Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6fd4b6b-a904-3f5f-aecf-2e137105ec3a.roa
File:                     c6fd4b6b-a904-3f5f-aecf-2e137105ec3a.roa (raw, json)
Hash identifier:          pLYY0hKeCNclzxrJMAIzpfR+X3kXQ4eistUwLnSPYuA=
Subject key identifier:   B5:45:9B:31:BB:15:E8:76:08:FD:94:AC:1F:99:F2:5E:61:06:74:FE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F135DFF92C861F078940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6fd4b6b-a904-3f5f-aecf-2e137105ec3a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.198.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f1:35:df:f9:2c:86:1f:07:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c3ae2311-a32d-4256-95f3-38975c541942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:ca:84:de:0f:5a:03:10:61:ec:9c:a4:ab:
                    34:a2:31:c4:7d:bc:61:f5:26:fd:de:2a:b7:51:71:
                    48:c1:8b:d9:eb:14:c5:3d:c8:17:75:c6:c1:d7:a9:
                    e0:17:9b:8f:13:a4:2e:c7:74:e1:26:26:e2:c3:7f:
                    92:6c:76:1c:83:6c:f6:83:3f:68:34:f1:37:c4:74:
                    8b:2c:29:7b:86:71:8d:b9:48:e6:11:57:2a:2d:6b:
                    d5:a9:a8:b5:bf:27:ec:3c:95:ff:d9:19:95:ed:1c:
                    15:7f:30:cf:a1:e6:d9:f8:ad:1d:30:4b:20:4b:60:
                    23:6b:fc:52:21:bd:8c:60:62:9e:f2:dd:ca:f1:84:
                    c0:53:02:e5:ed:8c:81:91:1e:0e:0c:06:7d:ac:d8:
                    1d:84:5e:f2:49:1a:15:fd:72:31:30:e9:60:0a:26:
                    f5:11:5d:6e:7e:32:e2:a4:c3:91:92:b8:5d:b1:18:
                    df:a1:61:a8:6c:c7:f6:b2:11:a7:e3:aa:51:a0:ac:
                    5d:7d:c5:88:f4:63:41:d1:a5:6a:b3:e4:eb:50:e7:
                    97:69:6f:0d:80:ec:33:ef:5e:b1:4f:32:06:ea:4a:
                    b0:b0:bf:42:b6:50:7c:04:e0:d2:39:ec:69:61:60:
                    48:ae:c0:db:b2:83:68:40:e6:bd:95:95:78:c2:6c:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:9B:31:BB:15:E8:76:08:FD:94:AC:1F:99:F2:5E:61:06:74:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6fd4b6b-a904-3f5f-aecf-2e137105ec3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:05:f0:53:71:eb:62:2c:e5:6f:14:f3:a0:ab:c1:77:7d:1b:
         dd:75:b5:45:1c:06:84:6c:65:c4:fb:92:23:ab:51:6d:d1:ea:
         4e:2d:63:c5:8a:7c:eb:61:6a:d6:6c:b0:e0:bb:d2:f5:ed:1e:
         8b:6d:34:11:c5:a9:b3:03:53:55:d6:76:de:a2:13:06:53:7a:
         07:83:de:8f:ac:42:f2:5a:ad:e2:4a:db:36:a8:05:f7:3a:09:
         0f:24:e4:69:68:a7:37:6d:af:f2:bf:de:12:bc:ef:e1:94:61:
         48:cf:cb:f0:3a:ba:79:e3:ac:15:d6:71:ca:21:9c:78:e1:d0:
         db:06:83:08:86:f8:33:ba:6d:9b:44:b5:b2:2b:ce:fb:91:db:
         39:7c:79:41:bc:e2:f8:99:19:4c:58:a3:b3:66:9e:b2:a9:d9:
         c8:d4:35:d1:4a:b0:ca:73:f6:0a:19:cb:14:fe:1e:60:e3:c8:
         84:37:fd:2f:6a:db:93:43:98:5f:56:be:34:ff:04:60:2b:7f:
         7e:66:d7:bd:3c:a7:1c:8b:fb:fe:78:4c:06:ca:21:60:27:d1:
         de:7e:1d:cd:4b:68:20:48:cf:a6:9b:9c:86:0e:b3:75:bb:71:
         86:b5:d5:6d:10:ab:c8:56:68:69:1c:17:19:a3:24:62:45:7e:
         60:1b:d5:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfE13/kshh8HiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YzNhZTIzMTEtYTMyZC00MjU2LTk1ZjMtMzg5NzVjNTQxOTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoHKhN4PWgMQYeycpKs0ojHEfbxh9Sb93iq3
UXFIwYvZ6xTFPcgXdcbB16ngF5uPE6Qux3ThJibiw3+SbHYcg2z2gz9oNPE3xHSL
LCl7hnGNuUjmEVcqLWvVqai1vyfsPJX/2RmV7RwVfzDPoebZ+K0dMEsgS2Aja/xS
Ib2MYGKe8t3K8YTAUwLl7YyBkR4ODAZ9rNgdhF7ySRoV/XIxMOlgCib1EV1ufjLi
pMORkrhdsRjfoWGobMf2shGn46pRoKxdfcWI9GNB0aVqs+TrUOeXaW8NgOwz716x
TzIG6kqwsL9CtlB8BODSOexpYWBIrsDbsoNoQOa9lZV4wmx+3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVFmzG7Feh2CP2UrB+Z8l5hBnT+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZmZDRiNmItYTkwNC0z
ZjVmLWFlY2YtMmUxMzcxMDVlYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQF8FNx62Is5W8U86CrwXd9G911tUUcBoRsZcT7kiOrUW3R6k4tY8WK
fOthatZssOC70vXtHottNBHFqbMDU1XWdt6iEwZTegeD3o+sQvJareJK2zaoBfc6
CQ8k5Glopzdtr/K/3hK87+GUYUjPy/A6unnjrBXWccohnHjh0NsGgwiG+DO6bZtE
tbIrzvuR2zl8eUG84viZGUxYo7NmnrKp2cjUNdFKsMpz9goZyxT+HmDjyIQ3/S9q
25NDmF9WvjT/BGArf35m1708pxyL+/54TAbKIWAn0d5+Hc1LaCBIz6abnIYOs3W7
cYa11W0Qq8hWaGkcFxmjJGJFfmAb1TA=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:00:48 2025 by rpki-client