Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0193ac37-acd5-3d71-9679-984f10a722f3.roa
File:                     0193ac37-acd5-3d71-9679-984f10a722f3.roa (raw, json)
Hash identifier:          NTkj62k1FqE6FexOPnn6bRqK3AS1+lMK1easwlFBtB4=
Subject key identifier:   CD:37:0B:18:22:86:D0:D6:0B:DF:10:89:0A:DA:B9:99:61:F6:F2:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411EDD4ACAEC97199C74B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0193ac37-acd5-3d71-9679-984f10a722f3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ed:d4:ac:ae:c9:71:99:c7:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b736b3f1-3768-474c-a7de-8f2ed21ea63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:bd:bf:a0:4f:3e:5f:5d:64:78:53:8f:9b:
                    58:c9:f1:d1:95:c6:6a:aa:ff:d0:bc:7b:2d:e5:3b:
                    33:26:5c:0c:56:20:51:34:1b:0f:e8:33:c0:22:ca:
                    c5:31:c4:c1:68:cc:da:63:15:5e:84:f3:74:1e:6e:
                    db:a3:82:6b:28:3e:b7:82:8e:ee:7d:01:f7:ac:b1:
                    98:88:31:bb:42:52:26:69:2b:9e:41:e4:6e:59:3a:
                    59:b3:43:6f:2b:0b:3e:c2:37:51:f0:4d:ad:01:f5:
                    9c:4b:d1:59:74:2c:09:d2:6e:9a:d0:14:34:df:a0:
                    95:f7:be:c9:ac:b8:7e:a1:7a:92:fa:cd:77:91:a6:
                    b0:d0:77:71:c0:4b:61:01:df:9c:0c:98:af:4a:28:
                    b3:94:e1:3e:87:ed:68:a4:cb:f6:80:24:19:6a:e6:
                    58:9c:a8:0d:7e:a4:56:22:ae:d4:30:ae:1e:85:89:
                    c2:e3:9b:2e:21:52:9e:06:42:72:58:5b:40:07:fb:
                    fa:85:c8:20:8c:d7:17:34:a3:69:08:fd:75:4e:e7:
                    87:cf:7f:8a:9d:2b:c8:da:8a:a7:8f:c2:35:e1:5a:
                    00:b8:2b:08:be:fe:55:5d:ee:81:c2:b6:b6:bf:67:
                    19:e5:d9:0a:fd:69:bb:63:96:d1:d9:1c:6b:61:7e:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:37:0B:18:22:86:D0:D6:0B:DF:10:89:0A:DA:B9:99:61:F6:F2:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0193ac37-acd5-3d71-9679-984f10a722f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:6b:ef:80:c5:90:53:ab:d5:e4:da:c3:48:a5:29:34:45:
         77:8c:96:a4:d0:0a:2f:ac:fe:c9:1f:08:63:d8:d8:32:6c:52:
         41:5c:25:c6:55:5b:68:2f:a9:b7:5d:00:cf:68:71:f3:e1:a0:
         66:44:82:6c:64:23:52:60:55:77:51:9d:67:b9:8c:c1:4d:72:
         c7:b8:06:f8:3a:8b:a0:bd:ba:62:e4:dd:83:89:39:34:46:47:
         ff:6b:0b:bc:1f:29:8a:ce:d3:7b:ca:97:5d:fc:3e:d7:78:c0:
         37:67:58:42:40:ce:17:58:9e:71:32:cd:bf:e3:34:b5:33:4a:
         dd:a5:9d:15:b0:c7:33:c3:77:92:0a:84:1b:e6:e4:7d:0a:7c:
         84:f7:cd:2c:91:0c:ed:37:33:19:fa:b2:70:35:df:30:de:d7:
         d9:86:03:bd:00:b9:08:18:51:94:d1:e0:dd:0c:94:10:83:9e:
         c3:23:a1:64:34:30:a7:c9:2a:42:1f:5e:c5:75:1b:c7:49:6d:
         e0:0d:1c:12:65:cb:5a:8d:03:b1:ba:9e:0b:98:46:eb:f3:0a:
         71:2e:a8:c5:13:ce:cf:64:02:0f:db:ab:1a:18:7c:e4:b3:c4:
         4f:4d:a2:de:69:35:bf:06:63:16:ab:6e:e5:cb:6a:4c:a9:61:
         44:7b:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:58 2025 by rpki-client