Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b08131e-117a-3f59-814e-295c780aa3c8.roa
File:                     1b08131e-117a-3f59-814e-295c780aa3c8.roa (raw, json)
Hash identifier:          6LTiPN8+c+89Q+4gi2HRvgnpLtan4+REpaEDMplkG28=
Subject key identifier:   51:F8:36:65:8B:70:19:41:45:02:DA:82:FE:B2:D6:1C:64:94:FD:B3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCC633E316E6ED88C0B020
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b08131e-117a-3f59-814e-295c780aa3c8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c6:33:e3:16:e6:ed:88:c0:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2b184e31-9250-4941-917c-dfd67b559c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:8e:af:d4:76:a3:be:f2:01:bb:ac:39:19:
                    90:f0:5b:af:ed:dd:78:70:d4:54:68:52:96:7c:cf:
                    66:5b:e4:11:e6:0a:c0:61:3e:93:22:d8:cf:f8:8b:
                    a7:b2:be:7f:b8:39:e5:8b:cb:ae:f1:5e:d6:48:81:
                    56:25:2a:86:09:5d:61:10:f9:b5:ee:c5:c0:54:a3:
                    fc:87:39:3d:5c:5c:5e:a6:60:7a:e3:13:58:4d:0a:
                    31:10:fb:ed:de:80:6d:52:80:15:ac:43:3b:92:48:
                    79:4d:6a:11:59:21:68:b9:b5:54:00:34:c3:5c:fa:
                    f9:42:9b:d3:77:b4:14:c1:d9:e4:43:52:f3:c3:b8:
                    09:81:52:82:e7:a2:32:c1:3a:72:ea:f3:b1:f1:7a:
                    64:5f:c5:c7:3d:22:20:f2:46:41:ad:5e:fa:a4:4f:
                    38:d9:05:72:19:f8:1e:ab:dd:48:23:c1:d5:70:b9:
                    78:31:7f:aa:8e:4c:ee:7d:3b:a1:b3:c1:91:67:a6:
                    ca:e6:43:4e:13:6a:0d:ba:17:4a:79:f0:72:c6:3e:
                    eb:5f:ae:f2:37:dd:2c:dc:3f:84:40:f9:86:ea:73:
                    9b:49:96:c0:a0:d0:8e:06:21:82:d8:02:31:dd:12:
                    d0:b3:67:c1:81:9f:64:88:3a:a2:27:28:66:3c:54:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:36:65:8B:70:19:41:45:02:DA:82:FE:B2:D6:1C:64:94:FD:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b08131e-117a-3f59-814e-295c780aa3c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:cb:7b:67:39:c2:e9:6b:f7:b4:65:e2:b9:7e:89:d9:14:
         0e:59:82:75:fd:3d:b3:66:e1:5e:6f:21:7a:b0:e7:3e:9f:b0:
         ad:46:7c:f5:32:42:b6:d7:a9:bb:73:23:97:3c:7a:64:01:64:
         91:99:c6:5c:13:11:75:ad:fb:fc:82:cf:63:d1:6e:d2:0b:6f:
         d3:a7:b3:e7:4c:15:1e:43:7d:e5:ec:9b:44:d8:5e:68:10:54:
         c2:ce:e1:29:f3:5e:03:72:bd:be:4d:d0:e3:fb:6f:2f:4f:cf:
         2f:52:58:cb:2a:48:4d:93:d1:35:ea:ec:0e:69:82:d5:6c:81:
         9a:43:35:cc:28:e8:c5:9b:86:60:4c:d9:61:7d:d1:9d:56:77:
         cd:03:3e:cb:b4:f9:cb:51:e1:e5:91:54:dc:2d:0f:c6:7c:e2:
         78:00:66:3c:72:a7:62:0d:83:eb:e2:ce:c9:9a:e6:c9:89:cd:
         17:a3:3e:03:bc:98:87:c2:eb:39:50:48:58:9b:86:8a:fb:a6:
         0f:2d:08:53:b3:3f:68:a4:b9:2a:ba:e6:6f:33:22:73:56:cb:
         8c:2d:55:40:fe:2c:dd:4b:40:13:ff:a1:14:7d:4e:ec:66:b0:
         ce:26:70:2a:54:5b:b1:83:19:3c:b7:82:ff:a3:c5:cd:9d:96:
         72:5a:89:7e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtkzMYz4xbm7YjAsCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MmIxODRlMzEtOTI1MC00OTQxLTkxN2MtZGZkNjdiNTU5YzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzauOr9R2o77yAbusORmQ8Fuv7d14cNRUaFKW
fM9mW+QR5grAYT6TItjP+Iunsr5/uDnli8uu8V7WSIFWJSqGCV1hEPm17sXAVKP8
hzk9XFxepmB64xNYTQoxEPvt3oBtUoAVrEM7kkh5TWoRWSFoubVUADTDXPr5QpvT
d7QUwdnkQ1Lzw7gJgVKC56IywTpy6vOx8XpkX8XHPSIg8kZBrV76pE842QVyGfge
q91II8HVcLl4MX+qjkzufTuhs8GRZ6bK5kNOE2oNuhdKefByxj7rX67yN90s3D+E
QPmG6nObSZbAoNCOBiGC2AIx3RLQs2fBgZ9kiDqiJyhmPFSCTwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFH4NmWLcBlBRQLagv6y1hxklP2zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWIwODEzMWUtMTE3YS0z
ZjU5LTgxNGUtMjk1Yzc4MGFhM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBY8QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAST/Le2c5wulr97Rl4rl+idkUDlmCdf09s2bhXm8herDnPp+wrUZ89TJC
ttepu3Mjlzx6ZAFkkZnGXBMRda37/ILPY9Fu0gtv06ez50wVHkN95eybRNheaBBU
ws7hKfNeA3K9vk3Q4/tvL0/PL1JYyypITZPRNersDmmC1WyBmkM1zCjoxZuGYEzZ
YX3RnVZ3zQM+y7T5y1Hh5ZFU3C0PxnzieABmPHKnYg2D6+LOyZrmyYnNF6M+A7yY
h8LrOVBIWJuGivumDy0IU7M/aKS5KrrmbzMic1bLjC1VQP4s3UtAE/+hFH1O7Gaw
ziZwKlRbsYMZPLeC/6PFzZ2WclqJfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:02 2025 by rpki-client