Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed2bc440-ccb8-3ee3-b2fe-762e2392383f.roa
File:                     ed2bc440-ccb8-3ee3-b2fe-762e2392383f.roa (raw, json)
Hash identifier:          t38t/tLAXLArEtF9WaDmAS9wzpteXGikMrxW8Q8Fx1I=
Subject key identifier:   2B:61:98:2D:69:28:F0:C9:A6:EF:CB:B1:4D:7D:8D:64:00:0B:D7:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113A0907987D4084BB8120
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed2bc440-ccb8-3ee3-b2fe-762e2392383f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:3a:09:07:98:7d:40:84:bb:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=08ae1d28-87c2-48b8-80ac-e61db085f930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:40:1e:5b:fd:03:32:15:bb:f9:94:e9:38:
                    b9:24:9b:59:23:bd:93:93:a2:a6:44:f4:b4:e2:14:
                    7d:a4:61:d4:ca:d5:53:e9:22:10:f6:c6:bd:aa:b2:
                    61:49:36:a9:44:7b:b2:e8:00:54:6d:95:48:e0:08:
                    43:d1:5d:d0:f7:d7:5e:bb:0e:9b:7e:88:84:0a:92:
                    2b:41:87:3e:62:37:df:ff:52:24:a5:bb:78:7d:0f:
                    e8:5e:33:c0:b8:a6:6d:c2:02:11:d1:33:ed:aa:b0:
                    62:c3:cf:eb:17:89:e3:6e:cf:9c:03:ad:ab:e4:4d:
                    18:8b:75:d9:6b:3f:3a:11:a4:f8:c7:d4:a0:cc:14:
                    1d:34:7f:cd:42:96:d4:7d:a1:13:92:2c:4a:02:b7:
                    16:b3:1b:4a:d1:1d:4c:28:78:7d:11:61:2a:31:cd:
                    e3:dc:4a:4a:8c:e5:64:ad:97:5d:ab:87:90:83:b7:
                    c7:ad:5f:21:c8:f1:f8:b8:c8:ce:bc:64:6d:bd:71:
                    fb:dc:02:9c:a9:6e:7b:2f:2c:85:08:e5:2e:a3:e3:
                    1b:36:fd:f2:91:22:88:9c:48:0b:68:da:26:28:6d:
                    81:f4:a4:cc:e5:7b:94:3b:2c:fb:0a:55:92:ff:76:
                    57:69:32:44:f5:37:e3:74:e4:0b:e6:da:c5:3d:8e:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:98:2D:69:28:F0:C9:A6:EF:CB:B1:4D:7D:8D:64:00:0B:D7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed2bc440-ccb8-3ee3-b2fe-762e2392383f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:47:ca:a8:5f:23:24:f1:90:97:62:ea:61:3a:14:7f:b7:cb:
         95:90:5b:e5:4d:e3:9b:90:6e:43:39:c2:f0:05:48:fd:11:a9:
         29:2c:90:b3:7f:14:8f:72:db:2d:62:d3:4e:7a:18:46:4d:7e:
         44:5e:d6:30:80:21:b0:8d:9b:dc:60:f1:1a:c9:25:01:87:7a:
         84:89:9c:61:81:cf:3a:54:54:c3:68:a6:e6:f4:fa:b5:19:c7:
         cc:af:10:fd:b0:0d:68:4a:49:f5:9b:d8:c7:24:cf:b8:20:0a:
         d7:e5:f5:87:1d:59:f5:5a:fd:a4:94:47:56:40:fb:f1:ef:9f:
         43:75:50:5a:9c:a7:25:78:b5:71:6e:dd:9a:7d:4f:da:dc:44:
         77:e8:5d:81:bc:e6:60:10:ca:b6:6f:b3:bb:e0:22:fe:d6:7d:
         ac:a2:dd:0b:ec:67:62:51:99:7b:c6:96:0b:d6:ba:2c:81:72:
         91:85:c8:ba:05:ba:a8:8d:7b:db:4b:0b:06:d7:5f:7e:29:d6:
         4e:42:3b:1c:d7:4b:30:a5:74:34:89:d1:7e:52:9e:be:04:6c:
         4c:76:9c:a3:ee:7b:a7:6a:30:50:0d:82:17:28:3c:9e:56:4b:
         11:06:1b:ac:c1:a7:1f:5d:75:c7:16:f2:54:85:c0:02:93:79:
         40:a9:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:02:01 2025 by rpki-client