Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa
File:                     ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa (raw, json)
Hash identifier:          OytTLHDqysTc0XtQKEkaobq6rgNoQSGQQIeSyD2MLvY=
Subject key identifier:   D2:DA:FD:CD:CA:F1:D7:54:EE:F8:A5:AE:FA:93:A1:88:E2:6D:EC:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DDE8A6FB69D6697006100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.196.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:de:8a:6f:b6:9d:66:97:00:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5c04b1aa-5c98-42cd-a890-827976f880d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:74:1e:0f:a5:f7:04:81:da:3d:fd:8d:c9:
                    7a:f0:05:51:3c:d9:3b:e1:b2:0f:11:9f:eb:e7:36:
                    28:21:18:e8:5c:12:ff:31:7f:f7:f1:d8:c2:04:c8:
                    dc:84:1a:86:ed:96:5a:cc:d8:ce:b4:5e:af:cd:07:
                    5d:f3:24:8b:b4:1d:c4:74:b7:fb:89:d7:e2:76:2e:
                    c9:f8:c5:05:9e:51:ab:43:b6:17:5e:70:e5:cc:19:
                    cb:2f:54:ef:f5:f1:b2:e6:82:04:b6:c5:41:d2:f4:
                    ba:32:27:cb:42:0a:a8:d8:68:d3:63:db:0b:c6:16:
                    d9:47:32:87:89:05:61:9e:86:ae:f5:c7:69:d9:9e:
                    36:87:b5:68:a3:4e:60:12:83:7f:a1:78:59:8d:30:
                    69:25:03:67:90:0c:6d:97:f0:c7:c2:d8:e0:2f:63:
                    aa:7c:8a:cf:f7:c1:ff:28:c8:13:61:44:46:05:8f:
                    79:bb:32:f4:64:e1:dd:47:8b:b4:a4:5a:d3:d9:45:
                    ef:b0:f5:b3:c0:0b:5e:0f:35:59:6e:af:af:3f:6f:
                    d2:97:2a:8a:0a:02:5d:4c:9a:84:20:a8:ec:4f:b1:
                    08:a4:ca:6e:f0:3c:86:93:b2:b2:59:42:12:53:2b:
                    63:45:bf:46:fb:83:e0:c8:0a:70:b2:b3:e4:8e:ef:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:FD:CD:CA:F1:D7:54:EE:F8:A5:AE:FA:93:A1:88:E2:6D:EC:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1572e5-8c7f-3f37-8891-5e6de3ee8e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:fa:87:24:b1:8e:3c:60:0c:22:0c:75:87:9a:47:16:80:49:
         06:65:f1:38:34:63:ad:56:0b:c3:5a:50:6f:20:e4:aa:28:82:
         b1:14:40:97:ee:61:cc:45:47:65:e4:0d:a9:46:c6:6c:ae:ca:
         fa:94:3d:ae:4e:0f:d3:3a:bd:ee:47:0a:40:69:f1:bb:3d:5c:
         f2:1f:00:f6:b5:b8:b9:46:e7:40:78:39:4b:97:74:8a:58:af:
         98:9f:e3:63:6f:85:c8:87:48:03:82:2d:7a:8a:21:a0:d9:62:
         f1:4a:c7:86:ba:b4:26:74:80:78:5a:45:5f:0d:19:42:30:3b:
         80:17:79:42:46:92:53:0e:26:e6:87:6d:3a:12:33:64:1b:fc:
         b4:57:4a:20:88:40:3d:b2:fb:69:31:e0:fa:17:63:ce:65:b7:
         39:fd:a2:8b:3a:4f:0f:0f:4d:c3:1b:f0:cb:f4:d4:cc:31:df:
         b7:14:bd:1e:70:6b:f5:a4:f3:04:bf:83:94:a3:95:e4:f4:5d:
         aa:2f:6c:1a:0c:fe:3d:18:21:bb:b6:2a:b1:16:22:2c:a9:0e:
         9b:5b:b2:e3:a5:b0:4c:8b:ef:db:2e:3d:1b:76:6f:9c:95:e5:
         a3:02:20:60:64:fe:db:d8:c9:a3:98:22:d3:bc:fc:00:cb:b6:
         17:30:8f:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnd6Kb7adZpcAYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWMwNGIxYWEtNWM5OC00MmNkLWE4OTAtODI3OTc2Zjg4MGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xd0Hg+l9wSB2j39jcl68AVRPNk74bIPEZ/r
5zYoIRjoXBL/MX/38djCBMjchBqG7ZZazNjOtF6vzQdd8ySLtB3EdLf7idfidi7J
+MUFnlGrQ7YXXnDlzBnLL1Tv9fGy5oIEtsVB0vS6MifLQgqo2GjTY9sLxhbZRzKH
iQVhnoau9cdp2Z42h7Voo05gEoN/oXhZjTBpJQNnkAxtl/DHwtjgL2OqfIrP98H/
KMgTYURGBY95uzL0ZOHdR4u0pFrT2UXvsPWzwAteDzVZbq+vP2/SlyqKCgJdTJqE
IKjsT7EIpMpu8DyGk7KyWUISUytjRb9G+4PgyApwsrPkju+nSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLa/c3K8ddU7vilrvqToYjibeyYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWUxNTcyZTUtOGM3Zi0z
ZjM3LTg4OTEtNWU2ZGUzZWU4ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANX6hySxjjxgDCIMdYeaRxaASQZl8Tg0Y61WC8NaUG8g5KoogrEUQJfu
YcxFR2XkDalGxmyuyvqUPa5OD9M6ve5HCkBp8bs9XPIfAPa1uLlG50B4OUuXdIpY
r5if42NvhciHSAOCLXqKIaDZYvFKx4a6tCZ0gHhaRV8NGUIwO4AXeUJGklMOJuaH
bToSM2Qb/LRXSiCIQD2y+2kx4PoXY85ltzn9oos6Tw8PTcMb8Mv01Mwx37cUvR5w
a/Wk8wS/g5SjleT0XaovbBoM/j0YIbu2KrEWIiypDptbsuOlsEyL79suPRt2b5yV
5aMCIGBk/tvYyaOYItO8/ADLthcwj1A=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:55:05 2026 by rpki-client