Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa
File:                     b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa (raw, json)
Hash identifier:          kdJpUV4xDPbCCnlFmlJaUC4Pdsh8OYFQlRiOd9TCeRA=
Subject key identifier:   72:82:F1:F0:9F:43:86:50:45:12:F7:2C:1A:D2:73:5C:7F:7C:33:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA81CDBEFCDAE98A263340
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        99.196.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:81:cd:be:fc:da:e9:8a:26:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=76d264d1-e693-41e7-9a79-af68c7228cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:a5:74:cf:f6:6c:15:2d:9a:c0:07:1d:6f:
                    a0:53:81:c3:13:b6:c4:01:37:9f:f9:32:ce:c2:66:
                    66:d5:b4:ec:5e:53:7f:62:da:15:97:25:a5:14:d9:
                    c8:c4:b9:0b:64:eb:07:1e:b6:c7:ad:e9:a6:02:ee:
                    1e:32:73:9e:f6:8a:23:f2:23:3a:de:46:80:b8:03:
                    34:b7:c7:3b:7e:b2:2e:f2:09:2d:30:de:0a:55:38:
                    5d:bc:59:9d:d4:3c:d0:e3:01:e6:0f:09:cb:c5:8c:
                    99:4e:3e:52:fc:94:e4:cc:57:f6:3d:26:da:0c:12:
                    37:2f:1d:2a:67:e8:3d:7f:05:ca:da:01:82:40:8f:
                    c0:94:d6:9a:26:89:b8:13:d8:7f:2e:b3:e5:b8:05:
                    97:52:1a:9c:af:5d:9c:e8:ce:7a:98:81:fb:39:02:
                    ba:46:17:38:f1:85:6f:3a:01:c3:0a:f0:79:ae:dd:
                    da:10:c0:c3:74:d1:a9:be:c9:68:1e:b1:1f:10:a2:
                    1e:1a:d2:78:6f:64:cb:ed:50:24:1a:b2:6e:16:ea:
                    69:97:b7:cc:4d:d3:18:50:fa:01:34:ae:90:35:24:
                    57:7f:6c:d3:ff:1d:16:a1:0c:bf:7b:fe:2e:ba:fb:
                    98:76:a2:df:aa:bd:ae:3c:12:16:64:01:c5:18:d5:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:F1:F0:9F:43:86:50:45:12:F7:2C:1A:D2:73:5C:7F:7C:33:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:7e:40:59:11:7c:ba:9f:b7:8f:26:ca:ea:fb:ab:eb:a5:
         ae:36:f0:5c:29:23:36:2d:bd:93:b5:a1:b4:e3:47:cf:4f:be:
         4c:10:c8:e5:1b:95:b2:e8:49:09:e6:b5:41:5e:93:e5:e9:71:
         4b:d2:53:95:60:09:5e:22:6c:aa:f2:69:b8:13:a0:8c:b3:cd:
         13:60:21:ef:14:6e:2f:7c:04:f8:38:64:12:b4:73:fd:ce:92:
         e7:71:51:ab:63:0e:8e:f2:26:1c:b7:6f:75:8b:9c:43:bc:14:
         f5:17:a8:c5:63:f4:4d:90:1c:39:6a:a5:68:f7:13:83:5d:33:
         f0:b6:94:b2:37:f6:9d:20:42:41:af:e5:8d:f9:40:67:df:b3:
         c4:dd:a0:82:fe:47:27:a1:f6:39:8e:cc:c6:e5:cf:bc:75:a3:
         0f:7f:aa:ea:5b:7d:e7:23:e4:d8:c0:ac:8f:6e:65:f7:04:75:
         53:5d:54:8e:0e:3a:17:5d:45:fa:80:86:34:f2:b8:cd:fb:71:
         89:13:a1:4c:93:56:f8:84:ee:98:3d:52:55:d0:79:78:8b:b9:
         9a:d9:a5:2b:ef:ec:03:8a:2d:10:f3:66:42:c2:fa:08:0d:8d:
         69:bf:64:3f:14:c1:64:cf:ad:a2:ed:3d:82:93:4f:3a:a8:6b:
         ca:a5:82:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuoHNvvza6YomM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NzZkMjY0ZDEtZTY5My00MWU3LTlhNzktYWY2OGM3MjI4Y2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjOldM/2bBUtmsAHHW+gU4HDE7bEATef+TLO
wmZm1bTsXlN/YtoVlyWlFNnIxLkLZOsHHrbHremmAu4eMnOe9ooj8iM63kaAuAM0
t8c7frIu8gktMN4KVThdvFmd1DzQ4wHmDwnLxYyZTj5S/JTkzFf2PSbaDBI3Lx0q
Z+g9fwXK2gGCQI/AlNaaJom4E9h/LrPluAWXUhqcr12c6M56mIH7OQK6Rhc48YVv
OgHDCvB5rt3aEMDDdNGpvsloHrEfEKIeGtJ4b2TL7VAkGrJuFuppl7fMTdMYUPoB
NK6QNSRXf2zT/x0WoQy/e/4uuvuYdqLfqr2uPBIWZAHFGNVj6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHKC8fCfQ4ZQRRL3LBrSc1x/fDMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjlhNzE5NmUtNWEwMi0z
YmExLTlkMDYtNWE3YTNhNGVjMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8T0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfPfkBZEXy6n7ePJsrq+6vrpa428FwpIzYtvZO1obTjR89PvkwQyOUb
lbLoSQnmtUFek+XpcUvSU5VgCV4ibKryabgToIyzzRNgIe8Ubi98BPg4ZBK0c/3O
kudxUatjDo7yJhy3b3WLnEO8FPUXqMVj9E2QHDlqpWj3E4NdM/C2lLI39p0gQkGv
5Y35QGffs8TdoIL+Ryeh9jmOzMblz7x1ow9/qupbfecj5NjArI9uZfcEdVNdVI4O
OhddRfqAhjTyuM37cYkToUyTVviE7pg9UlXQeXiLuZrZpSvv7AOKLRDzZkLC+ggN
jWm/ZD8UwWTPraLtPYKTTzqoa8qlgqM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:31:35 2025 by rpki-client