Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612c778e-f024-3a80-ad81-31ef0e9b7a91.roa
File:                     612c778e-f024-3a80-ad81-31ef0e9b7a91.roa (raw, json)
Hash identifier:          z8Vvdn9XXDmRIGwhXhsLT5pY6G8ZorXFes9Sxo/cE/c=
Subject key identifier:   0D:FE:17:21:B1:EB:A0:A0:9B:27:CC:23:B3:07:AB:14:DE:83:64:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E7501DFAE190EA5A5D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612c778e-f024-3a80-ad81-31ef0e9b7a91.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e7:50:1d:fa:e1:90:ea:5a:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0211f11f-d66a-4ee4-99e3-82bb9b1e6efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:dd:e3:76:4a:22:14:b6:f9:a6:22:94:b3:
                    82:d6:96:82:d1:28:86:07:ac:28:75:f3:dc:b8:f8:
                    50:50:7b:72:64:7c:c9:cb:a6:25:09:e9:3a:75:c5:
                    a3:65:b5:cd:e9:2a:91:f5:33:dc:a1:91:34:29:5e:
                    d6:19:29:4a:7d:dc:b8:00:6a:6c:fc:1f:79:75:85:
                    06:72:40:30:f5:77:40:d4:11:6b:37:90:31:04:88:
                    97:b1:93:18:fe:7d:75:9e:5f:b7:90:ed:83:0d:8e:
                    8b:6f:0d:0d:24:6d:78:30:b2:d8:63:e4:69:8d:f0:
                    8b:a3:90:f3:f7:97:8a:95:53:ac:30:31:33:4e:14:
                    8e:ed:0c:d1:c7:bc:3f:dd:f5:bf:a5:46:9e:b3:8d:
                    4c:1d:3b:6f:97:5e:ab:97:c7:28:d6:37:14:0a:c1:
                    68:b6:e2:11:30:2b:d1:3c:c2:fb:80:9e:ca:46:08:
                    d8:7b:40:39:34:49:6c:ba:54:0a:4b:f6:0d:74:16:
                    ec:dc:a5:f1:08:ab:ab:11:a9:a3:7f:99:48:04:c8:
                    3b:29:10:62:90:a1:67:fa:79:a1:b7:5d:23:9e:69:
                    6b:f0:c6:9f:55:56:fb:6d:3d:1a:40:34:99:31:da:
                    0a:77:7a:68:f8:8b:a2:2d:4d:34:74:50:dc:b4:bd:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FE:17:21:B1:EB:A0:A0:9B:27:CC:23:B3:07:AB:14:DE:83:64:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612c778e-f024-3a80-ad81-31ef0e9b7a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:45:96:94:e0:15:aa:22:e3:6a:3f:20:77:5e:08:c3:bd:ee:
         9f:13:d6:84:49:35:39:05:f5:c0:3b:07:64:bf:a9:e4:2c:5e:
         62:1f:04:f5:d0:b4:40:a7:55:01:4f:39:c7:6f:91:c0:16:2d:
         09:55:8c:06:7c:a0:12:7d:c5:55:71:b8:33:c0:9f:ef:03:a6:
         fa:b9:58:27:5e:49:95:a1:34:9c:de:55:25:84:c8:03:ae:cf:
         03:f9:5f:59:6c:6c:62:13:21:80:fb:98:89:bc:88:51:16:21:
         ee:bb:f7:7a:b1:40:4a:60:53:d4:94:38:81:d8:73:cc:ee:c9:
         a0:ba:b7:a5:03:bb:89:20:3e:be:f4:b0:42:e6:63:26:53:44:
         5c:6c:a3:89:72:64:74:86:9a:38:51:a0:3d:8a:e0:1e:d9:30:
         50:a6:8a:a4:63:b2:a7:50:2a:f0:12:71:26:43:10:59:58:5f:
         70:a0:d0:ae:d5:02:8f:99:0d:3d:d0:e4:6f:47:c9:3e:e4:79:
         e4:da:fb:ec:81:39:3d:4b:97:43:02:46:65:81:92:a5:97:04:
         41:f1:65:66:d5:fa:3a:db:6c:a4:9d:c3:4f:52:8c:8b:6f:f1:
         e9:7e:db:eb:0d:28:88:72:d0:6a:d1:4e:3c:b3:bd:bf:2a:63:
         2d:21:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:24 2025 by rpki-client