Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa
File:                     ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa (raw, json)
Hash identifier:          X/pBoUlKDRJUnCeJ7mCtMqNKx1qtSMgM1/DKAaCRhrE=
Subject key identifier:   64:A6:CB:D7:65:3C:B5:D7:9F:AA:B0:7B:C5:73:E6:B5:FB:0A:B3:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841130EBDC1CADA5837ADC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:30:eb:dc:1c:ad:a5:83:7a:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=24b36bb3-bb91-4822-a9e7-2d5a41ec46b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:fa:9c:30:a4:31:99:39:e0:8b:46:5c:2e:
                    e7:83:f4:e8:2f:ad:c2:e1:7a:a2:bd:1f:d7:20:ce:
                    70:e5:04:fe:13:f7:4e:f6:58:22:b0:0c:a1:14:e9:
                    d1:9e:18:7f:24:e8:d3:5a:82:81:1d:53:6a:c4:3d:
                    50:98:7f:a5:30:12:9a:8e:ec:52:d8:80:48:74:30:
                    82:95:0a:78:3f:64:7f:9d:4d:de:6d:e0:d2:c3:a4:
                    6f:90:dd:2f:78:16:0a:87:c2:f9:65:82:42:db:f3:
                    67:cb:da:fc:49:74:af:e9:71:c3:25:65:25:34:90:
                    4e:0a:d9:80:3c:de:3c:b2:b8:bc:24:48:0c:9b:5d:
                    ac:d5:be:77:54:a8:3c:bd:b9:5f:c4:2d:eb:15:2f:
                    76:b2:67:a4:19:f1:65:44:74:79:20:29:8a:a2:e3:
                    fd:40:18:39:10:2c:05:3d:76:7f:a6:c0:41:19:62:
                    24:42:a1:55:92:0c:aa:5d:e1:a5:c0:00:0e:25:ec:
                    9e:b0:55:93:be:29:07:3a:66:5f:26:61:b8:6f:a5:
                    36:4f:fe:3f:03:04:55:72:fb:e3:d7:44:24:c3:60:
                    22:00:3e:6a:1e:12:49:47:74:ef:8e:dd:35:6b:3c:
                    8f:81:98:a2:02:55:b7:01:cf:d6:4c:00:05:72:81:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:CB:D7:65:3C:B5:D7:9F:AA:B0:7B:C5:73:E6:B5:FB:0A:B3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:8f:15:31:c7:09:b0:fa:3c:25:dd:bc:78:b0:46:09:92:
         6f:1c:b4:08:fd:98:13:28:3a:ca:8e:33:6c:f6:aa:a0:16:f7:
         68:cf:bb:45:f6:12:7c:2b:69:a0:a5:ba:2d:20:ec:14:91:0f:
         87:0c:fd:85:f1:ac:bf:96:4d:75:02:97:f3:2d:61:f8:51:a1:
         e7:a2:6a:26:b7:0a:49:47:29:9f:64:de:e4:8c:e7:db:5c:d7:
         62:44:94:c2:b4:3d:5d:2b:40:44:c2:63:fd:72:f3:da:4a:00:
         55:0e:0d:9f:9b:d8:c7:ed:6e:75:6c:a4:8a:8d:01:07:47:29:
         01:d2:58:61:bf:3a:15:f9:6c:5d:d5:e5:46:13:37:13:1b:b5:
         35:58:7f:b3:e4:89:c1:57:04:43:76:d8:f3:16:fd:d0:c9:2c:
         1b:f6:05:01:60:a8:12:51:d1:1f:5f:f8:d5:dd:f2:a9:7d:d7:
         fa:26:1c:fd:1a:26:b9:04:67:2d:cd:7b:5a:e6:1a:19:7e:32:
         92:a0:9a:35:3e:01:1a:d4:2e:cd:f2:0c:61:cf:dd:38:21:41:
         47:c1:cb:8c:93:ae:d1:fc:71:32:9b:5e:e2:bb:29:ed:66:6f:
         b3:7e:cc:d2:ac:ec:e4:90:c7:a0:29:3f:df:91:90:1f:25:fd:
         67:e5:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:08 2025 by rpki-client