Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa
File:                     2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa (raw, json)
Hash identifier:          r25TedcTo+w2fPby15Y5w9HpF1myw9E/BEBT16n3tSw=
Subject key identifier:   4F:57:99:17:86:D9:B4:9B:40:F9:9F:EA:DC:5D:40:AF:48:EA:DD:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC61286E6171C81AAD880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c6:12:86:e6:17:1c:81:aa:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ba96312b-939f-4642-97fb-ff29027c2997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:b4:41:e8:09:a6:d9:ec:d1:35:a8:13:9b:
                    3a:39:b1:b5:41:0f:f7:81:3f:6e:47:9b:10:f1:5e:
                    a2:14:98:7e:79:19:a6:d5:1e:23:97:44:05:a3:3a:
                    9c:70:a8:95:3a:32:a7:ac:ed:b5:1e:5e:97:cf:19:
                    af:4f:55:11:c8:39:fe:e8:be:27:62:70:33:79:b3:
                    93:ad:57:5c:06:55:50:f9:c5:d1:db:9e:09:c6:4c:
                    29:b2:38:47:11:5f:f5:12:ec:47:2c:ed:a0:a6:6d:
                    db:f4:f3:59:15:8e:9d:1d:7f:bf:80:12:d3:95:12:
                    c9:bb:62:44:21:fd:b1:01:f0:a4:e4:d7:a9:ed:e4:
                    3e:a2:07:d9:a1:f7:ba:93:06:40:48:23:09:c0:35:
                    d0:9d:e6:3e:78:f2:31:f5:b9:2c:70:a0:06:30:9d:
                    d0:2a:c6:dc:11:5f:4d:d6:04:64:af:96:b3:74:f9:
                    ed:8e:32:78:25:fe:35:e1:b7:90:17:47:2e:12:78:
                    b6:30:93:b2:64:71:5e:2e:b7:14:2f:07:fa:e5:2a:
                    31:09:66:90:4a:fc:2b:d4:77:8c:0c:d1:41:1b:e1:
                    a2:27:38:a7:f8:7e:ba:0d:77:10:bf:64:e2:d9:35:
                    74:27:77:76:e8:ef:a4:9a:54:06:fd:4a:29:e7:3e:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:57:99:17:86:D9:B4:9B:40:F9:9F:EA:DC:5D:40:AF:48:EA:DD:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:60:7f:56:37:a7:83:11:80:43:de:71:ee:81:10:6c:d0:
         b2:9d:7f:52:45:1d:68:5c:0c:08:71:6c:30:b6:6b:e6:14:7f:
         9d:1e:f0:c7:67:c3:ce:88:56:26:bf:25:eb:cb:56:2b:db:6c:
         64:7c:53:18:ee:9f:df:c7:3e:09:e7:b7:71:04:d7:5d:e6:7a:
         fc:c0:10:cd:34:18:b4:cf:15:09:d2:2a:7d:84:2e:9c:99:86:
         61:e6:42:1c:4a:a2:17:ba:89:7a:37:4d:73:3d:b8:0e:10:49:
         39:01:c8:c0:54:e4:a1:ad:3e:ba:82:6e:fd:ca:04:1d:25:f5:
         1e:66:65:c1:e8:d2:1d:0b:e2:77:48:e0:49:1e:d3:0c:61:24:
         23:fe:c7:b5:dc:7c:4b:0b:b7:d6:df:86:af:79:27:cc:c7:74:
         ca:60:99:37:3f:b5:10:c8:ef:31:bb:8c:4d:af:00:78:2d:91:
         90:ae:01:f5:29:3e:30:c3:fd:9a:ef:74:6b:3a:26:5d:32:2f:
         d7:00:58:2f:c2:f3:77:11:6d:ce:fe:c0:a7:36:4b:cd:0b:19:
         6e:db:b7:f9:f5:f1:87:8b:bb:de:63:a1:fb:ee:05:33:54:88:
         60:24:79:b1:61:39:c8:22:0b:b9:f6:63:82:ed:13:d2:b8:5b:
         62:2b:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:47 2025 by rpki-client