Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527b2a48-a2f6-33b9-abde-e2d4284923cd.roa
File:                     527b2a48-a2f6-33b9-abde-e2d4284923cd.roa (raw, json)
Hash identifier:          eLuMDFOo3qqTz/KQ9KA9kMlKU7yRsxzdJqHxTa578wk=
Subject key identifier:   5C:A0:45:65:3E:AE:85:8A:60:CC:73:63:98:40:68:DC:11:01:D0:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E3934AE826BD491ADD40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527b2a48-a2f6-33b9-abde-e2d4284923cd.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e3:93:4a:e8:26:bd:49:1a:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d7f5086c-13ae-472a-9c4b-0420474b6ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:4c:ac:31:aa:ee:6f:34:f9:6f:17:59:41:
                    f4:ea:62:09:f1:c2:f1:83:da:a8:fd:4f:53:3a:7e:
                    75:cc:af:51:96:2d:88:58:0c:bf:2a:02:75:93:8b:
                    37:96:2e:7d:a6:8b:17:d6:4a:e5:73:65:13:ac:7a:
                    5c:bd:ec:17:0e:8f:be:17:ea:18:34:84:07:4d:c4:
                    23:af:78:3a:98:3d:ee:ca:95:cf:56:c7:79:55:50:
                    83:4a:3f:8d:df:82:91:31:b0:9a:4b:f4:d6:47:64:
                    cf:14:ee:43:af:3e:5c:c4:0d:96:32:b3:c2:34:2b:
                    a6:13:58:83:05:1a:9a:1c:de:4e:ab:c6:82:c5:c5:
                    a1:9a:41:ad:91:99:c7:d5:be:6f:f9:0e:9b:54:1c:
                    43:81:b4:f0:31:41:14:f6:7b:5b:07:e4:72:e9:d7:
                    61:13:81:60:00:7f:c2:af:f2:4c:6f:17:e6:ce:0a:
                    6b:25:09:c5:ab:ea:54:e3:bd:a0:af:4d:6b:87:18:
                    58:f9:61:5a:73:a2:4c:e2:8e:41:5f:8b:f0:b3:ee:
                    b5:46:92:64:61:1a:fd:cb:f7:ec:0e:b4:b8:17:d4:
                    d7:ff:c4:9d:86:cd:8b:be:6b:de:4e:64:c6:14:3e:
                    3a:23:41:ee:9c:04:3e:53:08:25:7e:bb:9d:d0:a3:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:45:65:3E:AE:85:8A:60:CC:73:63:98:40:68:DC:11:01:D0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527b2a48-a2f6-33b9-abde-e2d4284923cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:36:98:ec:ea:c9:fc:94:12:7b:5b:e7:b9:9a:90:ff:06:7c:
         27:78:4a:d5:ad:2d:8e:f1:00:39:7c:44:ab:60:d3:4d:fd:39:
         d3:b5:27:7a:88:55:17:89:93:59:9e:c9:3e:0a:b2:66:d4:a6:
         ad:14:80:98:ff:56:b2:a6:1a:92:47:6c:e2:1a:81:e1:cf:dd:
         ae:0d:b2:cb:f3:29:64:dc:4f:6d:b5:7c:2e:53:28:4e:81:fc:
         df:21:4b:b6:9c:b8:d5:52:da:ac:57:cb:20:c0:79:9d:7e:0a:
         82:01:07:f6:7f:63:f8:df:43:7d:13:8a:84:b6:d0:48:01:c3:
         25:4f:57:66:ed:a4:6d:60:ab:cc:f6:20:dc:ae:05:54:2a:eb:
         7b:8c:a9:07:43:d8:6e:d6:d1:b0:06:30:9b:55:dc:cc:b7:35:
         2b:c6:3e:5d:24:89:6f:0b:7c:ca:60:09:5a:aa:2f:01:1e:27:
         80:ac:50:97:60:77:d2:68:be:44:93:29:c0:fb:0f:e5:2e:03:
         b6:17:3f:cd:8f:c1:ed:06:fa:0e:d5:be:7e:98:bf:6d:05:8e:
         d0:59:45:a5:ff:a1:72:93:fb:6c:8d:f6:85:d3:80:0f:e4:c8:
         7c:b6:91:9f:6b:7e:5b:89:cf:cd:70:5d:d5:4f:e1:e3:a4:44:
         62:5e:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:11:00 2025 by rpki-client