Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91f4c833-ce08-335b-8787-fa32a3f25b31.roa
File:                     91f4c833-ce08-335b-8787-fa32a3f25b31.roa (raw, json)
Hash identifier:          ljOo6WQEkSsL+PRctOhYRPaSG/pY3Aer35aJ2735bu0=
Subject key identifier:   62:2A:1E:A0:7F:07:2C:60:CF:38:1C:33:78:AA:37:FE:32:D7:6D:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841139A0FBB1A49D7DE5A180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91f4c833-ce08-335b-8787-fa32a3f25b31.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:39:a0:fb:b1:a4:9d:7d:e5:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e43e5ae9-52ba-414a-8b82-184f501b4a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:2e:ee:c6:64:f0:2e:c9:71:4e:99:da:a4:
                    d9:f6:c2:12:61:a2:60:4a:cd:7f:2d:0b:1d:7a:d9:
                    3a:a9:b1:76:37:fa:34:39:b1:9b:2c:26:f3:ed:40:
                    40:2a:e1:12:73:6d:07:15:02:62:33:7a:cf:6c:0a:
                    4a:f8:ad:39:32:5e:d7:7e:4f:56:46:a3:9a:7c:ba:
                    e7:c5:c7:b4:23:20:a9:08:b4:7d:bb:a6:5d:47:13:
                    50:95:0a:fe:66:d9:60:bf:51:db:8b:56:0e:67:29:
                    3e:f6:0c:4b:f9:94:74:ab:87:bd:f6:6d:56:9d:5b:
                    c8:92:df:26:4c:44:b0:6c:5e:7d:24:9c:09:aa:a1:
                    16:00:91:92:f3:9a:52:68:9b:9c:22:dd:56:85:09:
                    76:c9:c0:ff:2c:f2:96:30:45:dd:c8:78:64:6e:1a:
                    c8:fc:23:e7:48:0a:e3:73:76:dc:c8:f5:fe:2b:b1:
                    ac:65:77:28:e7:a6:23:06:ae:8b:75:ca:6e:f3:ab:
                    da:a5:4d:8e:a8:9c:a2:72:8c:5d:c8:ee:8c:52:af:
                    88:82:d0:51:5e:7c:f8:71:f2:39:b8:2d:98:af:89:
                    d1:76:11:e5:e7:3b:bd:c4:34:10:c9:4d:b1:f1:73:
                    3f:d1:30:31:c5:4c:2d:cf:d3:2d:4c:99:31:5d:74:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2A:1E:A0:7F:07:2C:60:CF:38:1C:33:78:AA:37:FE:32:D7:6D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91f4c833-ce08-335b-8787-fa32a3f25b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:c6:31:12:5f:45:dd:88:d1:a7:37:09:a7:1e:f5:11:c5:10:
         98:1d:5d:5a:fe:68:85:a7:03:23:da:78:60:2a:1b:cf:71:85:
         24:2c:86:31:e4:8b:e7:ec:d2:5c:68:fb:e6:9d:c7:8c:dd:39:
         da:2e:fd:2c:ed:e0:3c:6d:41:eb:12:5d:b3:dd:73:93:d1:35:
         1b:78:45:5d:cc:53:aa:fd:0a:4e:55:5d:7a:d2:ee:d3:0e:44:
         99:a9:69:87:98:89:53:38:2a:57:e3:71:93:fc:fb:c6:cc:67:
         34:2e:fe:23:b6:b6:c0:17:0e:30:40:35:86:70:e8:7b:ab:ae:
         bb:3f:70:38:6e:95:cd:84:f7:33:2f:a2:e7:ca:1a:16:1d:bd:
         67:27:c2:fc:d1:25:7d:3b:cf:56:31:a2:e2:2a:aa:d9:1d:8a:
         4a:a1:a0:d9:27:6a:f0:74:9d:cf:68:0b:c1:dc:bc:55:2f:bf:
         61:a3:6d:c8:18:4e:6f:5d:02:64:4e:ca:3c:07:0a:66:9f:6b:
         26:ba:e3:bd:6d:6d:b8:d9:78:79:75:2e:5a:92:4f:67:16:1e:
         66:0a:a6:bf:74:f1:63:73:3d:0f:3d:38:9f:ef:4d:f5:62:b2:
         38:a9:17:56:94:cf:78:48:05:5c:cc:34:50:53:bf:14:12:e3:
         57:c5:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:14:21 2025 by rpki-client