Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa
File:                     d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa (raw, json)
Hash identifier:          9J7zCFh5Ln0osZy+oHIqgowGOc/IE0R6a6DD+0SGVTo=
Subject key identifier:   3D:B6:85:C5:E9:D3:EA:1D:C9:94:01:40:51:BC:C2:5E:BA:2E:85:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E887D31926FC8BA8A300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e8:87:d3:19:26:fc:8b:a8:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=28cbeefe-0591-40e1-b75d-239759040aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:c2:3d:45:f7:7f:0a:38:81:ca:63:97:b6:
                    b5:ff:98:74:a4:b9:26:1e:0d:0e:2d:4e:d9:2e:91:
                    38:61:59:35:85:83:65:f1:23:e8:b2:79:62:15:10:
                    14:2f:7c:a4:97:76:dd:5f:b8:6b:1d:ac:65:a0:3b:
                    a6:05:d5:80:5d:90:7c:3d:23:15:03:9b:a8:a4:8e:
                    84:42:50:02:ce:9e:43:c4:6e:7a:c6:f8:4f:64:fe:
                    9e:ee:5b:72:8d:2e:a5:b7:c5:2a:b1:2d:21:9f:b8:
                    e2:c7:36:ab:2c:5b:ec:b0:59:ed:b1:a8:81:41:f0:
                    d4:1c:1a:f1:23:a9:e5:15:f2:59:af:ab:d1:5a:37:
                    70:e6:f9:e6:d7:42:c7:38:af:fc:6d:ac:d4:e7:8b:
                    6d:b7:ed:05:c1:97:a6:dc:f7:94:f7:59:6b:ab:d2:
                    f6:05:eb:25:d9:28:9a:bc:75:4e:d9:e2:f6:ea:a3:
                    53:85:c8:e9:43:cc:3a:4a:1e:0d:85:42:24:ec:6f:
                    b3:89:96:f0:d7:30:ec:2d:39:39:f5:39:f1:6d:03:
                    9f:d4:76:b3:bb:a8:f3:90:17:f2:40:04:3f:9e:89:
                    28:4b:d1:cf:e2:86:ba:22:4f:6b:bd:98:35:19:a9:
                    9f:a2:9c:90:2e:34:01:8d:5e:c2:d1:fb:b9:2c:b3:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B6:85:C5:E9:D3:EA:1D:C9:94:01:40:51:BC:C2:5E:BA:2E:85:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:10:cd:f6:80:78:98:99:16:47:6f:cd:56:68:6f:c5:89:
         27:6b:06:e6:7e:af:73:8b:87:cf:e5:6a:77:68:ae:9c:d7:02:
         df:3d:c3:6d:bf:d0:ce:f8:bf:f9:8e:98:90:cb:8e:05:e3:72:
         8a:82:b8:3d:40:d1:4e:e8:18:6b:c0:35:ff:40:95:da:94:95:
         cd:37:aa:09:db:5f:1e:f1:68:69:25:4c:f8:21:d7:5c:75:d8:
         5e:bb:d8:88:b8:20:39:5c:33:40:f6:d3:09:e8:cb:a0:35:29:
         a4:8d:9e:bd:0e:1e:98:53:6d:34:7d:90:4a:80:05:48:fc:c7:
         fe:df:65:28:2d:91:ee:ee:c1:ed:da:a4:50:df:63:1c:00:1a:
         d4:f9:92:08:6f:25:80:11:b3:dc:58:73:c0:3f:b7:6d:d6:6d:
         23:6b:fd:c7:4a:e2:e0:e2:99:1d:9d:db:23:a5:71:64:30:ca:
         30:aa:c8:4d:a2:f3:17:2b:21:b7:d4:3e:ea:c1:f4:57:8f:f5:
         b6:22:ed:90:1b:36:29:bb:3c:62:21:5a:ef:6a:1c:d2:11:60:
         85:27:aa:02:c7:aa:67:97:2f:0d:86:5d:de:d5:a2:33:0f:75:
         a1:f8:d0:ed:29:e5:56:1e:b4:d5:b8:d5:f2:dc:9c:bc:bc:cd:
         a7:4e:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:36 2025 by rpki-client