Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69c706d4-d909-366c-b5c8-0885997fdd24.roa
File:                     69c706d4-d909-366c-b5c8-0885997fdd24.roa (raw, json)
Hash identifier:          iFdIGqX8gZ0bKDEIFX85OdzNGt9qjy1eV0Svks5gzXY=
Subject key identifier:   AC:90:2D:32:FA:74:84:E0:4C:9E:68:BF:8F:E2:8E:2F:0D:A4:51:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113B7924AA87A3CF7A9E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69c706d4-d909-366c-b5c8-0885997fdd24.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.198.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:3b:79:24:aa:87:a3:cf:7a:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=66a0d01b-b175-4d64-bfef-2032d67bd3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:24:43:2b:e3:de:c6:28:17:f6:a4:54:7f:
                    f3:67:95:4e:22:77:50:28:1b:b0:07:1c:68:97:4a:
                    d1:88:35:af:76:11:81:9c:a1:b8:3a:eb:ee:22:7d:
                    48:16:37:ab:99:89:f8:20:b7:55:14:d9:6b:43:d9:
                    77:ff:1f:7c:33:11:b7:95:fa:75:08:94:2e:5a:10:
                    03:61:e4:a9:61:ca:8f:73:60:75:bd:cd:9b:61:3e:
                    39:68:93:d3:86:e9:21:96:b0:bd:d4:69:05:f4:c8:
                    67:10:61:fc:ee:a7:62:ca:79:a0:b9:a2:72:bb:a4:
                    c6:64:0c:e6:f7:94:8d:67:8b:01:26:68:84:20:26:
                    ca:4c:d5:ea:d3:70:b5:d4:d3:7e:38:8d:17:3b:51:
                    0c:f9:4e:b5:ed:12:d7:eb:57:41:f7:28:de:8f:c4:
                    35:2e:0c:c3:a3:a7:a8:66:76:af:66:0b:ff:9d:41:
                    90:45:6f:e7:82:60:0c:a3:40:b1:89:f9:1f:26:89:
                    22:72:10:3b:1a:38:79:01:dc:4b:5c:37:b5:df:02:
                    0b:aa:0d:38:51:40:28:f8:a7:e5:ef:e7:40:42:96:
                    f1:9c:03:a5:7a:62:f9:63:74:9b:16:f3:b0:70:d5:
                    3f:18:50:e3:f1:9d:6b:f9:fa:bc:7d:ab:50:85:af:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:2D:32:FA:74:84:E0:4C:9E:68:BF:8F:E2:8E:2F:0D:A4:51:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69c706d4-d909-366c-b5c8-0885997fdd24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:34:dc:e6:e5:a5:3f:b3:02:e4:9c:3f:51:02:62:3b:06:
         72:10:39:fe:d6:f5:50:0d:d5:55:50:4f:51:ce:7b:55:7d:f6:
         bf:38:78:e4:1d:8f:b7:db:22:1e:86:f6:91:6a:72:3f:e7:d6:
         71:ee:66:f6:6f:7e:06:e4:9c:59:5e:36:a2:d7:40:de:41:fd:
         e9:5f:cd:89:f4:46:e9:a4:cf:eb:52:6c:80:43:45:75:cc:fd:
         e1:cc:7c:cd:0b:7c:28:b9:05:f3:c3:be:e3:3f:f8:31:f0:7e:
         ba:9c:e5:e1:1b:a3:5d:aa:ca:bb:5b:b5:da:bd:40:b1:28:20:
         f4:ff:8a:1e:1a:e9:02:d3:f3:b7:76:6a:52:86:7a:af:16:90:
         fa:08:df:5f:8b:d4:f9:fb:8d:5a:37:28:1e:37:b1:bd:a6:64:
         5f:4f:4e:72:f1:f8:80:fa:97:25:e6:52:5e:a2:3c:2a:9d:ca:
         5c:52:8c:98:2c:05:62:23:6d:21:c4:db:e2:78:d3:c6:9a:7c:
         87:20:d1:3b:30:e5:db:55:5b:9e:1a:b5:da:30:98:fc:76:0c:
         e1:48:bd:cd:4c:c5:e0:01:cd:b0:08:e2:bf:26:8f:7a:e7:22:
         0c:6a:d5:ed:6f:ab:99:fd:a4:13:c2:c7:c0:d3:2d:95:19:ff:
         c9:d4:39:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:57 2025 by rpki-client