Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e84c8c-bff8-3940-9aea-40e77579526c.roa
File:                     83e84c8c-bff8-3940-9aea-40e77579526c.roa (raw, json)
Hash identifier:          c4+qDE+kQMs02h/rtjfY3MsXfZZyWJlTPcUDwZTmKvQ=
Subject key identifier:   6D:2E:B9:61:E0:C6:70:AC:8C:77:CD:00:C3:F7:AD:F5:DD:EC:59:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411338D2624F7684A4EAE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e84c8c-bff8-3940-9aea-40e77579526c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:33:8d:26:24:f7:68:4a:4e:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=93e03f3b-6628-4b05-b945-64f363990ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:64:87:25:95:91:5a:90:b5:ea:42:3f:9b:
                    32:8a:6c:f1:50:0f:a0:f5:60:da:f6:df:cd:08:2f:
                    ae:cb:c3:9e:27:5f:66:b9:66:d2:64:95:5c:5a:0f:
                    8c:14:47:02:1c:55:07:4b:1e:1c:ae:e2:1b:ba:67:
                    53:93:a0:64:1d:9b:63:b7:d8:ec:6d:d5:d0:d4:ff:
                    a8:0f:2a:8f:cf:4c:ba:0e:3f:76:aa:f2:ee:6f:5e:
                    5c:65:4d:7c:53:b8:83:d4:3f:79:3c:e3:4c:79:28:
                    c3:0e:61:ef:30:81:b1:37:84:99:ce:99:63:49:d3:
                    8e:e7:76:9e:ed:78:55:61:c6:ce:79:28:a0:a2:98:
                    65:40:6b:f7:f6:75:30:71:fb:9b:37:29:03:3d:1e:
                    96:4d:ee:95:26:d5:c0:23:20:a8:30:de:7b:63:e5:
                    14:05:cb:8f:29:9c:3e:d9:61:fc:e4:fc:b7:31:9f:
                    6e:e7:79:1c:61:b4:ec:e0:ed:81:01:72:a9:18:b6:
                    dd:47:76:ac:13:51:7f:a4:0f:3a:c5:4f:72:10:95:
                    f1:3f:3e:1a:f9:74:fb:2e:5f:b8:6d:1f:32:a9:5e:
                    43:21:4c:dd:73:5b:8d:ac:49:f8:3d:dc:51:49:f5:
                    b1:04:40:8b:bc:e0:02:5f:b9:91:74:c0:29:1b:5b:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2E:B9:61:E0:C6:70:AC:8C:77:CD:00:C3:F7:AD:F5:DD:EC:59:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e84c8c-bff8-3940-9aea-40e77579526c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:53:f6:53:ed:69:5e:b1:9b:29:5b:47:86:f4:39:79:fd:
         1d:48:f3:2c:be:54:75:ad:8d:61:a4:05:0f:c1:0f:be:08:e5:
         8a:2e:d3:14:e4:35:1b:0c:56:13:a6:ad:a4:60:6f:84:52:cf:
         86:7a:fb:7b:5a:e5:1a:0d:3e:4f:e6:7b:c4:78:ab:d2:ae:c2:
         97:89:dd:5a:03:a3:dc:cb:0b:5b:2c:de:f0:6d:19:e8:c7:cb:
         de:cf:1f:1f:92:62:81:81:55:67:3e:53:aa:e5:3f:4a:5f:9b:
         c8:46:3a:0d:82:fb:b3:f2:f8:a3:9a:30:52:e8:b5:40:51:a2:
         60:d9:36:b8:65:e8:04:59:ab:78:c5:e4:82:85:ec:51:65:a2:
         0e:8c:60:b7:51:ae:97:38:67:7c:68:9a:13:70:13:5d:56:41:
         2a:dc:ae:b6:f0:6b:41:44:b9:13:c3:9e:77:0c:bd:b1:96:74:
         ac:6b:af:6c:95:e5:5a:b9:de:6d:01:83:58:b4:66:b4:7e:9e:
         40:24:55:b3:a5:91:08:79:53:08:ec:36:69:5a:72:2f:75:41:
         f9:a5:0b:56:1f:2f:ca:51:b6:45:a3:3d:41:77:f5:dd:31:1f:
         f5:ac:86:ff:42:ac:c6:9f:60:a9:93:54:04:7f:45:13:21:7f:
         10:db:df:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETONJiT3aEpOroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OTNlMDNmM2ItNjYyOC00YjA1LWI5NDUtNjRmMzYzOTkwYWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwVkhyWVkVqQtepCP5syimzxUA+g9WDa9t/N
CC+uy8OeJ19muWbSZJVcWg+MFEcCHFUHSx4cruIbumdTk6BkHZtjt9jsbdXQ1P+o
DyqPz0y6Dj92qvLub15cZU18U7iD1D95PONMeSjDDmHvMIGxN4SZzpljSdOO53ae
7XhVYcbOeSigophlQGv39nUwcfubNykDPR6WTe6VJtXAIyCoMN57Y+UUBcuPKZw+
2WH85Py3MZ9u53kcYbTs4O2BAXKpGLbdR3asE1F/pA86xU9yEJXxPz4a+XT7Ll+4
bR8yqV5DIUzdc1uNrEn4PdxRSfWxBECLvOACX7mRdMApG1v02QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG0uuWHgxnCsjHfNAMP3rfXd7Fm3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODNlODRjOGMtYmZmOC0z
OTQwLTlhZWEtNDBlNzc1Nzk1MjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBuU/ZT7WlesZspW0eG9Dl5/R1I8yy+VHWtjWGkBQ/BD74I5You0xTk
NRsMVhOmraRgb4RSz4Z6+3ta5RoNPk/me8R4q9KuwpeJ3VoDo9zLC1ss3vBtGejH
y97PHx+SYoGBVWc+U6rlP0pfm8hGOg2C+7Py+KOaMFLotUBRomDZNrhl6ARZq3jF
5IKF7FFlog6MYLdRrpc4Z3xomhNwE11WQSrcrrbwa0FEuRPDnncMvbGWdKxrr2yV
5Vq53m0Bg1i0ZrR+nkAkVbOlkQh5UwjsNmlaci91QfmlC1YfL8pRtkWjPUF39d0x
H/Wshv9CrMafYKmTVAR/RRMhfxDb36w=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:59 2025 by rpki-client