Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c79f9e60-6bee-3948-9afb-ff5db6996413.roa
File:                     c79f9e60-6bee-3948-9afb-ff5db6996413.roa (raw, json)
Hash identifier:          X11x/1LJcdGDStLJPcZupehRwolMKA+7Aesr6xo3I6k=
Subject key identifier:   C0:0F:7C:6D:7F:74:F1:7C:D0:15:7F:88:B5:AE:B7:D6:31:0D:53:D5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E469FC9D98885BCFA180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c79f9e60-6bee-3948-9afb-ff5db6996413.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e4:69:fc:9d:98:88:5b:cf:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=38d4de8e-8d0b-4abb-a5b9-c7c010b05180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:87:55:6f:c2:00:d7:0e:ca:74:cc:3a:49:
                    94:62:06:5d:b1:cf:88:bd:b4:b7:a2:d4:07:1d:f5:
                    87:fa:99:fb:2e:b9:ba:0c:65:fd:02:f3:16:74:ef:
                    25:2b:aa:e7:68:d1:4a:80:d5:fb:46:cf:1f:c2:3c:
                    b0:a0:f3:b2:1b:e4:3e:a7:8b:61:bb:d3:04:8f:96:
                    d7:30:8c:71:fb:50:1f:5a:b9:3a:93:48:f6:6c:bf:
                    5f:3c:a8:fb:e1:ad:93:ec:ca:e0:1e:5e:02:2d:97:
                    fc:4d:a0:95:36:9f:38:9f:97:93:ac:14:10:cd:62:
                    6e:b4:dd:f7:fe:d5:ad:8a:b0:5a:29:66:12:8a:2f:
                    5b:55:52:1a:4f:b2:7a:61:76:fd:e4:05:db:6b:35:
                    4c:8e:f3:57:a2:0a:7a:1b:4a:7a:c3:15:cd:5b:b6:
                    64:d3:03:1e:7e:c3:a6:b4:cf:a7:b7:d1:1c:cd:59:
                    2f:5c:04:4d:7e:db:72:b2:d0:26:8c:57:de:69:88:
                    c9:1c:83:d7:2b:11:51:6c:12:9d:56:96:e7:74:2b:
                    46:73:a8:a9:4a:6d:9a:1a:16:08:ac:4d:df:ab:e9:
                    5c:14:f7:8e:8f:49:48:9e:73:0a:4d:5b:dc:4c:68:
                    64:84:b3:9d:b3:a5:fe:02:a4:6f:f2:31:ac:16:77:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:7C:6D:7F:74:F1:7C:D0:15:7F:88:B5:AE:B7:D6:31:0D:53:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c79f9e60-6bee-3948-9afb-ff5db6996413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:91:1e:db:48:e3:a1:f5:db:cb:f2:2a:88:6e:b0:83:b2:b3:
         5f:21:0c:cb:6a:a5:06:7f:e3:bb:c9:d7:dd:03:43:80:85:83:
         59:11:56:a3:65:2b:01:91:6d:43:5f:7e:6c:29:76:a0:79:39:
         4f:9b:38:11:b2:1c:3a:11:0a:a5:87:b5:86:00:c0:5c:70:fd:
         d9:69:d9:10:ad:3d:bd:45:2b:c7:1f:ec:f4:00:72:0c:61:de:
         e0:de:df:ae:a8:a4:2d:3a:da:98:f9:d6:1d:06:19:89:f1:50:
         f1:71:34:9f:66:49:34:49:0b:79:8a:50:cc:ac:64:c7:fe:ad:
         9e:eb:f7:80:d8:cf:59:a2:aa:7e:32:08:c0:31:e4:80:8c:b5:
         b8:bd:b7:c0:eb:d1:93:82:ed:e3:32:d5:8a:ef:00:9c:af:da:
         ce:a3:6b:cf:35:8c:59:96:85:93:f3:bc:a8:56:f7:d6:5f:1f:
         9f:c8:0f:85:56:f3:17:fd:f9:8e:e1:0f:af:53:cc:3d:e1:b9:
         28:ef:cb:0a:b8:58:13:67:c6:4a:94:f9:c3:2f:1b:cf:3c:8c:
         ad:f4:a5:a3:b1:e0:b8:7f:05:de:e9:fb:2c:68:a7:6b:4a:27:
         96:e3:92:c0:d6:a6:29:e9:ee:2f:48:35:e4:0f:6d:62:cb:32:
         0f:9c:6e:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEeRp/J2YiFvPoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MzhkNGRlOGUtOGQwYi00YWJiLWE1YjktYzdjMDEwYjA1MTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q2HVW/CANcOynTMOkmUYgZdsc+IvbS3otQH
HfWH+pn7Lrm6DGX9AvMWdO8lK6rnaNFKgNX7Rs8fwjywoPOyG+Q+p4thu9MEj5bX
MIxx+1AfWrk6k0j2bL9fPKj74a2T7MrgHl4CLZf8TaCVNp84n5eTrBQQzWJutN33
/tWtirBaKWYSii9bVVIaT7J6YXb95AXbazVMjvNXogp6G0p6wxXNW7Zk0wMefsOm
tM+nt9EczVkvXARNfttystAmjFfeaYjJHIPXKxFRbBKdVpbndCtGc6ipSm2aGhYI
rE3fq+lcFPeOj0lInnMKTVvcTGhkhLOds6X+AqRv8jGsFndYZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAPfG1/dPF80BV/iLWut9YxDVPVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzc5ZjllNjAtNmJlZS0z
OTQ4LTlhZmItZmY1ZGI2OTk2NDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmRHttI46H128vyKohusIOys18hDMtqpQZ/47vJ190DQ4CFg1kRVqNl
KwGRbUNffmwpdqB5OU+bOBGyHDoRCqWHtYYAwFxw/dlp2RCtPb1FK8cf7PQAcgxh
3uDe366opC062pj51h0GGYnxUPFxNJ9mSTRJC3mKUMysZMf+rZ7r94DYz1miqn4y
CMAx5ICMtbi9t8Dr0ZOC7eMy1YrvAJyv2s6ja881jFmWhZPzvKhW99ZfH5/ID4VW
8xf9+Y7hD69TzD3huSjvywq4WBNnxkqU+cMvG888jK30paOx4Lh/Bd7p+yxop2tK
J5bjksDWpinp7i9INeQPbWLLMg+cbjE=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:15:37 2025 by rpki-client