Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b84746ae-c665-3237-974e-fc23d080df11.roa
File:                     b84746ae-c665-3237-974e-fc23d080df11.roa (raw, json)
Hash identifier:          1uNmVPpaQ7Q9lyMt3/vCRSmG/9ndHFVwd61x7vYOm2Q=
Subject key identifier:   C1:84:C3:ED:B0:76:3B:E0:1E:BF:26:79:AD:84:2A:B8:AD:BE:77:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411EBD46AF611C1522E6E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b84746ae-c665-3237-974e-fc23d080df11.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:eb:d4:6a:f6:11:c1:52:2e:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=86e8a774-9884-4e63-87fd-4ecb256e6ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:19:f7:7b:ca:84:e8:28:3a:09:2f:c4:c8:
                    55:2d:a3:26:94:83:51:56:2a:e2:7b:fc:48:67:77:
                    06:8f:5b:fa:11:c7:36:23:18:9e:4d:10:01:ea:29:
                    4c:9e:1d:f8:e7:88:1b:11:c5:8d:9e:ae:77:d5:62:
                    24:c8:89:34:ac:eb:57:91:13:6d:63:71:18:c0:4a:
                    7e:7d:9a:2c:26:d2:b7:d9:b7:46:a0:0f:6e:6d:d5:
                    35:0e:1c:00:5f:a9:eb:c6:2a:01:d5:80:2c:f4:00:
                    87:47:b3:6d:84:6b:65:3f:44:d8:7d:26:7a:eb:1a:
                    3a:43:cf:f3:d3:ca:2e:af:ec:03:c6:08:eb:69:6b:
                    06:a7:54:01:b7:d8:44:9c:b4:30:63:d1:38:f0:6f:
                    33:e5:23:ac:73:cf:92:af:f3:62:74:22:46:72:4f:
                    ce:e4:a5:de:e4:0b:f9:ec:e7:48:23:d9:53:9f:a6:
                    30:54:ea:fd:a4:21:9c:6a:dd:1f:f0:78:d0:3a:a4:
                    31:8c:4d:31:8c:a2:58:6c:76:65:52:d7:00:e3:b2:
                    d2:dd:a5:c8:1f:19:33:8e:b8:ae:e8:ab:51:8f:09:
                    d2:bd:3d:fa:74:1d:28:e5:df:f7:b9:0a:20:29:9c:
                    60:78:a4:10:3d:4e:7e:c0:79:43:55:46:67:dd:4d:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:C3:ED:B0:76:3B:E0:1E:BF:26:79:AD:84:2A:B8:AD:BE:77:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b84746ae-c665-3237-974e-fc23d080df11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:e3:02:c6:51:8e:a3:50:be:66:be:ef:b4:af:93:a6:b9:
         53:f9:05:2c:fe:5a:2d:27:84:29:35:f3:a7:0a:70:01:dc:fb:
         69:02:37:ce:c9:58:02:eb:a5:29:6f:27:bd:66:8a:fc:68:3a:
         d3:6c:0f:71:ec:50:33:8f:a8:34:f6:cb:3c:21:5e:75:df:a8:
         93:df:92:b0:88:e7:f9:9e:61:1c:29:ea:e3:4c:6b:4c:68:01:
         45:05:b5:3a:34:8e:da:9f:95:ec:f8:12:d6:aa:99:b5:e4:6d:
         55:4e:68:01:98:58:3c:90:a9:0c:c7:72:be:c2:f6:71:eb:18:
         d8:47:44:e0:55:95:54:80:c2:42:89:cb:aa:15:8a:53:7c:3b:
         20:89:a9:35:82:ea:61:89:b5:19:97:f6:65:ca:82:88:06:9d:
         e0:a8:d1:35:b0:d7:07:d4:2b:90:c7:28:93:d4:a5:e1:90:79:
         93:ea:95:f2:65:fc:eb:b0:96:23:fe:49:29:0b:a0:53:f0:40:
         e0:44:78:26:9b:c4:5e:ed:14:93:86:e5:fb:8a:54:b7:12:7a:
         c4:8b:25:6d:96:51:59:8b:e7:3c:76:4f:69:a3:2c:b9:48:28:
         35:fa:01:de:9a:60:93:cc:1e:7b:ab:85:ad:fb:d9:37:93:09:
         71:94:73:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEevUavYRwVIuboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ODZlOGE3NzQtOTg4NC00ZTYzLTg3ZmQtNGVjYjI1NmU2ZWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6IZ93vKhOgoOgkvxMhVLaMmlINRVirie/xI
Z3cGj1v6Ecc2IxieTRAB6ilMnh3454gbEcWNnq531WIkyIk0rOtXkRNtY3EYwEp+
fZosJtK32bdGoA9ubdU1DhwAX6nrxioB1YAs9ACHR7NthGtlP0TYfSZ66xo6Q8/z
08our+wDxgjraWsGp1QBt9hEnLQwY9E48G8z5SOsc8+Sr/NidCJGck/O5KXe5Av5
7OdII9lTn6YwVOr9pCGcat0f8HjQOqQxjE0xjKJYbHZlUtcA47LS3aXIHxkzjriu
6KtRjwnSvT36dB0o5d/3uQogKZxgeKQQPU5+wHlDVUZn3U2bNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGEw+2wdjvgHr8mea2EKritvncwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjg0NzQ2YWUtYzY2NS0z
MjM3LTk3NGUtZmMyM2QwODBkZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8V9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB784wLGUY6jUL5mvu+0r5OmuVP5BSz+Wi0nhCk186cKcAHc+2kCN87J
WALrpSlvJ71mivxoOtNsD3HsUDOPqDT2yzwhXnXfqJPfkrCI5/meYRwp6uNMa0xo
AUUFtTo0jtqflez4EtaqmbXkbVVOaAGYWDyQqQzHcr7C9nHrGNhHROBVlVSAwkKJ
y6oVilN8OyCJqTWC6mGJtRmX9mXKgogGneCo0TWw1wfUK5DHKJPUpeGQeZPqlfJl
/OuwliP+SSkLoFPwQOBEeCabxF7tFJOG5fuKVLcSesSLJW2WUVmL5zx2T2mjLLlI
KDX6Ad6aYJPMHnurha372TeTCXGUc5I=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:11:30 2025 by rpki-client