Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa
File:                     3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa (raw, json)
Hash identifier:          odjXvJLBiT4rSH7riXVUgIOpApTOKz1IHwOAhngGQ6o=
Subject key identifier:   C3:1B:03:1B:52:AA:64:EE:94:A6:51:AA:96:2B:C2:C6:92:A9:9E:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411ED799641E58396410180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ed:79:96:41:e5:83:96:41:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=72b9ebd6-1402-48f1-840a-b2c6142f9483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:f1:5f:5d:66:64:86:36:77:c1:ca:dc:e5:
                    ce:6b:8b:04:06:8c:ce:85:de:8b:db:50:fe:97:a9:
                    ab:ab:d7:2b:ee:43:e5:79:60:91:6d:05:cd:92:1b:
                    b4:fd:8b:2b:03:97:ad:8a:73:52:c3:a5:63:46:63:
                    b2:a5:e1:3f:92:12:b3:a0:d1:b3:cb:d0:87:c7:79:
                    12:1d:9d:26:21:93:ca:08:6d:83:d3:29:c5:99:b0:
                    e6:a8:ce:c7:78:e5:ff:e5:e0:7a:3c:f6:0f:81:62:
                    67:98:b5:77:79:1f:95:43:3f:0e:a3:d0:c8:9b:4a:
                    b1:d0:4d:68:a7:b3:89:24:b7:36:0a:e4:f6:04:3f:
                    00:d1:a4:b4:d0:a6:50:29:80:81:7a:29:3c:eb:9f:
                    ef:82:38:e9:91:b1:83:96:ea:01:e2:94:d7:17:74:
                    74:11:64:5b:3e:7b:d8:42:62:f1:0b:63:a4:e9:85:
                    50:d3:c0:a2:8f:23:2a:0e:95:1b:4a:7e:66:86:5b:
                    6e:73:24:5c:2a:81:d7:07:9a:2b:b3:ef:c5:da:c4:
                    71:dc:a8:16:35:b5:eb:d1:11:2e:56:e9:2d:f2:12:
                    1d:c8:b4:b3:c3:4a:23:23:b8:e2:1b:f1:1b:cf:3c:
                    90:66:6d:94:c3:4d:69:17:d8:d7:11:1e:6e:cf:06:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:03:1B:52:AA:64:EE:94:A6:51:AA:96:2B:C2:C6:92:A9:9E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:75:66:75:08:fd:76:11:58:d5:4d:7f:19:e5:87:0e:32:35:
         b6:7c:82:04:8a:b7:9f:f5:0d:d1:15:6f:d9:0b:ee:a9:b0:59:
         44:67:16:88:db:08:b4:79:74:53:f9:73:a5:c1:a9:78:20:07:
         8c:e5:62:2b:fb:9d:b7:04:87:1d:aa:a6:68:a1:a7:29:3a:3c:
         85:ac:3d:cb:36:0b:a9:a7:ce:37:ca:4f:8b:32:5f:90:a5:88:
         57:d5:c1:b1:e8:fe:ec:94:81:02:cd:ee:bb:35:aa:c7:72:3a:
         40:29:15:2d:68:de:2e:5f:18:43:d1:f4:a6:4a:ed:69:00:ce:
         0b:bc:d7:e1:8c:6d:40:3f:6d:04:af:8f:a1:8d:05:0b:c8:a2:
         ad:f1:ca:44:4f:01:7b:f7:96:23:92:33:b0:96:bd:48:76:07:
         32:84:ed:00:65:8d:64:f3:0d:1f:da:df:12:58:5a:5b:81:2f:
         76:1b:14:ec:52:d8:81:f3:db:fc:ed:e0:39:4e:f2:58:70:cb:
         2e:92:0f:70:a6:e9:6d:66:d4:90:00:e7:73:54:0d:ff:f0:6e:
         c2:0e:fd:33:17:23:af:96:63:e9:a6:04:12:6f:67:f0:d3:a7:
         70:d6:6b:c9:0a:ae:e9:23:c0:04:49:33:c8:9e:62:8d:3d:0b:
         69:08:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:42 2025 by rpki-client