Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68ed29b0-aa1a-324b-9de4-c29ef395b1e8.roa
File:                     68ed29b0-aa1a-324b-9de4-c29ef395b1e8.roa (raw, json)
Hash identifier:          y4ggYOfukO5wmdiaiPaXa/TIXtaGYTvNBuaJJm4KQlE=
Subject key identifier:   5C:A9:1A:01:14:49:3A:1C:2B:AC:9A:08:9D:5A:F4:10:DA:EB:52:D0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E2B95F0D657C1DF5E480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68ed29b0-aa1a-324b-9de4-c29ef395b1e8.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e2:b9:5f:0d:65:7c:1d:f5:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=074425e8-b56c-418e-abe8-a78d01826169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:0e:b0:65:fa:64:f1:d8:64:ec:33:e5:05:
                    b6:26:f1:43:f7:8e:c5:b7:d2:7d:6a:b8:38:1d:9b:
                    27:6e:6f:d6:e9:9f:b7:dd:23:d4:d4:dd:6f:47:89:
                    6d:de:7a:69:f6:94:83:18:37:fb:14:4d:15:8d:ff:
                    25:c6:f7:3e:9e:51:c1:5d:0f:22:93:29:6b:1c:c8:
                    b7:9c:88:39:d8:da:f3:eb:9f:ae:98:07:bc:19:ca:
                    e2:29:aa:7f:1a:ca:32:12:7c:44:f6:f9:08:a0:a4:
                    ca:4e:e4:51:22:e5:e0:dc:f2:f9:35:61:a3:4e:aa:
                    56:c5:61:38:56:f2:cf:37:a4:e7:a3:f7:50:77:e5:
                    cf:38:b5:77:e7:dd:34:5e:19:eb:f1:1c:c2:e4:fb:
                    c3:c4:9d:66:5c:91:be:63:d5:28:67:9a:de:0d:b9:
                    9a:22:56:2a:56:7b:36:28:b0:ff:ee:9a:f7:48:e4:
                    88:18:e0:4e:98:54:f3:08:1b:5a:07:ac:75:cd:2a:
                    21:44:56:b4:4d:33:26:ed:36:47:53:f4:7b:0e:b5:
                    59:17:dc:11:af:35:84:f4:59:7e:ac:36:6b:ff:cf:
                    01:fa:e9:00:71:bd:02:17:14:4f:d7:fa:14:65:a0:
                    05:a8:31:ef:89:35:84:2e:53:b5:c4:a8:bc:d4:fc:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A9:1A:01:14:49:3A:1C:2B:AC:9A:08:9D:5A:F4:10:DA:EB:52:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68ed29b0-aa1a-324b-9de4-c29ef395b1e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:57:ca:23:77:76:5b:e1:6d:41:fd:27:54:d5:aa:d2:3a:
         b7:68:8c:da:34:f5:53:1e:9d:4b:15:76:cf:82:71:90:01:61:
         b6:c2:0f:18:11:2a:ab:61:4f:68:d9:f1:8f:0d:d7:bc:97:bb:
         ac:9c:c3:c4:12:a4:92:db:75:d2:cc:3d:aa:ab:88:68:d1:8d:
         55:3d:49:55:03:8e:1a:47:6a:99:b6:9d:9f:57:77:f3:d8:48:
         6c:d7:b0:23:50:eb:1a:a8:f4:40:e4:82:0e:8d:64:54:84:f7:
         98:3c:8f:7f:db:7a:ca:54:10:02:ef:34:ac:20:58:1d:e9:6b:
         cf:af:ab:5f:a7:55:88:15:35:fc:16:7d:de:8d:5b:44:54:56:
         80:aa:93:03:9b:e6:d2:28:dc:2f:ea:19:ab:36:08:c4:3c:00:
         b9:fe:9c:f7:73:24:9e:bd:33:b3:15:7e:01:74:b4:76:57:19:
         fb:4b:95:b0:e2:26:94:00:b8:47:7e:01:d0:26:2b:f5:3c:a2:
         f9:37:dc:0f:ee:59:59:84:10:84:f5:3f:b1:24:0b:69:32:bf:
         0d:e4:57:6e:33:d9:4e:55:7a:aa:18:5a:4c:15:7f:4c:89:53:
         37:34:c8:eb:fe:b7:96:ef:25:a1:62:fe:0b:7c:c3:ee:a7:10:
         14:73:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:17 2025 by rpki-client