Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1bcc07c-0dc3-383f-9a79-065cbb96c27e.roa
File:                     e1bcc07c-0dc3-383f-9a79-065cbb96c27e.roa (raw, json)
Hash identifier:          RuNRhSEZsmZ+lbitNDrUMms9cVK00fr6yt8RMe80mqU=
Subject key identifier:   6D:EF:83:14:21:50:92:E5:C1:84:12:A5:1E:07:E3:7B:2F:6E:A6:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411309FEF13CF7168F4C540
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1bcc07c-0dc3-383f-9a79-065cbb96c27e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:30:9f:ef:13:cf:71:68:f4:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=309aed25-a4e8-4b91-a774-feab78ece4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:29:7a:b7:47:00:0b:bd:45:72:d9:93:b5:b8:
                    ca:d6:e0:e7:59:82:1a:56:14:41:20:b4:06:19:3f:
                    7a:3d:8b:ef:e7:e6:6e:20:33:82:a5:22:f8:cb:64:
                    ba:ef:b3:4e:c5:66:d7:cf:b4:08:a1:4f:bb:5c:6e:
                    6e:ea:b8:d0:51:60:56:4e:51:72:b3:39:d3:d3:62:
                    20:c0:69:3b:44:da:b4:50:9a:e6:36:30:8f:aa:da:
                    03:15:ae:47:d7:6a:75:22:7f:ce:64:1e:0a:4e:01:
                    1d:99:83:bd:d7:67:c8:0d:d8:ce:80:17:11:90:de:
                    75:5a:1e:42:b4:4f:a4:45:9d:85:fc:30:5b:b4:51:
                    b1:4f:ba:80:55:ca:c8:4e:b3:3d:50:07:69:1d:c7:
                    26:ad:88:47:bb:92:07:c9:f4:4c:89:eb:46:3a:b0:
                    15:8c:19:af:4f:98:f9:77:fe:82:ab:26:9f:e4:b3:
                    6d:ae:8f:c7:6e:78:02:6e:38:25:b5:d0:d4:9a:d2:
                    95:f9:15:a0:db:35:65:e3:52:6e:39:27:39:14:a5:
                    48:af:59:f8:a3:e1:95:16:3e:71:3f:7e:d2:03:1c:
                    3f:c5:f2:9f:71:7a:43:8c:b8:10:bb:5d:4c:87:69:
                    24:8f:ce:fc:0f:ac:3e:85:01:f9:7a:99:fe:a6:da:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EF:83:14:21:50:92:E5:C1:84:12:A5:1E:07:E3:7B:2F:6E:A6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1bcc07c-0dc3-383f-9a79-065cbb96c27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:20:91:8e:1a:f7:f9:02:f9:c2:7e:03:9c:a8:e8:18:ad:77:
         b5:ce:e2:7e:5c:7c:bd:6d:98:41:1e:0c:34:5b:36:aa:0f:4c:
         d8:ed:8d:08:21:42:63:04:85:bc:3b:df:91:3b:c7:fd:df:18:
         9f:3e:37:5e:74:6e:ab:31:1c:cc:bf:6f:a7:14:56:76:9c:42:
         88:11:a7:28:aa:9e:43:ce:da:5e:e2:da:5d:3a:fa:cf:35:53:
         a6:a1:e8:b7:45:b5:96:36:d1:ae:4e:31:cb:de:c3:36:a9:31:
         65:27:37:de:3e:60:49:3b:04:29:0e:38:fa:ad:f8:5e:ab:aa:
         83:c2:a1:c1:b0:78:43:e8:31:e1:0a:99:1d:c5:5f:60:ec:27:
         33:f0:ba:89:7d:7d:0b:09:04:68:34:3a:3d:0a:06:43:dd:32:
         96:ff:f5:0d:a3:d3:b6:40:0e:0a:10:9b:05:8c:70:9d:77:d5:
         12:f4:ce:f5:77:5e:cd:18:8b:91:8a:f3:3e:0b:22:82:90:98:
         5e:6a:36:b3:d3:22:18:13:c2:19:80:32:df:dc:7c:d3:a4:a8:
         9c:a2:4c:cc:35:0c:36:8e:09:0b:5a:a6:05:fc:08:a6:84:2c:
         55:a8:7d:7e:d4:83:0d:e4:0d:be:e3:0e:8c:00:22:31:0a:a3:
         d2:64:45:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEETCf7xPPcWj0xUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MzA5YWVkMjUtYTRlOC00YjkxLWE3NzQtZmVhYjc4ZWNlNGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyl6t0cAC71FctmTtbjK1uDnWYIaVhRBILQG
GT96PYvv5+ZuIDOCpSL4y2S677NOxWbXz7QIoU+7XG5u6rjQUWBWTlFysznT02Ig
wGk7RNq0UJrmNjCPqtoDFa5H12p1In/OZB4KTgEdmYO912fIDdjOgBcRkN51Wh5C
tE+kRZ2F/DBbtFGxT7qAVcrITrM9UAdpHccmrYhHu5IHyfRMietGOrAVjBmvT5j5
d/6Cqyaf5LNtro/HbngCbjgltdDUmtKV+RWg2zVl41JuOSc5FKVIr1n4o+GVFj5x
P37SAxw/xfKfcXpDjLgQu11Mh2kkj878D6w+hQH5epn+ptr7kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3vgxQhUJLlwYQSpR4H43svbqbvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTFiY2MwN2MtMGRjMy0z
ODNmLTlhNzktMDY1Y2JiOTZjMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Q6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIgkY4a9/kC+cJ+A5yo6Bitd7XO4n5cfL1tmEEeDDRbNqoPTNjtjQgh
QmMEhbw735E7x/3fGJ8+N150bqsxHMy/b6cUVnacQogRpyiqnkPO2l7i2l06+s81
U6ah6LdFtZY20a5OMcvewzapMWUnN94+YEk7BCkOOPqt+F6rqoPCocGweEPoMeEK
mR3FX2DsJzPwuol9fQsJBGg0Oj0KBkPdMpb/9Q2j07ZADgoQmwWMcJ131RL0zvV3
Xs0Yi5GK8z4LIoKQmF5qNrPTIhgTwhmAMt/cfNOkqJyiTMw1DDaOCQtapgX8CKaE
LFWofX7Ugw3kDb7jDowAIjEKo9JkReg=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:05:52 2025 by rpki-client