Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a9f03f5-8547-342a-8594-36133d17f191.roa
File:                     5a9f03f5-8547-342a-8594-36133d17f191.roa (raw, json)
Hash identifier:          6FVsu9/EkqIe3xYgzorPbM7F2BlMfrzYXbfZMINerms=
Subject key identifier:   E5:3D:58:2A:20:AD:17:D8:07:36:C4:06:10:64:77:31:A6:AA:39:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E537F686F735E1A72780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a9f03f5-8547-342a-8594-36133d17f191.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e5:37:f6:86:f7:35:e1:a7:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2fbe9952-f008-4384-b851-a313ca6471eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:27:4c:fd:65:1d:b6:70:42:62:27:ce:d4:
                    9e:08:bf:e4:ff:b8:79:05:a5:6a:92:68:d1:63:b0:
                    45:85:1f:67:73:16:27:4f:30:ae:31:9d:d9:ef:52:
                    2c:a5:3f:d3:4a:7c:da:ac:20:e5:e1:1a:23:f0:29:
                    6a:62:6c:e8:aa:8a:82:ab:9b:f6:61:86:f1:27:d5:
                    a6:fb:09:20:05:14:a6:d7:d4:29:42:1f:bf:94:46:
                    f7:25:bb:42:b7:ee:c1:7f:99:34:00:67:05:a7:06:
                    b8:90:4e:ac:d7:32:a5:e2:7d:48:2f:c9:9c:6b:37:
                    05:36:0b:21:02:a6:11:fe:ee:0c:74:84:fb:77:59:
                    e7:1e:ce:a7:43:ac:0e:c9:a9:cc:ee:82:7c:f2:90:
                    4a:cf:70:c5:3c:d3:a7:8d:2e:0d:2a:77:14:aa:da:
                    33:cd:87:8d:2a:ca:41:41:50:3b:5b:41:51:ed:5f:
                    34:d3:d2:40:04:82:75:01:b5:82:29:c7:92:29:e3:
                    da:d6:88:3a:a4:20:66:59:08:47:72:c8:8a:29:19:
                    66:d6:a8:33:8f:92:37:78:54:4c:c1:3f:11:5e:50:
                    cd:57:0e:96:04:58:15:6d:9c:43:b9:92:bb:2a:c0:
                    8b:70:c1:c4:e7:95:2a:21:0a:a4:4a:10:5f:e5:cf:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:58:2A:20:AD:17:D8:07:36:C4:06:10:64:77:31:A6:AA:39:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a9f03f5-8547-342a-8594-36133d17f191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:ec:99:a9:51:7a:e0:1a:78:29:41:fc:ec:df:4d:bb:c2:04:
         4c:4f:51:3a:81:48:5c:c2:bc:8a:7c:79:49:54:53:ed:c0:90:
         49:50:92:b9:ff:46:9d:b3:b2:c6:9a:bd:7d:30:84:bd:06:12:
         93:bb:8e:39:9b:13:ba:d7:49:a4:4a:8c:8b:b8:d6:ae:a3:9a:
         75:85:15:24:f3:c0:d6:16:ac:ba:e6:3f:6f:80:cf:b4:7a:d2:
         c7:1f:f9:f4:55:20:78:50:e2:fb:77:62:b1:54:4f:4c:5d:12:
         0a:20:07:72:4d:e7:cd:30:34:4f:98:76:87:d4:55:01:75:65:
         6f:c0:f3:df:02:a5:21:9c:c4:0e:71:9e:78:30:b6:59:c0:68:
         2c:c6:45:2e:57:a0:ad:8e:17:c2:8f:44:5e:dd:af:e4:9f:cb:
         6f:4f:ef:f4:e9:bc:da:4b:78:b2:b2:06:94:bb:a1:f0:c7:ea:
         d6:d6:2d:4b:13:22:8b:0d:5b:81:4c:b6:8e:f4:35:21:07:f4:
         9c:dc:34:10:f8:62:10:24:27:f6:9b:a1:8e:e5:a6:f7:1d:9d:
         32:3d:9e:64:5b:b4:f6:a4:ac:f3:2c:1b:f1:72:5c:a4:2b:cd:
         14:2a:b9:a0:78:1c:0a:c3:05:f7:81:df:c4:3e:49:a7:91:01:
         b8:cc:48:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEeU39ob3NeGnJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MmZiZTk5NTItZjAwOC00Mzg0LWI4NTEtYTMxM2NhNjQ3MWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrQnTP1lHbZwQmInztSeCL/k/7h5BaVqkmjR
Y7BFhR9ncxYnTzCuMZ3Z71IspT/TSnzarCDl4Roj8ClqYmzoqoqCq5v2YYbxJ9Wm
+wkgBRSm19QpQh+/lEb3JbtCt+7Bf5k0AGcFpwa4kE6s1zKl4n1IL8mcazcFNgsh
AqYR/u4MdIT7d1nnHs6nQ6wOyanM7oJ88pBKz3DFPNOnjS4NKncUqtozzYeNKspB
QVA7W0FR7V8009JABIJ1AbWCKceSKePa1og6pCBmWQhHcsiKKRlm1qgzj5I3eFRM
wT8RXlDNVw6WBFgVbZxDuZK7KsCLcMHE55UqIQqkShBf5c+epQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOU9WCogrRfYBzbEBhBkdzGmqjk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE5ZjAzZjUtODU0Ny0z
NDJhLTg1OTQtMzYxMzNkMTdmMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANPsmalReuAaeClB/OzfTbvCBExPUTqBSFzCvIp8eUlUU+3AkElQkrn/
Rp2zssaavX0whL0GEpO7jjmbE7rXSaRKjIu41q6jmnWFFSTzwNYWrLrmP2+Az7R6
0scf+fRVIHhQ4vt3YrFUT0xdEgogB3JN580wNE+YdofUVQF1ZW/A898CpSGcxA5x
nngwtlnAaCzGRS5XoK2OF8KPRF7dr+Sfy29P7/TpvNpLeLKyBpS7ofDH6tbWLUsT
IosNW4FMto70NSEH9JzcNBD4YhAkJ/aboY7lpvcdnTI9nmRbtPakrPMsG/FyXKQr
zRQquaB4HArDBfeB38Q+SaeRAbjMSNM=
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:54:03 2025 by rpki-client