Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa
File:                     d7c9f36b-a510-3b78-b345-9d35452555bc.roa (raw, json)
Hash identifier:          PjZGn0y1X3fbFXriIlKh4889QK8+5yfBg9xaAnyt5xw=
Subject key identifier:   EE:48:64:A9:32:7C:90:81:32:41:48:66:3F:2E:FE:FC:66:FE:F0:61
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113135081F4D8BF0823340
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:31:35:08:1f:4d:8b:f0:82:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e9977714-717e-4773-ae3f-668b880d60e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:dc:1d:7c:af:17:68:bf:5d:fa:0e:7e:51:
                    f7:b3:a3:3a:82:75:32:b8:eb:31:16:cf:d9:8b:d9:
                    79:48:44:a2:1f:51:a5:20:53:9c:60:5d:0d:00:3d:
                    20:24:75:72:1d:f5:d8:b1:03:97:6f:3f:aa:91:14:
                    c2:fe:08:e0:35:15:2c:47:b4:29:4a:39:20:bb:a8:
                    88:4a:bf:41:a2:6f:28:07:b5:d9:80:09:50:e6:48:
                    db:b6:79:a1:86:1f:e7:ee:51:1b:87:6e:c2:1c:5c:
                    76:e9:94:96:3d:73:cf:8d:16:9e:e0:02:04:fe:a5:
                    90:62:ac:c3:c8:9b:ba:5f:81:17:01:a0:47:1b:65:
                    ce:65:f2:d7:db:e4:53:d2:37:1c:fd:7c:97:4f:f7:
                    78:cc:c9:29:b8:3b:c9:89:51:b4:6a:b3:a2:a0:9e:
                    87:5a:9d:e0:95:d1:cc:91:a7:d7:e9:7e:b1:41:ce:
                    af:c9:5b:1c:da:73:5a:7e:74:83:d6:75:22:7e:e1:
                    2d:19:84:89:28:85:c8:7b:db:21:2b:07:17:fa:a9:
                    d4:48:51:76:ef:9c:bc:dc:1d:20:bf:1d:c9:07:32:
                    90:71:a5:5b:8b:7e:50:88:02:60:4d:ba:af:5b:d2:
                    f2:c2:9c:80:07:7d:6a:1e:fd:e4:7b:b8:cd:a1:fc:
                    62:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:48:64:A9:32:7C:90:81:32:41:48:66:3F:2E:FE:FC:66:FE:F0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:05:1c:f3:70:8b:5e:4b:9b:9f:92:ca:5c:67:7b:e3:dc:e0:
         1f:1f:77:32:5d:00:5d:cd:65:6c:60:50:ff:57:46:b5:47:c7:
         c1:c0:15:e8:09:bb:46:a4:cd:ef:43:b5:1e:99:aa:9e:90:bd:
         d4:03:d8:de:4e:64:f7:65:ea:aa:f1:b1:0e:90:83:15:b3:02:
         b5:2c:14:31:a1:45:ec:9f:79:92:26:7b:d5:01:c2:b5:d4:e0:
         84:c6:25:ad:62:0e:2a:14:78:a4:f3:95:01:9e:77:15:f1:12:
         1a:6d:ba:62:8c:dd:c0:1d:28:41:39:b6:1b:d5:38:00:a4:46:
         60:da:a3:5c:27:da:96:77:44:de:63:59:c1:e4:b1:9a:f7:ca:
         b2:03:74:71:52:0d:e0:e0:78:d2:8d:40:13:f9:fe:45:d5:bd:
         af:b9:d1:fc:fd:a8:c9:fa:d8:64:a8:d9:7b:4b:57:48:b2:93:
         39:b4:f5:5e:b8:4b:7c:ab:11:88:a1:9c:2e:92:16:4a:e2:fb:
         40:1f:f4:ee:a1:71:1e:e3:49:d6:9a:f4:28:28:04:50:6c:5a:
         76:f7:be:fa:71:1a:24:48:84:c6:5b:08:ca:cf:cc:e2:66:3b:
         91:63:06:0c:5b:76:9e:cf:45:6e:1a:e2:bd:15:4a:4f:fa:f9:
         2c:4e:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:06:01 2025 by rpki-client