Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6660cca2-32f7-30d0-a777-5cd3d37fcf2f.roa
File:                     6660cca2-32f7-30d0-a777-5cd3d37fcf2f.roa (raw, json)
Hash identifier:          71+v8RdnLs1qdyROW3cbzD4j7GHhOxpmaKmcH9aMx8k=
Subject key identifier:   E0:23:6F:39:63:18:CB:1E:72:01:4F:95:52:96:61:0C:B4:02:19:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E658ECF2287056275980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6660cca2-32f7-30d0-a777-5cd3d37fcf2f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e6:58:ec:f2:28:70:56:27:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d575c224-c02f-4415-ab51-9a573b0fc82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:a8:d9:ae:26:c1:7a:26:2f:44:e3:32:50:
                    ce:ad:9c:2d:f6:31:ef:44:c4:0b:3f:19:0b:07:93:
                    1b:dc:7e:35:e8:f0:2d:14:d5:09:70:75:40:62:d2:
                    71:cb:85:bc:c4:59:9e:bf:b2:e2:6e:10:14:c5:b0:
                    33:e8:73:30:a4:46:4f:bf:1b:7b:08:da:7a:53:0b:
                    e6:fe:da:32:b4:c6:3b:c4:11:e3:ba:88:f6:4d:32:
                    01:49:e9:03:1b:ee:e0:b4:3b:e1:94:65:67:81:db:
                    d3:ea:61:ba:8c:0f:39:cf:27:fb:6c:fb:30:87:b0:
                    59:33:f0:3f:ae:6f:04:88:fd:c7:b2:de:1d:1c:a8:
                    04:14:a5:89:cb:69:29:6a:ab:72:a4:23:8b:9a:30:
                    d1:4e:f5:38:0f:a9:73:5a:5f:fa:0a:35:5d:64:c0:
                    ce:d5:d9:d2:46:ab:c1:40:8e:1f:10:e8:95:2c:48:
                    46:c8:da:b5:bc:1f:7f:26:db:3d:d6:32:a0:46:bf:
                    23:9b:d2:50:6e:51:5b:cf:49:d7:37:61:d3:23:71:
                    01:19:4d:35:9b:91:f7:e6:ed:24:c5:07:f3:ce:65:
                    0d:69:be:17:d5:0c:a9:15:00:dd:e8:c9:ed:9f:0c:
                    38:3a:83:45:88:c4:bb:d7:2f:c8:e3:fb:fe:7f:96:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:6F:39:63:18:CB:1E:72:01:4F:95:52:96:61:0C:B4:02:19:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6660cca2-32f7-30d0-a777-5cd3d37fcf2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:4f:43:e1:57:1a:12:ae:a4:1a:1f:0d:11:59:2f:5f:f5:25:
         34:b9:1a:4e:3c:cb:78:32:07:c9:b5:26:21:ca:53:7c:90:63:
         9a:c9:c1:df:85:da:5a:11:fc:9b:c9:f9:2e:c1:14:3c:9a:02:
         af:9c:9e:ec:57:b5:0f:87:a4:64:49:3c:a4:81:ac:83:20:24:
         3b:59:95:02:4f:f9:a0:04:08:b5:e6:d1:fb:7a:a9:ca:99:26:
         dd:91:f8:ac:9f:9d:b0:71:e7:31:22:a3:89:8d:8d:4b:41:76:
         c6:81:c0:83:ab:13:f4:b6:7c:2e:99:c8:36:67:dc:86:b5:10:
         94:80:61:dc:fb:2d:6a:61:28:16:46:93:b5:ef:0b:b5:50:b5:
         5f:0d:e3:b3:d5:28:ac:e2:24:2a:7c:09:b7:75:85:2d:6e:cd:
         52:ba:9f:f5:61:b8:65:c3:86:3a:e8:e2:6b:8b:ba:1d:b7:1e:
         38:15:29:4e:7a:cf:89:7b:d9:13:33:cd:6e:f4:d9:a6:4b:f4:
         50:95:94:5b:b1:c6:13:df:8c:eb:9b:88:c7:4e:b0:1b:a4:74:
         8a:a1:40:ac:40:da:f2:6f:3e:80:36:0e:d6:a3:ee:10:bf:b6:
         dc:15:8d:fa:c8:a4:ca:9a:3b:33:2b:c0:ce:91:98:67:3f:65:
         06:9e:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:36 2025 by rpki-client