Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa
File:                     d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa (raw, json)
Hash identifier:          x4tjsxp2nM/j2m3cHVsjgfnIbb8prEJ9iK5FcONbjxo=
Subject key identifier:   94:2F:A3:C6:4D:93:CE:B5:DA:F6:16:2B:AE:09:36:BC:70:25:5E:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD05F3DFB29F3BD5A88800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:05:f3:df:b2:9f:3b:d5:a8:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=362fe9b1-b59c-4a43-8b98-81570694c063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:7f:83:62:25:79:9b:3b:ee:9f:02:d7:14:
                    06:af:14:e3:0e:6a:60:25:32:16:0d:e4:66:ac:38:
                    70:20:8c:a2:bd:e6:f8:83:8c:cf:f1:97:20:9f:7d:
                    b9:b6:35:61:21:54:b3:62:20:8d:29:76:ff:9c:9f:
                    d8:7c:6e:47:17:71:ae:ac:3f:90:2b:93:96:84:61:
                    07:e9:0d:26:03:e3:8a:ab:37:e0:24:34:ea:90:93:
                    81:78:cf:8a:02:c8:a3:87:2e:bd:c0:e2:74:91:04:
                    df:d5:70:1c:01:c5:c2:70:20:5b:27:ff:02:0f:4d:
                    12:c1:9a:9f:34:35:d4:ee:18:b9:8c:32:8a:4b:3d:
                    f2:b3:89:6f:c2:fa:d1:78:81:17:b3:5b:05:09:9d:
                    b4:19:a9:b1:86:e1:67:6a:a9:fc:f0:48:f6:ce:9e:
                    73:79:dd:4f:43:2a:4a:df:c7:7c:f0:73:36:22:2c:
                    ad:d1:55:12:89:4a:75:86:58:7c:2b:08:a0:2a:4b:
                    e1:8e:db:08:42:e8:ef:a2:9c:fc:16:ba:f0:40:2c:
                    6d:65:f4:60:aa:fc:94:2c:90:18:bb:64:96:3c:ef:
                    dd:44:77:7b:f6:f2:c3:e5:06:47:90:dd:36:a6:50:
                    21:91:d8:a6:01:bc:0b:dd:e7:c7:f7:be:15:db:a3:
                    dc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:A3:C6:4D:93:CE:B5:DA:F6:16:2B:AE:09:36:BC:70:25:5E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:2b:2a:cc:60:d6:63:3b:09:e3:7d:a2:c9:2c:dc:88:64:ec:
         53:73:ca:0d:c6:d7:50:a3:93:25:3b:22:78:a4:0a:f0:16:1d:
         ee:e8:47:77:0d:2a:8e:e6:b6:14:ed:a7:ec:ab:84:6f:94:e5:
         38:d3:59:18:2b:da:c6:cf:a1:37:ff:5e:b9:2c:f5:2a:e1:e4:
         5d:d8:f6:2a:47:39:20:5a:37:24:a7:13:ff:b7:7d:e6:d5:f1:
         c7:37:49:0d:29:94:bc:90:26:21:70:f5:16:32:0d:6f:d8:8e:
         43:cb:c0:5b:9a:43:77:3a:bc:a0:07:c6:de:22:cd:13:e1:10:
         55:cb:18:76:96:1b:18:0f:9c:ef:0f:09:4c:6d:7f:e9:7e:cf:
         76:2f:e9:87:91:c8:ab:ff:ea:6c:58:f5:73:69:9b:26:b5:66:
         2e:17:da:76:ad:e5:bd:49:21:58:92:2a:d0:ef:d2:7d:42:48:
         f2:ad:0f:1c:ad:f5:b0:a8:bb:0e:82:18:bd:72:a8:7f:cf:ab:
         f5:ae:1e:8a:ac:6c:18:03:ac:ad:43:3f:c4:14:a4:ac:f8:6d:
         09:48:3b:aa:13:38:f2:26:70:93:43:8a:18:47:6a:86:5c:c1:
         ee:74:e5:7a:fd:19:52:d9:a6:67:7f:c4:ce:3b:57:39:d8:95:
         8a:94:bd:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQXz37KfO9WoiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MzYyZmU5YjEtYjU5Yy00YTQzLThiOTgtODE1NzA2OTRjMDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA1/g2IleZs77p8C1xQGrxTjDmpgJTIWDeRm
rDhwIIyiveb4g4zP8Zcgn325tjVhIVSzYiCNKXb/nJ/YfG5HF3GurD+QK5OWhGEH
6Q0mA+OKqzfgJDTqkJOBeM+KAsijhy69wOJ0kQTf1XAcAcXCcCBbJ/8CD00SwZqf
NDXU7hi5jDKKSz3ys4lvwvrReIEXs1sFCZ20GamxhuFnaqn88Ej2zp5zed1PQypK
38d88HM2Iiyt0VUSiUp1hlh8KwigKkvhjtsIQujvopz8FrrwQCxtZfRgqvyULJAY
u2SWPO/dRHd79vLD5QZHkN02plAhkdimAbwL3efH974V26PcoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJQvo8ZNk8612vYWK64JNrxwJV6/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDA4OGNmODItMWU5My0z
ZDljLThkNGItZWI0Nzg1ZjQyNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANArKsxg1mM7CeN9osks3Ihk7FNzyg3G11CjkyU7InikCvAWHe7oR3cN
Ko7mthTtp+yrhG+U5TjTWRgr2sbPoTf/Xrks9Srh5F3Y9ipHOSBaNySnE/+3febV
8cc3SQ0plLyQJiFw9RYyDW/YjkPLwFuaQ3c6vKAHxt4izRPhEFXLGHaWGxgPnO8P
CUxtf+l+z3Yv6YeRyKv/6mxY9XNpmya1Zi4X2nat5b1JIViSKtDv0n1CSPKtDxyt
9bCouw6CGL1yqH/Pq/WuHoqsbBgDrK1DP8QUpKz4bQlIO6oTOPImcJNDihhHaoZc
we505Xr9GVLZpmd/xM47VznYlYqUvYM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:28 2025 by rpki-client