Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa
File:                     8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa (raw, json)
Hash identifier:          p8KnK29oHF31O4ELbcOpv6Forarj9UG28uL21RCn4pI=
Subject key identifier:   09:8A:E3:02:1D:4C:52:33:00:54:AD:B0:E2:CB:EB:CC:C7:E0:56:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841139D3EC4571DA22468EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:39:d3:ec:45:71:da:22:46:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fe77fb75-4b47-4567-8420-e9bdeacb85b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:42:7a:42:9e:46:ab:89:a6:2d:f9:51:a2:
                    60:d9:54:33:fa:e1:cc:44:79:cd:d6:5f:86:fb:af:
                    c7:69:64:92:5a:0a:13:28:98:89:19:a8:96:70:c8:
                    05:5c:f1:af:c7:52:2e:3b:83:fb:a3:43:53:a0:83:
                    35:38:c5:ef:e9:96:50:b2:c4:9f:d3:17:fc:96:a7:
                    40:2b:28:fd:5b:9a:2e:53:16:a7:cc:2f:14:7d:03:
                    5b:aa:78:92:48:e0:54:9d:98:9e:ee:a1:23:ee:b3:
                    27:94:02:72:69:3d:e9:47:1d:81:7c:bf:3b:4a:f7:
                    a3:f5:96:b5:66:c0:4e:8c:7f:d6:42:51:d7:7b:80:
                    91:34:81:3d:c3:34:1c:49:c8:d1:8d:29:20:bd:38:
                    8c:be:11:0f:9a:13:df:e7:ab:ba:f2:f5:56:22:63:
                    99:68:7f:38:65:71:db:92:b1:06:1b:0b:c5:79:09:
                    14:58:46:6b:86:eb:c0:ff:f8:30:f4:ea:bb:fe:8b:
                    63:52:38:77:10:28:e2:95:56:32:66:89:23:f4:10:
                    b4:54:5d:e9:71:72:c2:4a:fd:6d:1d:8b:64:53:5a:
                    ce:3b:73:ee:50:19:35:2d:71:27:b6:b3:9e:16:11:
                    6c:59:51:7e:f8:7f:d6:d1:3a:c4:c5:5e:3a:ee:9b:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:E3:02:1D:4C:52:33:00:54:AD:B0:E2:CB:EB:CC:C7:E0:56:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:b1:1b:f7:6a:15:dc:58:cf:5f:c0:c0:a0:0f:33:4c:ff:
         e9:0d:cb:1a:c2:67:53:13:ca:c0:74:71:cc:c7:a6:b8:61:b0:
         c7:9b:6b:62:93:63:e1:1c:d8:18:88:6f:1d:c1:90:a5:42:46:
         0a:04:1b:49:07:51:bc:38:d5:9d:e6:96:25:38:0f:b3:a1:fb:
         1e:3d:13:55:c7:37:4f:76:cb:ee:f0:87:0f:6a:47:e3:18:b6:
         48:21:45:37:56:51:45:6b:76:c5:e3:82:3a:53:7f:34:4d:41:
         49:c4:90:e2:30:f9:03:73:57:df:2d:c7:dc:51:26:cd:f1:eb:
         64:b1:98:3d:49:9b:e0:52:f0:80:c4:0f:97:6e:78:a0:67:ef:
         8b:ad:f1:b6:20:57:89:8f:17:8e:a6:5d:64:ae:84:5f:d1:99:
         c3:1a:db:b5:3b:fb:dc:37:0f:57:08:1d:4d:39:ad:e3:e5:90:
         47:65:e3:b0:d5:0e:35:9e:30:b8:ad:8d:39:f5:f1:6c:1e:70:
         c0:65:a5:45:3c:ca:d4:1b:54:fa:c5:26:37:e9:e1:06:98:e5:
         df:8d:64:a9:a2:76:bd:c0:e2:2c:8e:f4:9c:ae:06:4c:7d:8a:
         d3:a0:08:00:1a:83:37:5e:2c:b0:9b:15:43:90:45:b7:7d:89:
         78:61:d3:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETnT7EVx2iJGjsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZmU3N2ZiNzUtNGI0Ny00NTY3LTg0MjAtZTliZGVhY2I4NWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ZCekKeRquJpi35UaJg2VQz+uHMRHnN1l+G
+6/HaWSSWgoTKJiJGaiWcMgFXPGvx1IuO4P7o0NToIM1OMXv6ZZQssSf0xf8lqdA
Kyj9W5ouUxanzC8UfQNbqniSSOBUnZie7qEj7rMnlAJyaT3pRx2BfL87Svej9Za1
ZsBOjH/WQlHXe4CRNIE9wzQcScjRjSkgvTiMvhEPmhPf56u68vVWImOZaH84ZXHb
krEGGwvFeQkUWEZrhuvA//gw9Oq7/otjUjh3ECjilVYyZokj9BC0VF3pcXLCSv1t
HYtkU1rOO3PuUBk1LXEntrOeFhFsWVF++H/W0TrExV467psp3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmK4wIdTFIzAFStsOLL68zH4FadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODQ5M2NlZTktOTVmNS0z
YmU2LWI4YjAtZGMxOWZiOWZhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOOsRv3ahXcWM9fwMCgDzNM/+kNyxrCZ1MTysB0cczHprhhsMeba2KT
Y+Ec2BiIbx3BkKVCRgoEG0kHUbw41Z3mliU4D7Oh+x49E1XHN092y+7whw9qR+MY
tkghRTdWUUVrdsXjgjpTfzRNQUnEkOIw+QNzV98tx9xRJs3x62SxmD1Jm+BS8IDE
D5dueKBn74ut8bYgV4mPF46mXWSuhF/RmcMa27U7+9w3D1cIHU05rePlkEdl47DV
DjWeMLitjTn18WwecMBlpUU8ytQbVPrFJjfp4QaY5d+NZKmidr3A4iyO9JyuBkx9
itOgCAAagzdeLLCbFUOQRbd9iXhh0+0=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:59 2025 by rpki-client