Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12404fb8-ab99-38d7-831c-de9dd9871260.roa
File:                     12404fb8-ab99-38d7-831c-de9dd9871260.roa (raw, json)
Hash identifier:          Or+3oNN/sbDLglrrfd4Z8T/KH6rfwJWzRh9klMJtzZA=
Subject key identifier:   B9:58:35:DC:2B:D9:2E:46:8B:CB:6F:4F:CD:BA:EE:FF:55:1B:D6:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD07FEFB6D2433A863CCC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12404fb8-ab99-38d7-831c-de9dd9871260.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:07:fe:fb:6d:24:33:a8:63:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=22aff08b-f83e-49da-97ba-5be0a2497674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:0f:6a:0f:bf:de:be:67:2c:b5:34:80:bf:
                    f6:c5:01:0f:36:92:85:17:78:9f:17:3d:bb:5d:d6:
                    f1:e7:82:3d:0d:3b:96:8d:a7:29:eb:7d:fd:bb:7d:
                    6e:8e:fe:69:4a:24:88:86:a0:08:96:44:b1:7c:c6:
                    98:47:29:bf:9b:74:af:e9:26:0b:e6:61:0f:9f:e5:
                    15:b9:39:ce:12:43:16:f0:99:24:cf:c9:10:e8:3f:
                    72:1f:a6:fb:4a:ea:64:13:a8:0d:22:ef:c0:c6:d4:
                    90:29:c9:58:45:f0:25:97:09:09:71:3f:53:05:60:
                    be:50:a8:1b:82:34:91:6d:05:04:65:ac:05:8e:57:
                    80:6b:f0:fc:9b:5e:7d:31:34:32:09:85:9e:1a:d1:
                    ec:6a:85:5e:d4:85:d2:8d:6f:16:cc:e1:d0:f0:f8:
                    77:73:cf:19:ca:02:83:b0:a6:32:32:0a:2a:93:5f:
                    79:d4:21:9f:e7:39:02:36:fa:73:1f:6f:c4:a1:c0:
                    46:e2:b6:91:80:b8:c3:62:20:11:b9:43:e8:bc:25:
                    18:25:ff:7b:72:d3:44:61:4e:8c:8a:d9:35:35:e1:
                    0a:fe:4f:d7:03:66:ce:1d:b2:5c:f0:78:a1:d1:50:
                    21:88:40:75:14:e0:40:1d:7c:c1:a5:70:93:ca:e6:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:58:35:DC:2B:D9:2E:46:8B:CB:6F:4F:CD:BA:EE:FF:55:1B:D6:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12404fb8-ab99-38d7-831c-de9dd9871260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:0e:0f:fd:b7:7a:34:e0:91:05:33:4e:02:d7:f2:01:37:d7:
         55:ea:7a:6a:8a:79:4a:c2:8e:94:ac:0c:b3:56:4b:41:a7:79:
         04:3d:d4:ae:11:47:ac:23:30:b9:8e:ac:0b:52:cc:d1:83:43:
         e3:79:45:22:62:54:9a:2f:53:2c:c1:12:f6:74:09:b5:1f:00:
         90:8f:72:8c:da:4d:cd:15:ef:c5:8c:af:b1:38:de:fe:51:8f:
         ed:14:71:2f:4f:05:a9:cc:24:4c:81:21:ca:09:ad:6a:3a:cf:
         d2:47:9c:9b:b5:96:67:cf:5c:5a:4d:c5:04:62:19:7f:52:6b:
         b9:30:8a:d6:5f:6b:e4:9c:53:81:3b:6a:36:cd:bf:28:da:b9:
         a0:13:e7:b1:eb:c8:92:89:1c:ae:6b:37:1a:4d:bc:4e:78:2b:
         e5:c3:a5:c9:5f:09:6e:2a:72:4d:29:9c:39:0e:bc:4e:cf:bc:
         a1:13:b2:32:15:23:5f:32:d6:d7:5b:95:9e:8e:e6:2b:76:71:
         af:0a:a9:1e:fc:86:6f:d2:fb:93:dc:df:99:bb:53:0f:a8:62:
         03:cb:f3:f6:d1:be:cd:90:df:84:6d:f7:29:db:32:c9:20:0c:
         56:0a:31:bb:b1:dc:34:82:a5:37:33:94:da:82:23:80:03:1c:
         3f:d8:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:03 2025 by rpki-client