Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa
File:                     1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa (raw, json)
Hash identifier:          VVNPUiHFo/dwT9uWVnx4+ZSPZT7XZAGA1UAmsbgEOvo=
Subject key identifier:   23:EE:6F:BA:23:E3:47:34:C3:73:6D:84:55:AC:58:84:B1:E0:1B:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113895309A5BB74DBE2500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:38:95:30:9a:5b:b7:4d:be:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2ddbb1f0-8000-4edd-8b3c-bd10c461cc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:e1:07:3a:92:06:4d:68:f9:48:5a:7e:05:
                    9b:b4:66:fc:f5:1e:10:47:50:3b:e2:c5:fa:3f:d8:
                    09:14:10:d9:6e:51:a5:e0:fc:60:2b:78:23:8c:41:
                    5a:e5:71:46:ad:e6:64:f0:8c:a3:e8:74:17:1c:cb:
                    c8:77:59:52:1f:72:3f:0c:0a:fe:70:6b:8e:df:a2:
                    00:a8:7a:f2:db:eb:a7:0c:7b:01:65:e2:b0:0a:c5:
                    ac:bc:93:74:f5:e7:35:42:43:c6:6f:89:be:c3:d5:
                    3b:7b:08:b4:c0:02:2b:84:b0:48:5d:4f:76:23:cb:
                    99:08:ff:36:44:4b:75:42:c9:b6:68:ba:40:b1:4e:
                    e4:cd:6a:b8:25:48:f0:b6:eb:8c:c3:27:36:9b:a1:
                    98:52:17:21:27:76:58:b5:be:33:37:b8:9a:4b:f8:
                    ce:3d:39:f5:6f:6a:c5:2e:e6:c8:10:c1:5c:1c:8b:
                    be:81:14:3c:78:73:fa:01:e0:a8:1a:20:ed:94:bb:
                    8b:ff:1a:1c:da:46:65:4e:01:41:40:ea:df:2a:80:
                    3c:8a:67:f7:32:2e:3e:16:4a:92:cd:3a:fc:42:df:
                    16:e0:76:44:aa:49:b2:51:24:ed:6d:e4:5d:54:2e:
                    b1:69:bf:5f:4f:d8:b3:ac:ab:9c:b9:fd:28:64:3c:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EE:6F:BA:23:E3:47:34:C3:73:6D:84:55:AC:58:84:B1:E0:1B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:a6:d5:1b:7c:3a:52:67:91:01:38:9d:95:2b:06:28:57:
         5d:89:cc:2b:08:ad:be:99:89:49:27:1c:13:ae:90:15:55:80:
         b5:99:14:d5:9c:36:41:8e:85:59:69:c6:32:85:af:2e:7c:d3:
         37:4a:53:ed:4a:3e:15:1e:bb:85:00:be:6f:7a:ac:e5:cf:94:
         ea:55:8f:e6:b4:6d:ed:c0:72:b3:d0:f3:e8:ca:13:ae:f3:b0:
         7a:f5:38:a6:23:00:c9:8c:e8:94:d8:cd:92:a1:65:46:10:4a:
         02:d3:a2:86:5d:a8:1f:15:c7:ef:39:df:5b:96:37:16:6f:87:
         de:ff:59:bf:69:8b:53:f0:b9:06:40:d4:59:19:0c:58:7f:ea:
         88:79:bb:43:3a:ef:77:ac:d7:54:1d:e3:7e:4f:e0:42:2a:c2:
         a6:9a:7d:94:54:63:22:db:51:eb:bc:6d:00:8c:90:2c:26:fa:
         ad:72:c7:f5:77:20:be:ac:fb:46:e7:d2:fd:11:92:09:5c:20:
         33:06:c2:d3:30:8f:b9:63:25:4e:c2:01:60:17:52:57:f8:e9:
         67:f7:7a:e7:33:89:90:a6:c8:16:3b:95:af:bc:2a:0a:a0:46:
         1c:b3:d1:05:05:fa:18:35:2c:10:09:57:22:99:c6:f2:e5:27:
         e3:ec:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:10 2025 by rpki-client