Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa
File:                     40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa (raw, json)
Hash identifier:          ga1gGOziKSqAYM8PUoLlQi3IuCbXGvTFKbTiG+h20+4=
Subject key identifier:   A4:ED:03:DC:59:60:5A:0C:DC:17:C2:2E:56:84:3E:85:EB:EF:A5:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411EEB2F878247F0544FF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ee:b2:f8:78:24:7f:05:44:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1b463206-4401-4c36-8497-f46e0345dad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:4b:20:65:5f:94:2f:8f:82:72:55:71:df:
                    eb:48:56:f1:bc:81:64:42:72:18:af:70:73:b2:6f:
                    b2:6b:33:4a:63:5d:29:7b:6b:26:03:0e:92:6e:f0:
                    4b:e4:ad:eb:ae:d5:ee:d9:99:a1:84:6d:56:3e:aa:
                    2c:97:83:74:9d:54:3a:74:7c:eb:27:8f:e5:85:49:
                    51:61:c7:27:e4:f6:aa:80:f3:46:76:8b:81:00:fc:
                    2c:b5:42:ba:87:16:59:ae:56:5f:9e:4c:11:cd:c1:
                    10:49:7f:32:a9:71:1e:3e:a7:a7:04:ed:20:34:05:
                    c5:e1:ff:49:57:c5:48:b8:55:93:66:20:6c:1f:50:
                    50:a8:83:e9:46:5d:d2:48:ab:a3:97:35:29:78:61:
                    77:da:56:2e:2a:d7:a6:fd:13:44:bc:f1:0e:55:2a:
                    51:f5:ec:ba:61:57:55:3c:6b:88:cf:6b:8e:1d:56:
                    cf:ee:f2:97:14:6e:e1:cc:dc:93:d0:f3:f0:ad:85:
                    27:1f:5b:83:cf:3a:08:0c:44:ef:49:bc:2a:e3:d7:
                    f5:04:68:59:27:e6:bf:05:d5:40:e8:6e:37:81:d1:
                    11:e3:d3:84:8d:73:97:1d:48:fd:80:7d:6d:57:01:
                    44:78:31:1f:f7:73:c3:f2:27:ea:a0:a6:b7:38:4d:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:ED:03:DC:59:60:5A:0C:DC:17:C2:2E:56:84:3E:85:EB:EF:A5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40e56bb5-7c62-38ce-950c-83934d1d3c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:cc:a9:21:55:bc:d0:b5:ac:5e:32:7d:29:2f:bc:49:b4:
         3c:99:17:a5:ee:b2:e6:74:a7:41:ac:10:49:59:8e:cd:9a:7d:
         16:2c:29:88:e2:a9:34:26:2b:9e:df:80:a6:9a:4f:6a:4e:9f:
         db:e0:b7:34:ba:57:66:cb:d0:a1:56:fa:5c:69:d1:84:35:96:
         b0:c4:21:fe:20:b9:b0:c6:26:9b:08:81:8d:f8:37:b2:42:95:
         b4:97:f3:63:26:f7:5e:5e:36:d1:de:97:03:b3:ca:d6:51:d7:
         4a:d4:c0:54:27:87:38:a4:01:f9:cc:16:fd:ac:80:0f:7a:9a:
         ad:89:ed:5a:d2:52:58:3c:2b:40:ee:a9:24:d7:67:3e:23:d4:
         5c:df:61:0e:7c:84:50:d5:a6:6f:35:ed:ff:b0:c5:fd:30:46:
         77:6a:00:39:91:87:a1:d6:89:0a:55:b4:d0:61:58:1b:72:0a:
         40:40:5a:04:24:06:e0:78:0c:d6:cf:da:e6:65:14:de:30:8b:
         b7:f0:27:3d:e6:fe:bd:ca:7a:08:77:43:50:49:46:a2:19:8a:
         fc:c0:55:a8:da:51:49:4d:b1:7c:d1:5c:09:e1:d4:0e:18:a4:
         14:28:6e:8f:9f:12:be:6f:19:17:1c:47:4f:4e:15:62:45:bb:
         1f:99:72:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEe6y+HgkfwVE/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MWI0NjMyMDYtNDQwMS00YzM2LTg0OTctZjQ2ZTAzNDVkYWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqBLIGVflC+PgnJVcd/rSFbxvIFkQnIYr3Bz
sm+yazNKY10pe2smAw6SbvBL5K3rrtXu2ZmhhG1WPqosl4N0nVQ6dHzrJ4/lhUlR
Yccn5PaqgPNGdouBAPwstUK6hxZZrlZfnkwRzcEQSX8yqXEePqenBO0gNAXF4f9J
V8VIuFWTZiBsH1BQqIPpRl3SSKujlzUpeGF32lYuKtem/RNEvPEOVSpR9ey6YVdV
PGuIz2uOHVbP7vKXFG7hzNyT0PPwrYUnH1uDzzoIDETvSbwq49f1BGhZJ+a/BdVA
6G43gdER49OEjXOXHUj9gH1tVwFEeDEf93PD8ifqoKa3OE1pnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTtA9xZYFoM3BfCLlaEPoXr76WTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBlNTZiYjUtN2M2Mi0z
OGNlLTk1MGMtODM5MzRkMWQzYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOhzKkhVbzQtaxeMn0pL7xJtDyZF6XusuZ0p0GsEElZjs2afRYsKYji
qTQmK57fgKaaT2pOn9vgtzS6V2bL0KFW+lxp0YQ1lrDEIf4gubDGJpsIgY34N7JC
lbSX82Mm915eNtHelwOzytZR10rUwFQnhzikAfnMFv2sgA96mq2J7VrSUlg8K0Du
qSTXZz4j1FzfYQ58hFDVpm817f+wxf0wRndqADmRh6HWiQpVtNBhWBtyCkBAWgQk
BuB4DNbP2uZlFN4wi7fwJz3m/r3Kegh3Q1BJRqIZivzAVajaUUlNsXzRXAnh1A4Y
pBQobo+fEr5vGRccR09OFWJFux+Zcl0=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:06:01 2025 by rpki-client