Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa
File:                     d7c9f36b-a510-3b78-b345-9d35452555bc.roa (raw, json)
Hash identifier:          WLbIaTgR/AJoflC6bObr8hRv6j5QCt0Y6cs0NpNhqvM=
Subject key identifier:   41:24:D8:9D:01:85:0A:78:9C:3F:D9:22:05:F3:A7:D6:54:60:FE:4E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCFFBBB93592FE4B65D680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ff:bb:b9:35:92:fe:4b:65:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0f058b0d-03b6-4f80-8ad5-3f850545397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e4:70:45:ab:84:61:cb:33:06:76:4a:be:78:
                    4c:18:50:f3:dd:f9:7c:e8:6f:81:8a:6b:60:54:3c:
                    b6:9e:31:58:1a:05:fe:24:0b:21:18:62:d9:02:27:
                    39:1a:48:21:27:cc:fd:3c:9b:dc:e3:2d:54:e7:2b:
                    2e:07:97:44:38:6b:09:e5:db:d7:02:f3:e1:61:7b:
                    82:ec:1b:49:3e:9c:8b:1f:c4:44:96:09:73:da:59:
                    42:70:f2:8f:ae:cc:c7:68:75:4d:b1:06:73:82:91:
                    d6:15:11:7a:06:ff:d3:46:50:d5:fb:c8:ad:bb:9d:
                    4b:8a:ca:10:5c:0e:ea:91:1e:63:b8:74:76:8e:49:
                    9a:db:fd:dc:b1:dc:50:b8:35:6b:bb:68:39:c4:8c:
                    34:85:f8:88:f7:88:c0:7d:fc:85:ce:d6:0c:a0:1f:
                    9b:58:fe:00:41:b3:80:c0:70:5b:07:6d:7c:5e:4c:
                    f9:ca:65:ee:76:f8:49:ff:82:f3:6a:54:52:aa:06:
                    e1:f3:c0:a8:61:4e:3b:8e:e6:87:7f:c7:d9:06:05:
                    d7:85:58:86:70:db:cb:f5:17:f7:e9:0a:cd:29:fb:
                    ca:a8:f6:98:c1:74:b8:6e:43:64:c0:8b:2e:e0:53:
                    40:d4:6d:2f:a7:e2:01:82:49:ab:31:e4:39:a1:9b:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:24:D8:9D:01:85:0A:78:9C:3F:D9:22:05:F3:A7:D6:54:60:FE:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7c9f36b-a510-3b78-b345-9d35452555bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:bb:0a:43:ff:93:eb:99:f0:46:61:8a:e4:9c:15:cc:74:
         f7:d4:89:46:f8:8b:a6:ff:32:44:cf:f7:d0:18:d8:60:54:1f:
         aa:b0:67:e8:cc:5b:c4:4a:bc:0c:a8:a5:71:d2:4f:07:2c:f8:
         e5:12:74:1c:48:20:41:31:d7:b4:01:82:e0:6b:65:d6:6c:7b:
         66:7c:53:d4:47:4b:bd:3d:b4:1f:f4:71:9c:0f:fd:14:e9:c4:
         28:4e:1a:06:14:0d:07:20:79:27:5d:6d:41:9d:0d:e1:f6:03:
         f7:0d:6a:c8:92:18:91:99:77:85:79:27:4b:38:b9:45:a1:00:
         0e:27:87:bc:27:b2:de:19:05:ff:d2:f6:2c:09:6c:0e:eb:e1:
         6a:06:d8:9b:5e:38:4a:99:9e:e6:42:e8:9f:06:e1:5f:7b:9c:
         41:34:38:44:b4:5f:85:cb:d8:b7:6a:1d:2d:e4:46:8d:7d:fa:
         95:1d:0f:d3:c5:d4:83:de:64:7b:fb:39:40:f0:30:8e:ee:5e:
         08:4d:5c:a0:3c:07:d4:32:a9:54:7c:40:9d:8e:a6:f4:82:a5:
         dc:09:cc:b4:8d:a9:27:e8:7e:44:92:3a:bf:67:d0:2c:2f:99:
         43:98:59:63:13:89:67:86:ea:86:b1:79:bf:76:f2:c2:d0:0d:
         c2:31:65:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzP+7uTWS/ktl1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MGYwNThiMGQtMDNiNi00ZjgwLThhZDUtM2Y4NTA1NDUzOTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuRwRauEYcszBnZKvnhMGFDz3fl86G+Bimtg
VDy2njFYGgX+JAshGGLZAic5GkghJ8z9PJvc4y1U5ysuB5dEOGsJ5dvXAvPhYXuC
7BtJPpyLH8RElglz2llCcPKPrszHaHVNsQZzgpHWFRF6Bv/TRlDV+8itu51LisoQ
XA7qkR5juHR2jkma2/3csdxQuDVru2g5xIw0hfiI94jAffyFztYMoB+bWP4AQbOA
wHBbB218Xkz5ymXudvhJ/4LzalRSqgbh88CoYU47juaHf8fZBgXXhViGcNvL9Rf3
6QrNKfvKqPaYwXS4bkNkwIsu4FNA1G0vp+IBgkmrMeQ5oZvIiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEk2J0BhQp4nD/ZIgXzp9ZUYP5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDdjOWYzNmItYTUxMC0z
Yjc4LWIzNDUtOWQzNTQ1MjU1NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA86uwpD/5PrmfBGYYrknBXMdPfUiUb4i6b/MkTP99AY2GBUH6qwZ+jM
W8RKvAyopXHSTwcs+OUSdBxIIEEx17QBguBrZdZse2Z8U9RHS709tB/0cZwP/RTp
xChOGgYUDQcgeSddbUGdDeH2A/cNasiSGJGZd4V5J0s4uUWhAA4nh7wnst4ZBf/S
9iwJbA7r4WoG2JteOEqZnuZC6J8G4V97nEE0OES0X4XL2LdqHS3kRo19+pUdD9PF
1IPeZHv7OUDwMI7uXghNXKA8B9QyqVR8QJ2OpvSCpdwJzLSNqSfofkSSOr9n0Cwv
mUOYWWMTiWeG6oaxeb928sLQDcIxZYA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:41 2025 by rpki-client