Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6df951-53be-3155-bec8-1c1f8894b601.roa
File:                     ae6df951-53be-3155-bec8-1c1f8894b601.roa (raw, json)
Hash identifier:          duNVz7cXWajZOnjdBMvyDFmmhsYICgAcLnNv0kN+e1c=
Subject key identifier:   74:18:C6:7B:D9:82:DC:56:D0:AF:4C:C9:95:FF:42:BA:22:9B:9E:D0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E4263319C93365851D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6df951-53be-3155-bec8-1c1f8894b601.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e4:26:33:19:c9:33:65:85:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2cb6fbc6-60fc-4404-894a-2497f0fbb729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:39:30:3a:35:70:a5:ef:e1:84:19:2e:26:66:
                    86:68:3d:97:70:ce:24:76:22:06:0a:6d:28:4a:bc:
                    55:0e:e0:b8:82:fa:ca:e0:e1:fc:9f:a7:10:39:37:
                    28:07:aa:c3:6e:d8:bf:97:99:26:a2:71:2e:16:07:
                    a9:d6:19:4a:c5:34:2b:99:77:11:27:8d:00:fd:42:
                    31:7d:7e:a4:a0:f2:d8:ff:e7:59:ef:9b:a3:7d:82:
                    7d:23:29:38:8b:42:48:30:b2:13:8e:ed:64:dd:48:
                    84:65:de:11:5c:82:51:10:3b:83:bf:99:88:58:f1:
                    f0:ef:5a:84:e0:31:84:3c:a8:c3:b8:58:30:95:1f:
                    ab:b6:5d:c7:b5:6b:d8:c1:78:96:d2:58:17:f3:a1:
                    2a:cc:0a:f6:b1:06:8d:f9:84:38:b9:e9:a9:5c:78:
                    84:44:84:a1:81:08:44:18:52:c7:95:c1:aa:5b:05:
                    bb:41:d7:a2:fc:1d:62:2d:01:b5:0d:6d:d3:08:0a:
                    5b:01:55:68:de:27:e3:e4:89:f9:da:99:66:ab:9d:
                    f8:b9:b1:67:f7:58:ce:e1:45:d4:b8:d5:f8:93:50:
                    d6:ce:8c:f9:2a:1c:99:f1:aa:81:3e:8d:a7:06:62:
                    5d:e2:fc:8b:06:99:db:13:66:30:8d:3e:49:56:75:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:C6:7B:D9:82:DC:56:D0:AF:4C:C9:95:FF:42:BA:22:9B:9E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae6df951-53be-3155-bec8-1c1f8894b601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:df:82:f7:b8:22:18:e0:93:81:90:ad:48:3c:17:02:20:c1:
         7d:c8:5e:16:82:f7:60:67:a5:33:5e:e3:b3:64:59:45:33:7c:
         0e:33:8f:1b:1c:0a:36:d4:dc:f4:14:1a:b5:06:e9:05:65:45:
         ff:e3:aa:f4:8c:d4:2d:6d:f8:ea:9d:7b:4f:dc:8b:e5:0e:03:
         1a:55:09:62:5a:59:c3:d8:77:5d:f1:63:4a:e3:33:4d:e6:ec:
         c6:7a:49:f8:86:22:3e:60:dc:3e:cb:de:98:89:58:08:45:f6:
         16:bb:21:f2:b3:4c:0c:f8:03:02:db:c1:48:dc:f6:a1:bc:2b:
         42:30:c9:70:71:bb:8b:74:e3:18:55:e7:ef:77:8d:16:03:00:
         17:2f:bf:a7:df:21:79:48:ed:07:58:29:28:44:b0:22:67:2d:
         89:b7:87:68:cf:58:f2:58:09:65:71:c1:87:cd:d7:d3:07:ab:
         bd:30:bd:3d:c2:12:d0:3b:8a:cb:9f:73:60:2d:0d:c0:d8:e6:
         92:50:7f:3e:fb:46:d3:5f:06:1a:9d:76:aa:55:77:29:15:f0:
         53:ad:eb:7a:14:71:0d:6f:82:15:03:e9:a4:64:f0:68:d0:b2:
         69:18:85:4b:29:12:92:8a:63:37:13:7e:75:e2:ab:24:cd:2f:
         f4:d9:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:01 2025 by rpki-client