Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8116ee63-344d-328a-bfe4-7408a144edf2.roa
File:                     8116ee63-344d-328a-bfe4-7408a144edf2.roa (raw, json)
Hash identifier:          J2DFApiw20n8c4evI49e3YLG1K0L115nrxsT1WIWF58=
Subject key identifier:   38:D7:D8:FD:C0:3D:83:06:14:66:1A:59:86:14:67:CC:9E:27:7B:A8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC4DBE7413FD670732D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8116ee63-344d-328a-bfe4-7408a144edf2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c4:db:e7:41:3f:d6:70:73:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=df82d439-7131-4360-82b3-3b77e493a8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:50:8f:a7:36:19:de:ae:b6:e0:89:cf:4c:
                    67:a4:44:19:3a:a4:3c:ba:aa:08:8d:c7:ea:2c:2b:
                    1e:0d:42:d6:51:1d:09:fc:90:46:f0:38:85:d8:02:
                    05:f6:a1:30:f3:95:7d:0c:14:ca:67:df:cd:06:6a:
                    58:39:eb:da:9a:64:39:28:9d:f7:e0:29:27:3b:35:
                    48:b4:f1:0e:f9:a6:2a:1c:f3:f6:aa:02:fe:45:9f:
                    ad:91:ea:2e:da:ac:b1:b9:46:4a:e7:a9:d8:9f:c2:
                    a8:04:b9:00:0f:79:77:7c:da:6a:1f:44:df:f9:09:
                    cb:1a:03:9f:63:fd:64:1f:8a:9d:a5:83:ee:fd:c5:
                    23:86:63:b5:9a:d4:4b:e4:c3:cd:0a:cd:29:76:81:
                    a8:a2:53:c1:40:96:56:ce:9d:a3:ad:22:03:da:9a:
                    c3:4c:59:ef:29:04:70:ac:c9:77:19:4d:60:a4:00:
                    3c:4e:13:e0:ce:6d:11:39:cd:bd:6f:da:ab:53:50:
                    c8:a1:b2:47:87:0d:3f:66:03:87:5c:f8:74:7f:d8:
                    fb:ab:ba:d9:e7:41:a6:53:4a:e7:f6:1e:a7:57:3c:
                    05:68:0c:2f:b1:9f:16:18:1a:ed:21:86:13:8f:39:
                    4a:a9:69:3b:c0:09:c3:37:21:a4:0d:a8:a6:2e:86:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:D8:FD:C0:3D:83:06:14:66:1A:59:86:14:67:CC:9E:27:7B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8116ee63-344d-328a-bfe4-7408a144edf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:14:f7:db:c8:ba:1d:29:6f:51:b1:cf:f6:e0:3c:a1:fe:
         62:ca:57:10:94:33:ae:b9:38:41:cb:78:9f:c1:3b:ef:cd:96:
         e4:ce:de:d7:60:4e:6a:85:d6:fa:6e:3e:e9:df:30:08:ed:b9:
         3c:c3:77:dc:2b:31:bd:13:3a:2d:61:fc:88:6f:92:86:18:20:
         68:83:90:21:ea:ba:95:fb:68:82:1d:26:74:17:a6:6a:e4:58:
         20:09:b7:0b:a1:c3:90:19:dc:fe:e3:de:ce:ab:ba:36:30:dd:
         32:95:f0:74:0d:a4:66:c7:6e:a1:75:14:e9:a6:51:6d:39:72:
         d6:4c:1e:ae:ae:c0:aa:25:b8:96:fa:0f:19:cc:02:5c:dc:cf:
         19:aa:e2:ba:76:7d:d5:a8:f7:54:fe:1b:57:8f:66:25:57:d6:
         aa:4f:ff:96:e6:9c:00:69:f6:3b:fb:2a:18:54:2c:2e:20:6e:
         c4:e4:f9:53:96:34:2e:53:c9:d0:1d:6b:8a:a1:9c:e5:ca:a5:
         4e:b5:c5:3e:d5:2a:1f:fd:3e:53:b8:42:a8:e1:c2:08:3c:36:
         5e:d5:e1:cb:eb:02:3c:49:fd:3f:aa:4a:cf:f4:42:46:0a:90:
         ba:8f:7a:7c:96:8b:de:a8:18:24:d3:09:f1:4c:a3:dc:aa:4c:
         11:77:36:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcTb50E/1nBzLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZGY4MmQ0MzktNzEzMS00MzYwLTgyYjMtM2I3N2U0OTNhOGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHlQj6c2Gd6utuCJz0xnpEQZOqQ8uqoIjcfq
LCseDULWUR0J/JBG8DiF2AIF9qEw85V9DBTKZ9/NBmpYOevammQ5KJ334CknOzVI
tPEO+aYqHPP2qgL+RZ+tkeou2qyxuUZK56nYn8KoBLkAD3l3fNpqH0Tf+QnLGgOf
Y/1kH4qdpYPu/cUjhmO1mtRL5MPNCs0pdoGoolPBQJZWzp2jrSID2prDTFnvKQRw
rMl3GU1gpAA8ThPgzm0ROc29b9qrU1DIobJHhw0/ZgOHXPh0f9j7q7rZ50GmU0rn
9h6nVzwFaAwvsZ8WGBrtIYYTjzlKqWk7wAnDNyGkDaimLoZXMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjX2P3APYMGFGYaWYYUZ8yeJ3uoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODExNmVlNjMtMzQ0ZC0z
MjhhLWJmZTQtNzQwOGExNDRlZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBbFPfbyLodKW9Rsc/24Dyh/mLKVxCUM665OEHLeJ/BO+/NluTO3tdg
TmqF1vpuPunfMAjtuTzDd9wrMb0TOi1h/IhvkoYYIGiDkCHqupX7aIIdJnQXpmrk
WCAJtwuhw5AZ3P7j3s6rujYw3TKV8HQNpGbHbqF1FOmmUW05ctZMHq6uwKoluJb6
DxnMAlzczxmq4rp2fdWo91T+G1ePZiVX1qpP/5bmnABp9jv7KhhULC4gbsTk+VOW
NC5TydAda4qhnOXKpU61xT7VKh/9PlO4Qqjhwgg8Nl7V4cvrAjxJ/T+qSs/0QkYK
kLqPenyWi96oGCTTCfFMo9yqTBF3Nm8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:04 2025 by rpki-client