Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae367ab3-d0ed-31e9-91a6-dae403962402.roa
File:                     ae367ab3-d0ed-31e9-91a6-dae403962402.roa (raw, json)
Hash identifier:          e5agjEy00BsU2rUfEHaVrRByNwD8XsdL2/zyCLdLujM=
Subject key identifier:   77:1D:3F:AD:B3:85:FB:3D:F5:07:63:9C:A3:5E:9E:94:00:4B:CB:69
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC7DFD1643276AE4562D2
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae367ab3-d0ed-31e9-91a6-dae403962402.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.198.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c7:df:d1:64:32:76:ae:45:62:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=98034f19-49ff-4164-ba49-b1a7e7353edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:ac:49:09:85:53:d2:0b:af:ae:92:4f:3f:
                    56:37:aa:93:59:24:e1:89:1c:28:32:52:b2:4a:67:
                    c6:c0:d2:d2:53:64:9e:fc:01:1a:f2:7b:31:b1:68:
                    e9:e4:31:b5:98:02:55:f3:91:57:8a:9f:23:8b:d7:
                    c7:9c:6a:e0:cd:c6:2a:eb:b0:bd:14:ce:b3:38:2d:
                    e3:2c:63:cc:a5:f1:6b:78:32:d7:8d:f8:64:5d:b1:
                    bb:81:2c:d4:f0:24:20:3b:12:7b:5a:9e:ce:3f:de:
                    e7:9e:62:66:8c:3e:9f:b2:68:2b:cc:2a:c0:5b:2d:
                    74:20:3d:c2:8a:25:92:44:b1:2c:32:a1:fd:4f:90:
                    69:86:0f:ed:ca:13:45:39:1b:c4:39:9d:f9:9e:1b:
                    58:00:38:b1:41:f8:4a:1a:38:f8:6a:8b:55:ee:10:
                    0e:c5:7f:61:ba:0b:a6:41:63:aa:d3:48:d1:be:7f:
                    57:13:03:a5:bf:61:f5:4e:29:bc:30:d6:b2:a1:18:
                    94:66:69:1d:44:fe:c1:e9:24:c9:b5:b7:f1:aa:6b:
                    aa:2e:8a:45:d1:7e:c6:8d:5c:63:9e:ec:eb:0c:03:
                    27:df:62:7b:db:28:b9:c1:9c:dc:4c:57:09:3a:45:
                    36:84:b2:88:d0:99:c5:c0:19:a3:67:42:ff:d9:29:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1D:3F:AD:B3:85:FB:3D:F5:07:63:9C:A3:5E:9E:94:00:4B:CB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae367ab3-d0ed-31e9-91a6-dae403962402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a5:12:6c:0c:7d:99:22:c3:22:9c:fc:82:db:15:e4:33:cc:
         ea:55:59:b3:22:94:72:40:dc:41:d7:6d:72:d7:22:82:db:e4:
         c3:89:62:8b:d2:2a:e4:d5:ed:76:ef:e2:32:9c:bc:01:fe:0d:
         3b:43:5e:d9:3f:5b:80:a3:b5:2f:31:8c:ff:53:fa:8e:3e:25:
         3b:58:33:69:7c:26:b2:ed:4f:e1:fc:9c:52:01:87:11:27:94:
         ad:ad:c9:73:b6:27:ae:4c:7c:69:51:15:f6:13:0d:2b:ea:c3:
         ab:28:f6:4f:8c:17:13:2b:c2:db:fe:cd:c2:da:b8:8c:a8:e0:
         57:7e:c4:7e:95:ec:17:d0:8b:c0:08:d9:7c:f6:42:cb:e7:31:
         08:67:79:cd:76:4f:15:d0:0e:81:34:84:d0:eb:49:b4:7a:37:
         80:86:a4:a2:01:14:2b:ec:0c:5c:cd:0b:f9:bc:99:e3:78:c4:
         05:ab:f3:8a:c9:df:5e:34:23:68:4b:55:e6:c4:10:36:94:2f:
         a7:60:47:df:31:c9:b5:e8:1b:5a:e9:3c:8d:57:4f:93:5d:de:
         63:57:8a:70:68:6b:c7:e2:5a:5f:77:84:ae:a6:15:28:cb:bc:
         65:ec:96:e2:a2:42:db:d3:61:ed:6a:b5:24:6d:e7:a0:e2:69:
         f3:1b:30:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcff0WQydq5FYtIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OTgwMzRmMTktNDlmZi00MTY0LWJhNDktYjFhN2U3MzUzZWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AusSQmFU9ILr66STz9WN6qTWSThiRwoMlKy
SmfGwNLSU2Se/AEa8nsxsWjp5DG1mAJV85FXip8ji9fHnGrgzcYq67C9FM6zOC3j
LGPMpfFreDLXjfhkXbG7gSzU8CQgOxJ7Wp7OP97nnmJmjD6fsmgrzCrAWy10ID3C
iiWSRLEsMqH9T5Bphg/tyhNFORvEOZ35nhtYADixQfhKGjj4aotV7hAOxX9hugum
QWOq00jRvn9XEwOlv2H1Tim8MNayoRiUZmkdRP7B6STJtbfxqmuqLopF0X7GjVxj
nuzrDAMn32J72yi5wZzcTFcJOkU2hLKI0JnFwBmjZ0L/2SkRAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcdP62zhfs99QdjnKNenpQAS8tpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWUzNjdhYjMtZDBlZC0z
MWU5LTkxYTYtZGFlNDAzOTYyNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACClEmwMfZkiwyKc/ILbFeQzzOpVWbMilHJA3EHXbXLXIoLb5MOJYovS
KuTV7Xbv4jKcvAH+DTtDXtk/W4CjtS8xjP9T+o4+JTtYM2l8JrLtT+H8nFIBhxEn
lK2tyXO2J65MfGlRFfYTDSvqw6so9k+MFxMrwtv+zcLauIyo4Fd+xH6V7BfQi8AI
2Xz2QsvnMQhnec12TxXQDoE0hNDrSbR6N4CGpKIBFCvsDFzNC/m8meN4xAWr84rJ
3140I2hLVebEEDaUL6dgR98xybXoG1rpPI1XT5Nd3mNXinBoa8fiWl93hK6mFSjL
vGXsluKiQtvTYe1qtSRt56DiafMbMFM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:54 2025 by rpki-client