Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa
File:                     9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa (raw, json)
Hash identifier:          W5nA2aF/NUi9TfLB8vCrK0Mcp5M985xnAiv2dIL7eR0=
Subject key identifier:   81:3B:B4:CA:09:F7:4D:7C:3F:82:08:6D:DA:77:3A:48:A6:D4:D3:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E2C6E969AA2044011680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e2:c6:e9:69:aa:20:44:01:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6abf6e86-d5a7-4a65-bd22-a2e04b673611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:d7:07:0d:de:1a:d8:0e:10:64:eb:49:30:
                    f4:d7:95:7e:ff:6b:fa:bb:cc:50:df:7c:ae:82:6b:
                    d8:40:41:24:37:6c:ab:21:ff:9f:bb:f3:e6:83:89:
                    f4:f1:94:d8:5d:ac:cf:b4:18:f3:67:76:d4:e3:4a:
                    16:7f:24:ea:fc:cf:7d:eb:d8:00:18:2f:54:e1:4a:
                    d5:0e:64:14:20:4c:18:b1:a7:13:e2:ab:95:17:2d:
                    1e:49:cb:b6:51:ec:23:d6:e0:61:0d:6a:d2:f2:fb:
                    90:c8:bd:c0:10:3b:95:5d:33:22:6f:34:4b:9a:b2:
                    34:03:37:0b:24:2f:08:b0:8b:e8:95:6a:0f:31:3b:
                    db:72:2b:97:02:ea:6b:ef:2c:d8:7a:14:af:d7:50:
                    35:d4:f1:62:1c:7e:e6:b2:a7:3a:cc:ce:15:96:0b:
                    3f:92:9a:eb:37:39:ff:3a:6f:46:0c:94:f7:a1:a7:
                    77:d3:ec:97:3c:c5:44:2c:16:1c:b2:72:6f:b1:3a:
                    5d:35:1c:1c:47:51:c0:63:9c:02:a1:7d:9b:19:c9:
                    d7:4e:75:90:6e:bf:05:4e:9b:74:a8:50:bf:d5:00:
                    0d:44:97:d0:54:eb:af:df:73:1d:a1:1a:7f:fa:e6:
                    34:49:75:c4:d5:aa:63:c5:0d:3a:23:5e:fa:d5:78:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:B4:CA:09:F7:4D:7C:3F:82:08:6D:DA:77:3A:48:A6:D4:D3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:87:2a:3a:38:3d:9b:0c:b7:1a:d3:63:ec:d7:ce:8c:d3:
         11:79:b6:3a:0c:eb:c7:34:29:af:b9:63:2a:05:46:93:1b:18:
         53:22:45:1e:e5:ff:fc:6f:dc:b3:78:51:ca:ad:ec:3b:5e:b0:
         d9:9e:a4:95:e6:df:10:ef:6a:16:25:98:48:f2:8f:f2:c7:ff:
         95:97:de:21:91:c0:92:8f:c3:69:41:15:48:91:8e:72:c2:03:
         0e:0a:d3:fb:45:6e:f3:90:9a:c8:48:9c:3a:23:51:e4:a8:92:
         6e:31:de:ff:38:c1:07:95:33:a5:6b:bc:f9:e0:de:5b:07:c4:
         16:9f:0d:be:55:0b:b5:3a:e5:54:fe:1e:02:77:c3:e1:89:50:
         05:c6:2e:85:ee:a9:07:8f:0d:96:6b:b7:31:f7:84:bc:10:78:
         4e:81:6d:a7:26:86:ab:be:28:a2:c2:e9:5a:8c:94:61:82:a4:
         aa:ff:2b:95:ff:29:3b:3a:24:60:51:8e:15:eb:03:ff:7b:f0:
         b4:ce:ce:27:31:6b:ee:40:3a:f4:df:90:e5:dc:8a:e0:f4:fd:
         39:69:01:4c:21:ef:84:45:a3:77:62:47:31:1f:a9:12:8a:0a:
         64:ef:f1:85:21:7f:59:a6:bd:90:8d:ae:8a:e9:56:1a:62:3d:
         d9:12:5f:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEeLG6WmqIEQBFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NmFiZjZlODYtZDVhNy00YTY1LWJkMjItYTJlMDRiNjczNjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYfXBw3eGtgOEGTrSTD015V+/2v6u8xQ33yu
gmvYQEEkN2yrIf+fu/Pmg4n08ZTYXazPtBjzZ3bU40oWfyTq/M9969gAGC9U4UrV
DmQUIEwYsacT4quVFy0eScu2Uewj1uBhDWrS8vuQyL3AEDuVXTMibzRLmrI0AzcL
JC8IsIvolWoPMTvbciuXAupr7yzYehSv11A11PFiHH7msqc6zM4Vlgs/kprrNzn/
Om9GDJT3oad30+yXPMVELBYcsnJvsTpdNRwcR1HAY5wCoX2bGcnXTnWQbr8FTpt0
qFC/1QANRJfQVOuv33MdoRp/+uY0SXXE1apjxQ06I1761XjdRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIE7tMoJ9018P4IIbdp3Okim1NMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWQ2YThiMTEtYjRhYi0z
NzM4LWIxYmMtNWZkMjlkOTJmMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1yhyo6OD2bDLca02Ps186M0xF5tjoM68c0Ka+5YyoFRpMbGFMiRR7l
//xv3LN4Ucqt7DtesNmepJXm3xDvahYlmEjyj/LH/5WX3iGRwJKPw2lBFUiRjnLC
Aw4K0/tFbvOQmshInDojUeSokm4x3v84wQeVM6VrvPng3lsHxBafDb5VC7U65VT+
HgJ3w+GJUAXGLoXuqQePDZZrtzH3hLwQeE6Bbacmhqu+KKLC6VqMlGGCpKr/K5X/
KTs6JGBRjhXrA/978LTOzicxa+5AOvTfkOXciuD0/TlpAUwh74RFo3diRzEfqRKK
CmTv8YUhf1mmvZCNrorpVhpiPdkSX0M=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:32 2025 by rpki-client