Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa
File:                     b4af4962-eb4c-3a28-9fcd-fcb141322279.roa (raw, json)
Hash identifier:          iH1z48dMu3oCNyUvMIV6UFnBW/Ig7NtWFWzkaRZm63k=
Subject key identifier:   2A:A7:F4:E7:0B:16:3C:01:62:94:6F:B8:C4:0F:78:30:45:69:30:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411ED3DF42ED9384B3C5EE7
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ed:3d:f4:2e:d9:38:4b:3c:5e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8d03aee7-6f0b-4e89-9de9-64dae8ed686d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:85:ca:69:4a:1b:93:b8:aa:6d:28:89:2a:
                    bc:f0:27:dd:db:a6:ca:e8:47:91:31:88:ab:5a:78:
                    f9:f7:eb:4c:fb:0e:73:bf:43:81:1a:98:0b:ef:83:
                    94:65:62:4c:42:68:d8:85:db:40:26:fb:91:4a:64:
                    1b:29:dc:df:e9:c5:b3:8b:0a:d6:47:8d:c3:65:c8:
                    7c:fc:4b:cd:73:36:6c:2a:dd:88:20:54:ea:c7:5d:
                    68:21:fc:38:72:9b:17:6b:2a:c7:eb:06:8e:4e:1e:
                    7a:df:06:8d:d1:55:07:19:2f:55:c9:f4:39:e3:31:
                    8a:d7:6b:49:41:de:9c:ef:8d:ec:91:17:1f:e9:68:
                    d7:ed:ab:45:ce:82:f8:97:4f:c3:72:f0:c1:31:d7:
                    05:fb:78:87:66:20:85:7e:f9:22:f5:3e:62:6b:e6:
                    8d:0c:b7:e4:c9:b2:d0:89:b7:8d:a4:61:63:23:86:
                    8e:14:02:9f:c4:76:9c:d3:8b:13:81:76:43:85:db:
                    f9:18:47:bd:fc:cb:a1:f2:90:e6:68:7f:1b:08:76:
                    7a:01:03:6c:24:b1:d2:ed:a9:85:98:d7:12:fa:05:
                    61:72:12:40:e9:cc:9a:d7:a4:c4:6c:48:a6:a2:9b:
                    75:db:c8:0e:18:e2:d9:28:71:9b:1a:ea:c3:b1:89:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A7:F4:E7:0B:16:3C:01:62:94:6F:B8:C4:0F:78:30:45:69:30:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4af4962-eb4c-3a28-9fcd-fcb141322279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:61:f3:9d:f4:27:d8:06:74:05:c2:41:67:b7:4b:0d:3e:
         a3:19:28:da:37:29:23:27:ba:43:48:82:41:7e:0d:51:df:3a:
         2a:c2:32:b5:4b:80:8f:70:2e:3e:50:30:d8:7a:dc:4b:1b:2b:
         62:54:90:9d:7c:bb:52:11:c7:6d:e2:c0:a6:53:7e:93:75:85:
         82:58:ef:d6:81:93:c7:e0:3e:11:f1:a6:36:fa:a2:3e:9a:e7:
         7e:5a:bc:ca:ea:26:f7:16:c0:32:64:df:c7:79:25:77:a3:a6:
         a2:a2:0a:f9:6a:f6:ed:2e:40:b1:d6:64:8e:cf:66:63:3f:75:
         70:b5:fb:83:1d:34:db:60:f3:61:c7:83:3f:55:34:e1:19:5d:
         22:06:5b:f4:9f:74:3b:86:b3:d1:ae:53:5b:0f:6a:16:87:58:
         1c:88:9e:35:a0:fd:3f:df:4f:44:bd:01:08:1a:cd:b3:0d:87:
         a1:22:81:01:56:eb:95:a5:8d:a3:b5:77:75:fb:39:51:d1:fc:
         ad:4b:cb:19:fe:20:d3:0b:a6:a3:8f:d2:95:29:88:96:69:69:
         02:7a:24:d7:de:2e:28:3d:d7:e4:a6:ce:e8:7c:a2:5a:f3:28:
         ed:1b:24:a3:09:33:4a:eb:25:08:db:50:a6:df:d4:d5:88:d9:
         a7:a2:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:45:15 2025 by rpki-client