Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20fef383-b20a-3fb7-a528-52783640401d.roa
File:                     20fef383-b20a-3fb7-a528-52783640401d.roa (raw, json)
Hash identifier:          uQxBXm0siMwf2i8/fg4rtQ5hHXCqRsBrUp4vBJw5ORg=
Subject key identifier:   B8:2A:F7:15:F8:DE:C7:A1:31:36:49:D7:9D:CB:5A:AB:B2:69:75:51
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49839E614CA44F8C082A58C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20fef383-b20a-3fb7-a528-52783640401d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.197.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:9e:61:4c:a4:4f:8c:08:2a:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5cebf7c6-e31a-4e66-88ae-cf36851998c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:95:4b:91:9d:4d:cf:cc:eb:53:87:e7:17:
                    34:b5:6c:4b:2e:50:31:a7:cb:93:9e:8f:0b:f3:5f:
                    10:f8:e5:cb:5e:f0:c0:7b:e6:bf:c5:6b:d5:d7:a1:
                    75:ac:57:f1:5c:43:74:92:54:48:d7:9b:dc:09:1f:
                    c5:d9:e4:ec:a4:92:e5:ed:68:90:85:fc:a9:48:56:
                    d9:7d:ad:6e:9b:6d:2b:58:a7:26:23:bc:e0:62:31:
                    1e:c8:84:26:e6:f7:c0:71:27:18:7f:c3:3b:f2:42:
                    96:64:43:bc:7a:95:6c:24:ac:1b:ac:2f:29:d9:5c:
                    1f:a4:20:89:ce:ed:9a:d7:8c:70:88:64:28:74:24:
                    ff:b0:65:d1:bf:c8:05:e9:15:bf:96:57:54:48:be:
                    0d:72:27:db:31:8e:cb:35:e9:5a:71:9a:43:af:e4:
                    6a:e5:58:fb:ba:95:2a:91:9b:c5:cc:ce:13:07:d9:
                    db:72:69:2b:5b:c2:e3:0a:52:1b:a6:df:c4:13:91:
                    25:41:71:42:c0:91:b9:43:65:84:9c:1e:d2:e3:67:
                    da:93:2a:f5:58:93:fd:39:d7:08:7b:9c:a0:f2:ef:
                    ba:de:ab:17:97:3d:0d:e1:4d:62:b1:ee:a9:7d:81:
                    0e:da:61:79:31:ba:36:63:bc:33:01:2e:10:25:d0:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:F7:15:F8:DE:C7:A1:31:36:49:D7:9D:CB:5A:AB:B2:69:75:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20fef383-b20a-3fb7-a528-52783640401d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:19:78:7e:57:ae:04:61:be:3d:aa:fa:ba:f0:0d:a5:97:9b:
         da:f7:1e:cf:e3:f1:92:ce:5e:d8:3b:7e:ed:ef:da:5c:13:8b:
         b4:c4:df:b6:40:72:39:d3:91:65:6f:9b:55:8a:70:6b:fc:83:
         db:b7:9e:5d:c8:1e:b8:12:26:24:be:a9:24:76:89:2e:7e:e8:
         93:ac:b6:ae:30:95:e3:e9:51:45:8b:e5:7f:9e:c0:25:ea:7d:
         2e:a0:a0:d6:4a:b9:bb:f8:73:87:38:1c:87:b3:9c:73:d9:a4:
         9b:d9:1b:43:31:57:34:4a:72:6d:4a:11:37:20:d6:9b:54:08:
         05:93:32:d6:2d:37:d3:f5:01:05:b2:29:65:de:7b:04:be:3e:
         9b:15:ab:db:6c:82:f0:34:08:d8:89:ae:c4:99:b0:3d:f2:26:
         07:5c:82:4a:1f:fb:af:93:77:2f:e6:9c:d7:05:f9:97:eb:21:
         a8:16:3c:ca:45:0d:7d:41:a3:4d:ad:d0:7a:83:c6:aa:76:fa:
         67:74:6e:5f:b7:03:6a:07:c0:ce:06:09:81:28:c2:8c:ba:aa:
         69:44:99:83:f6:f4:b7:e6:ee:ac:33:80:c1:72:4d:81:d6:fc:
         65:52:98:d2:26:b9:cc:83:07:c6:06:5c:dd:58:3c:d6:cf:2f:
         b9:9a:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:26:55 2026 by rpki-client