Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa
File:                     24538dcc-b074-32f8-b726-fa4dcd42f595.roa (raw, json)
Hash identifier:          URhum52UhcJRc27oCncd5+Qto1qr9n4sLwYmnT8omOI=
Subject key identifier:   37:40:8A:3E:B1:65:4C:CD:0E:C5:CF:C9:95:5C:48:C6:4A:8D:0F:FD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC99213F00E827B64D000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.198.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c9:92:13:f0:0e:82:7b:64:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ce32347e-c01a-487e-9be1-b42774eb9a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:3a:0f:86:ef:aa:55:c0:96:af:2c:0b:9d:
                    82:0b:06:f2:83:2b:e7:97:f2:dd:1b:c2:91:e6:74:
                    2d:99:23:fb:14:d3:b5:80:7b:2a:9b:21:5d:01:17:
                    91:26:2c:a8:57:aa:20:e2:50:8c:2f:6d:fe:ae:e3:
                    b4:4e:12:c1:07:af:46:9a:aa:79:72:b6:d6:e4:d0:
                    d1:1e:b5:20:2f:29:ae:ee:38:36:1b:8a:1c:40:a5:
                    f4:1e:22:43:f5:f1:5e:e2:3e:a2:d1:e9:c3:39:0f:
                    85:ee:a0:2e:c3:17:2f:07:ac:26:b4:09:5a:97:a7:
                    c5:5a:af:07:e3:ac:8d:f3:5e:cd:58:b0:06:47:e9:
                    b7:7c:b4:70:30:00:72:dc:5c:08:d2:71:e7:64:8f:
                    b5:29:1c:dc:4e:34:8b:43:7f:93:da:8f:4d:b8:a4:
                    2a:ee:2c:3a:cd:ae:b0:38:51:e8:00:c2:5c:7c:e9:
                    dc:9c:ce:81:78:07:9e:e3:5a:dd:75:d7:2c:b8:43:
                    d8:29:9e:df:c4:a4:2c:c6:76:4a:23:fa:4e:25:d4:
                    1e:bb:bd:08:2a:fa:03:06:00:01:84:c5:5f:f8:83:
                    37:a3:83:bc:af:f7:79:52:fd:12:0c:15:4d:22:e9:
                    8a:2d:1a:69:9d:34:ce:89:e2:1e:5c:b3:c4:9d:91:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:8A:3E:B1:65:4C:CD:0E:C5:CF:C9:95:5C:48:C6:4A:8D:0F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:52:a2:04:e7:50:ce:3a:c8:9d:ca:ce:2c:2c:16:2e:b6:
         68:5e:26:c9:29:2e:28:59:ac:41:97:0d:c9:1a:38:9a:ff:89:
         1a:20:cf:df:95:18:ea:55:fa:7b:d4:49:70:a5:11:e1:1b:dd:
         4d:65:0f:f8:db:94:69:4f:db:84:35:86:24:80:d8:ef:11:11:
         b5:9a:53:fb:b0:74:df:60:90:bc:d9:98:68:2f:ed:62:3d:96:
         ef:0a:56:79:89:3e:d7:63:9d:cd:3e:18:0b:d6:1c:48:a7:da:
         81:aa:fd:17:bd:45:af:fb:cd:c3:0f:33:1d:6f:0e:39:49:2d:
         b5:10:2e:dc:63:dc:3a:e6:41:2a:cf:9c:34:4f:e1:90:61:5a:
         a7:99:0c:35:cf:71:50:d3:80:6e:88:2d:b3:2a:bf:99:9b:5d:
         e5:d1:81:c8:89:30:64:54:3a:7b:c3:eb:84:e4:6a:d1:4d:6e:
         f4:08:0a:29:f6:9c:f6:d0:75:02:89:2e:ba:00:d0:bb:1c:47:
         3f:df:7c:98:56:21:9d:d8:00:61:e4:5a:26:cd:66:b4:2e:26:
         a7:70:a4:ba:3c:5c:aa:ef:59:39:1b:38:40:04:53:83:8c:12:
         80:d4:9c:15:ca:d9:85:73:d2:c8:b4:0d:55:81:df:49:7f:9b:
         e3:60:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:08 2025 by rpki-client