Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa
File:                     ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa (raw, json)
Hash identifier:          HJGVBmR7fbAdOD0X1PqmoV6XidvXngJJl0ohc0f8xKA=
Subject key identifier:   C6:76:DB:DB:D1:3E:86:A0:1A:97:31:FD:01:89:79:58:1C:9E:65:27
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8410FAB3E32B56D593920EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        99.196.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:fa:b3:e3:2b:56:d5:93:92:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aa685dc6-655e-49be-ac0f-a9c92bd6ec2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4a:cd:c1:be:68:da:17:3e:bb:93:3e:70:55:
                    bf:a9:33:ae:8e:51:80:4d:5e:3b:d5:92:b3:2c:df:
                    62:d0:da:da:0d:84:71:b0:01:14:b6:56:54:c6:ff:
                    01:77:62:15:99:85:31:ae:28:d1:db:eb:77:ce:44:
                    0a:80:06:df:46:0c:36:c4:26:8f:b8:e3:bc:70:e8:
                    6c:67:0b:f8:15:31:5a:71:38:ad:8b:5f:7a:0f:f2:
                    c7:47:a9:22:ba:f7:e8:0f:71:64:25:e3:7e:75:27:
                    94:84:be:59:0d:0f:6d:74:52:df:0b:ff:b1:be:7b:
                    bc:5f:0c:f6:c6:4c:df:9a:a0:a4:69:c9:93:f4:aa:
                    40:ee:c1:4a:50:5c:b8:c0:77:0c:ac:39:d6:7f:c7:
                    ac:d4:65:4b:e0:f0:ad:d2:c9:b8:23:92:93:f4:f2:
                    1e:d7:ba:4a:24:6e:20:6a:3e:c9:8f:79:1f:a9:56:
                    07:bf:b1:9c:98:35:f3:66:77:40:41:67:38:dd:15:
                    09:68:f5:87:5c:cf:8f:09:65:6e:2e:87:a0:15:1a:
                    51:43:5d:6e:d8:ca:cb:97:77:c9:0f:0d:89:59:8a:
                    83:26:83:75:d9:91:b1:81:d1:bb:52:d8:02:ea:d4:
                    3e:70:e7:64:e0:53:07:93:6f:f4:e3:21:8d:b8:31:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:DB:DB:D1:3E:86:A0:1A:97:31:FD:01:89:79:58:1C:9E:65:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca9f025a-4c86-3893-b0ef-c2ccd93b28b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:41:c1:7f:82:4b:4d:ab:c4:d3:6b:d6:53:0f:15:4e:9e:4f:
         09:30:5e:6c:c6:f1:e5:16:88:00:3e:6d:f7:b9:02:9a:0f:88:
         d0:78:5e:89:ab:7b:60:ed:8d:80:3a:0e:4c:ee:ad:e3:95:15:
         af:80:31:19:a7:61:09:4b:02:e6:15:ff:d6:d2:a2:14:40:5f:
         a1:84:9a:d6:2f:6f:3e:0f:38:d7:68:2a:29:cb:73:57:21:0d:
         2c:07:5e:60:69:0b:0e:41:4d:e5:f0:d1:c7:09:14:ad:3e:8d:
         40:a7:22:71:b9:ef:c0:ac:85:be:66:fa:c7:31:c1:e2:80:16:
         ba:df:b8:44:3e:cf:51:14:71:76:cf:92:5c:39:78:20:25:f2:
         01:25:7d:b5:bf:8e:31:c0:3a:09:fa:bd:b7:7d:77:22:55:a3:
         b7:81:69:ba:4b:7c:e6:ac:9a:a3:54:f0:16:7a:ba:f3:d2:8c:
         42:3d:07:80:eb:6b:e1:6f:93:a8:af:6d:35:60:0f:ed:86:9b:
         b9:67:35:f5:d7:9a:0f:e6:6e:ab:07:fa:55:a6:a1:e9:c1:0e:
         ba:40:24:16:31:bc:ec:c8:fd:7d:1a:89:1e:81:66:4e:03:d4:
         7d:1e:b8:1b:ef:f1:25:35:2b:60:20:b8:1b:a9:b0:4b:d6:d9:
         51:27:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:34 2025 by rpki-client