Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72f279f9-560a-3221-a3e2-e9c749a3e50f.roa
File:                     72f279f9-560a-3221-a3e2-e9c749a3e50f.roa (raw, json)
Hash identifier:          oLSagjBcLDhhuHDBNqVFjxOCyNwk5K9hBYL/x8ahpjY=
Subject key identifier:   AA:90:33:55:86:C0:2A:98:01:DC:C1:64:36:1D:1F:3C:86:DA:63:82
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411ECC8515222F5F1AC985F
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72f279f9-560a-3221-a3e2-e9c749a3e50f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ec:c8:51:52:22:f5:f1:ac:98:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ff644ba1-5e88-409b-805d-2f84cbce11e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:ad:c7:89:c1:be:d0:44:59:70:65:49:de:
                    ec:69:4d:56:98:a4:ff:7c:7c:41:8b:26:ff:80:5e:
                    26:4f:54:21:7b:02:72:c4:1b:11:6b:fb:96:77:f3:
                    0b:46:0e:ad:86:64:46:3e:e1:4a:b2:eb:fb:27:0d:
                    b1:c6:01:33:09:0a:68:23:45:b4:0b:dd:15:29:5b:
                    a3:31:b6:16:f2:de:0f:68:52:f0:6f:ce:38:63:76:
                    88:dd:1e:3e:ec:56:01:4b:91:c8:85:46:dd:e4:39:
                    de:fd:27:5d:fe:fa:4f:b0:76:72:43:36:cb:0c:77:
                    bb:de:0b:ac:73:1b:e7:f2:f9:51:2d:97:8f:41:48:
                    c4:be:82:5f:f2:b6:31:a6:f4:9d:3c:94:df:00:1d:
                    14:2d:0a:b6:b9:61:ae:66:bf:72:fb:57:5b:16:6c:
                    74:7b:9d:03:20:a7:c6:61:58:20:d1:a0:27:0e:33:
                    2c:ec:52:82:da:6a:04:a4:b1:93:b6:fc:af:24:8f:
                    8f:6e:fd:a1:fe:e9:e7:57:c1:1d:6b:37:d7:47:f3:
                    28:56:75:5f:e8:59:67:d7:bc:30:21:80:28:7d:c2:
                    9a:03:e5:74:03:1e:c0:c3:df:ed:5e:67:11:9b:65:
                    f5:e0:db:cb:20:9b:6e:89:cf:b8:ff:4e:5d:8d:40:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:90:33:55:86:C0:2A:98:01:DC:C1:64:36:1D:1F:3C:86:DA:63:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72f279f9-560a-3221-a3e2-e9c749a3e50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:94:f4:89:14:4c:a3:71:03:1e:8d:2e:4d:97:bf:cb:3a:
         e5:2b:cd:f5:e0:60:37:80:db:c1:c4:ab:08:74:dc:b9:08:2c:
         2c:61:00:95:26:b5:66:34:d7:9e:2e:13:87:98:ec:51:49:a3:
         fb:68:32:cf:41:a6:f1:81:9e:4e:67:a0:fe:26:58:61:91:9e:
         f0:77:66:e9:98:0c:f6:a8:4e:91:e3:d1:fc:b5:bd:c9:dd:7f:
         d3:e9:14:58:dc:00:20:5b:53:cf:3d:29:43:54:07:ba:fc:eb:
         11:f9:5d:43:74:bd:4c:53:df:07:7b:98:ea:fd:1d:04:61:dc:
         fe:82:f2:19:c5:a5:bf:d5:f6:de:f4:62:62:c1:1e:2c:bc:7b:
         db:55:9b:25:16:ba:a1:93:3f:f0:71:21:2c:65:8e:23:c5:90:
         86:7d:dd:8e:1c:73:33:8e:bf:6d:15:d5:fc:94:4b:b5:4e:6a:
         ec:a3:76:30:45:3c:7a:ea:fa:e4:88:81:7d:87:04:8c:42:23:
         67:20:e3:23:06:99:66:bd:ce:17:e4:8a:04:dc:0d:6b:72:8b:
         88:6e:78:13:1f:69:b6:de:0e:6f:c4:d5:f4:a3:e6:4b:e3:df:
         d1:2e:7e:fd:f1:17:90:d8:a4:f6:53:e7:9c:ad:06:18:12:f8:
         b0:23:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:13 2025 by rpki-client