Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1269f698-e6c5-3239-a726-47e0287ab0a0.roa
File:                     1269f698-e6c5-3239-a726-47e0287ab0a0.roa (raw, json)
Hash identifier:          IzsxVqNjbGCo8hNeyd8TE/AQMaxGbvhsJlr9SjYt9ss=
Subject key identifier:   B2:1F:E2:6C:14:7F:40:A2:15:EA:2B:CC:90:C0:46:70:E6:CF:DA:D4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113011F01B8E3BE8C1FC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1269f698-e6c5-3239-a726-47e0287ab0a0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:30:11:f0:1b:8e:3b:e8:c1:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ce339708-9811-4fd6-bf78-97f034400849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:92:21:2d:a5:91:cf:ea:6f:26:4a:a0:10:21:
                    66:31:87:bc:c6:18:d6:af:c7:5b:62:54:14:cb:08:
                    b3:9b:66:46:16:5c:7d:59:8a:6c:7a:53:cc:db:bd:
                    2e:50:c6:77:e7:4f:c4:81:b7:50:68:7a:b0:39:b5:
                    8e:33:03:4c:7e:51:91:ee:11:28:7c:31:be:72:79:
                    44:11:22:a4:2b:6d:c9:fe:aa:e5:c8:71:92:1f:ea:
                    5a:30:4c:e6:83:b0:ca:33:1e:86:bc:b0:e8:32:df:
                    73:25:fe:0d:9b:20:57:69:bc:a3:29:b1:d9:ff:77:
                    ec:a7:48:d3:79:c8:3f:26:ec:d1:16:da:dd:a3:7e:
                    c4:35:3f:1d:ba:da:ce:32:bb:a9:de:9a:52:4e:e9:
                    a1:18:11:01:0d:ed:dc:df:5c:a2:30:ea:9c:62:ec:
                    b5:d4:ea:46:de:41:3f:35:4d:bb:30:1c:c2:51:3e:
                    45:0e:83:ae:a7:9f:f5:64:fa:b6:fd:b5:a5:5b:45:
                    aa:47:13:84:65:eb:f4:8a:48:80:b7:14:35:39:34:
                    2f:82:be:56:2e:96:c6:a3:07:44:a5:01:44:f1:b9:
                    9c:6f:c8:3e:70:06:5b:1b:ae:72:c7:44:3a:0c:04:
                    24:0b:25:8c:da:87:f5:ea:94:0a:d4:ad:f3:a2:bc:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:E2:6C:14:7F:40:A2:15:EA:2B:CC:90:C0:46:70:E6:CF:DA:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1269f698-e6c5-3239-a726-47e0287ab0a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f8:b6:91:0b:9c:82:a7:6f:06:9f:bd:49:81:7b:3b:7e:3c:
         75:21:57:9d:46:f5:0d:f8:48:32:fa:0e:ae:ee:61:a1:4b:a8:
         45:f9:8d:de:fd:8f:be:f9:c1:a0:5b:65:16:c1:ca:0f:2c:0d:
         d2:64:66:98:96:eb:be:c5:ab:60:86:3a:6e:57:97:ea:6d:b7:
         15:f8:85:d9:49:16:89:03:73:1c:05:b4:1b:b4:df:e3:77:3f:
         08:68:4d:24:6b:01:5f:e1:57:76:47:32:c9:52:78:4e:50:bb:
         a5:d8:45:0e:f4:68:ee:8e:a6:5a:72:06:4d:d1:44:90:a9:14:
         62:47:68:fd:e0:65:5b:9b:33:db:16:eb:29:da:ef:79:67:fe:
         49:ce:99:3a:cc:d7:40:db:2a:14:17:b2:59:d3:18:be:55:66:
         cd:db:b5:0b:9e:b2:45:ab:c3:76:5b:2f:b5:5e:f6:be:14:d8:
         89:0d:81:a7:47:7c:bd:f6:bf:1c:f7:a2:66:65:72:b7:69:d1:
         97:0b:75:a1:8b:85:a1:4d:f5:95:16:bd:1f:21:49:51:bd:98:
         d2:9f:1f:6b:72:50:8a:1c:99:f4:bd:77:ae:f6:2a:22:a6:15:
         8c:a7:9c:86:a3:bf:5c:c6:f9:d7:d6:77:51:8e:1f:71:b1:57:
         b8:01:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:49 2025 by rpki-client