Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd33e32b-7019-3a96-a2a1-595455ca08bd.roa
File:                     fd33e32b-7019-3a96-a2a1-595455ca08bd.roa (raw, json)
Hash identifier:          iqa9M1DFWkrEegvtoLDfRhysXB4LAw0b0iFU906COak=
Subject key identifier:   DD:23:93:FF:AE:DC:DC:4E:76:1C:3A:AE:65:2C:AA:B1:06:25:2E:FB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411352BD4537FD2178C8040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd33e32b-7019-3a96-a2a1-595455ca08bd.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:35:2b:d4:53:7f:d2:17:8c:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9487b87d-a030-4862-b708-cb9833ee2340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:aa:df:d0:76:94:1d:19:8f:b0:b9:5a:e2:
                    82:64:ea:6d:a6:d0:89:73:1b:9a:b3:5a:ce:70:f3:
                    cd:e7:49:e3:cf:a6:2b:67:28:44:a6:99:22:0a:73:
                    b8:a3:96:8e:a3:b5:00:5c:15:84:78:b0:0b:ec:67:
                    dd:83:dd:69:77:1d:f9:cc:ed:e2:6e:27:e1:75:3f:
                    9f:80:a9:40:1a:bf:03:e3:aa:2d:e5:6f:8e:ab:78:
                    77:2b:30:c4:d3:03:01:2b:e1:45:13:06:ad:2b:d0:
                    23:a3:0d:a4:f5:05:91:1f:c8:ef:f1:c1:e9:20:04:
                    ef:8f:62:da:68:6f:03:15:7d:e2:7a:ca:b9:30:4e:
                    34:2e:f5:e8:86:fe:95:89:b0:1c:e7:34:bc:1a:32:
                    0f:94:2b:ee:d9:a3:3e:3b:50:d7:26:30:84:46:da:
                    08:41:c5:d9:7c:69:33:85:4e:08:46:0c:9b:85:76:
                    94:b5:a2:dc:a2:9a:f1:a7:bb:79:c7:7b:ba:fe:66:
                    eb:48:a2:9c:5f:fe:0a:b6:22:54:6d:da:57:10:4b:
                    28:38:a1:e6:62:01:bd:45:46:71:e5:23:b0:49:44:
                    bc:99:61:16:96:ef:f2:a8:19:53:07:a5:2d:db:0e:
                    df:ae:51:ea:17:a3:84:b0:e9:a8:9e:77:34:d5:00:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:23:93:FF:AE:DC:DC:4E:76:1C:3A:AE:65:2C:AA:B1:06:25:2E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd33e32b-7019-3a96-a2a1-595455ca08bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:05:1c:9a:8f:09:63:b1:cf:60:13:db:b4:c6:58:70:58:a1:
         58:b5:52:8c:21:e7:c0:bb:78:98:17:c0:27:cb:e0:59:28:28:
         dc:3e:81:8f:7f:59:02:f0:fc:4e:84:ec:0b:7a:93:3b:15:b1:
         f4:55:08:a3:0b:0a:a3:78:74:98:cc:07:7a:0a:b5:e0:46:31:
         fb:5b:91:db:c5:95:b8:36:e6:95:9a:86:48:9b:93:20:be:14:
         aa:bc:45:99:db:39:be:8b:ee:26:66:27:0b:d6:65:da:20:73:
         82:71:27:ef:59:e4:cf:3b:90:d9:ab:d9:2f:31:a3:7f:6a:ab:
         92:5d:e9:49:32:1e:2c:d6:3b:5f:27:5c:1c:5d:b5:29:b9:d9:
         13:e1:6b:57:c0:65:fb:96:ad:9f:c9:6c:c2:bc:d9:d6:9a:30:
         5f:84:58:45:1a:bd:25:d2:d3:dd:68:c1:92:1c:30:26:2f:ca:
         af:e1:a3:cd:2d:db:2a:73:af:02:2a:02:ed:bb:e7:91:25:2d:
         74:07:db:93:94:0f:59:a7:03:d0:97:00:59:ca:f5:43:45:94:
         35:47:e6:c1:26:54:de:f5:05:af:f3:c1:eb:b4:e4:e1:0c:a1:
         d2:78:74:2c:6a:1d:2a:af:df:64:1c:0a:c1:f7:3e:f4:a5:5f:
         3b:e4:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:07 2025 by rpki-client