Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d1bd15a-1840-3acb-b4a7-00744f22fc38.roa
File:                     6d1bd15a-1840-3acb-b4a7-00744f22fc38.roa (raw, json)
Hash identifier:          RA3o/EFwNnFBhlut1AhhdEF1Oo0+FTKS6Ipny1PHzDk=
Subject key identifier:   38:AC:11:D1:B0:CA:3E:5A:45:39:A3:21:74:FF:4C:DC:D3:03:95:D9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841139BB899C9BB89CC8DC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d1bd15a-1840-3acb-b4a7-00744f22fc38.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:39:bb:89:9c:9b:b8:9c:c8:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=98f12b08-4849-4d90-90cd-1f8a4a4ae281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:24:e8:ed:3e:8c:4b:cf:0d:99:45:f1:e8:
                    eb:ab:fc:dc:43:9d:19:c2:42:05:17:81:2f:2d:01:
                    1b:50:bc:26:14:9a:bb:8a:bf:89:bd:b2:a2:d3:41:
                    21:64:3a:b4:d5:97:21:dd:4d:00:4f:c6:e9:81:29:
                    6d:0c:3c:dd:0b:09:da:35:a7:e9:bd:53:10:8a:89:
                    7d:68:e3:a7:16:67:9d:03:f7:81:67:7a:21:e4:ca:
                    5e:37:db:8d:9a:8b:50:80:34:d4:7b:7a:78:ff:53:
                    16:1d:54:e2:4d:6d:11:ba:b3:50:d2:a7:bc:9c:6a:
                    20:46:14:5a:91:d6:5e:47:b6:d3:31:15:50:72:0b:
                    18:57:96:5a:ea:16:51:11:a2:a6:03:b8:32:86:88:
                    c8:bd:72:ae:e8:c5:15:24:cb:a5:a7:ca:c4:79:58:
                    b8:4b:77:1d:b3:f1:58:5c:f2:bd:33:3e:13:f4:31:
                    9b:d6:c6:7c:a8:38:1c:28:e1:a4:f3:55:f6:d6:24:
                    8e:c6:a0:30:54:3f:ab:b1:7d:ac:24:b1:e6:ce:51:
                    c7:1c:bf:01:b8:f4:3a:e3:fc:0a:43:4e:c8:e5:8c:
                    2a:0c:cb:3a:54:1c:d4:f7:05:d2:7c:87:81:93:54:
                    5e:3f:be:1e:4b:ac:4d:33:78:e6:14:f8:81:5c:34:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:11:D1:B0:CA:3E:5A:45:39:A3:21:74:FF:4C:DC:D3:03:95:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d1bd15a-1840-3acb-b4a7-00744f22fc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c6:97:0a:42:1a:79:e8:8b:3a:66:9d:89:b4:57:a5:b7:55:
         5c:46:5f:d4:df:3a:a3:69:32:b1:9b:4a:15:32:18:1f:1e:8d:
         1d:8b:c7:0d:cf:7b:bc:80:6f:f7:ea:30:7b:2f:34:ea:6d:bf:
         a9:0a:cf:e0:7e:0f:c9:46:10:56:bb:09:7d:60:e4:78:b9:a2:
         b0:cb:32:84:43:5d:a3:ea:83:f0:f8:ec:fd:46:4f:cd:b6:f6:
         d2:21:6c:82:d8:9a:3c:9a:61:3b:84:f7:04:de:da:6b:bf:6d:
         8b:b6:e1:20:dc:48:53:cb:26:e7:a3:48:03:58:c2:ba:55:84:
         cd:0a:08:7a:a7:24:0e:16:6e:f8:1e:df:9b:c8:6b:7e:91:de:
         45:17:44:01:25:22:4f:d8:68:1c:51:69:6f:9b:d1:11:6a:1f:
         61:96:ac:f0:5c:3c:8c:ae:50:b8:38:ad:55:7e:a0:49:07:6f:
         3b:77:c0:a7:bf:69:3c:da:00:6c:17:1b:f0:6a:f1:85:52:29:
         22:a5:3c:c3:5e:14:79:e7:e0:43:b1:96:36:1c:bc:4e:96:07:
         5d:c3:0c:29:1e:31:a1:05:e3:b6:af:0e:b5:78:dd:a3:e9:7e:
         e3:2a:06:df:29:ac:92:69:4b:0a:a2:31:b8:d5:50:76:f0:5f:
         5c:3b:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:15 2025 by rpki-client