Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa
File:                     6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa (raw, json)
Hash identifier:          ICRSFP39o7OMRTy99CCSxuHX6iriqmCCGYTO8nwtj9s=
Subject key identifier:   01:1B:9B:E4:50:00:47:AB:3A:ED:8B:8F:D7:13:63:CA:8E:1C:1C:15
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F006DBDF847AB7285600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.198.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f0:06:db:df:84:7a:b7:28:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fc9e93de-e0b5-4868-8325-f6114ce7c91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:03:fb:61:64:84:00:50:85:43:d0:97:87:
                    31:23:a3:8b:d1:57:0a:d1:d1:cd:2b:d7:6e:6f:92:
                    b3:78:58:4d:fe:1e:c1:66:a6:d9:f6:31:01:63:08:
                    4b:1e:f6:f6:1a:24:28:77:27:89:e4:a0:c0:1a:a4:
                    90:c3:55:a9:21:f6:5b:ea:de:1e:e5:ed:e4:dc:a8:
                    ac:d1:1d:d2:92:d4:fb:8e:be:33:6c:7e:1a:4d:bd:
                    90:7c:91:71:38:0d:89:d6:a6:3e:50:04:51:db:3d:
                    5b:9a:76:ff:55:98:7a:4d:a8:74:70:7f:a3:92:f9:
                    93:3e:81:44:41:d3:b5:21:0a:f0:ee:71:38:62:15:
                    00:14:96:35:dd:5a:07:e0:77:19:2e:3f:01:34:b7:
                    12:d4:d3:c2:85:90:1e:75:95:c2:38:cc:84:12:a1:
                    5e:df:81:a7:7f:42:ae:ac:cc:45:ae:9e:b0:64:8e:
                    b9:a1:4d:69:a7:6b:7f:a0:99:55:6d:98:fc:c8:dd:
                    d0:a5:95:f7:00:3c:01:cd:0b:fa:0d:05:2a:e1:83:
                    4f:36:0a:3c:1d:f4:46:c0:e7:9b:2b:e5:37:92:f9:
                    9c:52:65:12:8d:a3:fa:a7:74:52:54:9f:ee:d0:15:
                    19:e4:07:df:df:80:71:dd:a6:ed:bf:c7:5d:e7:ec:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:9B:E4:50:00:47:AB:3A:ED:8B:8F:D7:13:63:CA:8E:1C:1C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:c4:46:76:06:3f:10:43:6c:c0:a6:c4:95:3b:e6:3f:0d:
         83:12:8f:1f:f0:d9:5d:63:ad:e8:3e:d9:5c:dc:a8:0f:6b:1f:
         81:7e:d1:16:5d:66:02:f1:45:4a:f7:71:80:20:5c:fd:1b:3f:
         f1:76:06:52:68:9b:6b:11:6a:44:ad:e2:43:ee:fe:de:63:00:
         b2:7b:43:2f:a6:ea:35:91:32:f1:b1:22:1b:b5:d6:88:c8:f0:
         30:dd:a7:e2:c4:a8:c1:68:d4:8d:c8:36:36:91:96:3e:d6:a5:
         c3:85:2e:29:ba:70:f4:2b:89:9d:35:7d:3d:bd:31:05:e7:16:
         74:6e:8d:31:92:46:2d:38:d5:e1:24:dc:fc:59:28:d0:b3:99:
         c0:3e:07:c5:93:fd:c8:ae:b2:bc:67:65:d0:95:e6:16:cd:64:
         ad:94:80:34:9b:3d:69:92:00:4c:76:88:fd:e4:0d:b4:e8:e5:
         da:fa:5c:5c:a3:8e:ab:57:fd:ac:6a:55:f1:3e:75:55:a9:c7:
         e4:6a:8d:d5:66:50:03:46:9d:5d:5a:ba:08:49:8f:4c:c0:76:
         76:4d:95:50:66:27:93:b1:90:76:1a:e1:73:2c:45:84:36:c5:
         fa:1a:bd:ea:e2:84:c4:9f:15:a6:e2:2f:e9:76:c8:59:21:eb:
         c9:5f:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:27 2025 by rpki-client