b7:b9:fa:36:d3:31:b4:26:7a:
         5c:1e:92:74:a3:4c:63:2b:82:62:1b:1c:c9:91:68:89:45:ad:
         70:2f:9b:3a:95:1e:9d:62:fe:33:73:b6:f3:e1:f4:f6:e9:5f:
         28:ef:7e:7e:b9:df:d1:c1:02:ea:58:4c:a1:0f:1d:9d:64:96:
         59:7f:01:3a:84:a7:ee:4d:94:a5:19:b3:56:2b:10:21:40:82:
         83:5c:3b:aa:45:7e:3d:da:e8:b4:ec:bc:1f:fb:f9:15:d6:d9:
         c7:ff:cb:7b:38:78:2b:ef:78:1f:ff:58:cf:0f:71:89:5f:5b:
         6b:e6:ad:14:d1:57:0e:c2:da:5f:3d:30:67:46:87:70:de:eb:
         80:a1:32:61:c1:24:50:42:d3:4a:22:50:99:f0:0a:df:29:8e:
         b8:ab:d3:39:37:ba:95:1a:1a:79:24:20:4b:61:05:55:b4:e5:
         99:d4:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:43:56 2025 by rpki-client