Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2991af10-861f-3a38-8974-9b0cca545c15.roa
File:                     2991af10-861f-3a38-8974-9b0cca545c15.roa (raw, json)
Hash identifier:          bJPfUR9MhfXRWwYz0xouM0T7NRAC5xmIpMsm4t92xpM=
Subject key identifier:   90:1B:2A:6E:80:CD:60:ED:24:08:62:AE:E0:8D:F0:50:A2:D7:02:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC1B542465DBD9524EB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2991af10-861f-3a38-8974-9b0cca545c15.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c1:b5:42:46:5d:bd:95:24:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6b89e210-9e67-4f76-a076-b3e6768253ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:26:6e:8d:e0:73:ed:35:8d:a6:86:94:7d:
                    26:4d:df:66:fe:a5:13:a1:95:75:ac:19:6a:16:fd:
                    a5:c1:90:42:a2:fa:72:db:9b:85:e3:5c:a2:aa:05:
                    e2:79:cd:3b:0e:a7:c8:16:d2:7f:de:fd:51:53:19:
                    9e:90:d7:1d:6c:fa:69:d0:b3:25:bd:79:78:d0:97:
                    08:b8:d3:b1:22:21:ef:40:d5:b1:c6:5e:51:e0:d3:
                    97:c6:3e:fb:d9:bf:63:91:d8:b2:f8:6a:21:fc:9b:
                    dc:58:08:45:6d:97:74:99:69:c1:22:8a:30:d4:25:
                    cb:8a:77:08:42:b3:d4:a3:39:78:35:66:62:ab:2a:
                    a0:a9:1e:8c:2f:b2:26:0a:49:5b:8f:03:a4:95:e5:
                    ae:16:6c:42:fd:b3:e1:6b:13:21:79:cc:f8:bd:e2:
                    90:2c:69:48:e4:35:14:63:df:0b:21:02:16:7a:8e:
                    4f:3b:3e:53:f3:c1:d3:db:c8:9d:4a:b0:de:09:bf:
                    9a:ed:3b:97:02:56:bf:7d:e5:b1:76:0b:32:cc:b3:
                    76:cb:27:51:47:4e:8f:fd:00:63:09:0a:95:79:f9:
                    bf:e1:0c:c3:27:64:b3:f0:c4:0d:d5:e1:d4:c7:c2:
                    74:44:81:aa:f1:c6:1e:4f:e7:be:82:d2:9d:b1:62:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1B:2A:6E:80:CD:60:ED:24:08:62:AE:E0:8D:F0:50:A2:D7:02:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2991af10-861f-3a38-8974-9b0cca545c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:65:e0:3d:dc:03:08:bb:bd:96:df:07:9a:f1:bf:42:8d:
         f1:6d:25:f5:7a:fa:41:3b:11:56:51:89:f3:af:be:a7:16:42:
         54:34:84:67:ce:7c:ca:bf:87:fb:40:42:16:14:b7:2c:ab:8a:
         38:e3:95:b6:4b:14:29:e1:f4:c9:8e:2f:d4:dd:23:f1:71:d2:
         00:31:6e:2c:51:a5:7c:68:39:8b:ba:0a:fd:f9:f4:43:4e:cb:
         8f:89:09:6f:06:92:92:1a:5e:e0:52:b2:a2:cd:71:fe:54:8d:
         cf:c2:6f:ce:e6:6b:31:a3:bd:71:51:48:61:9e:39:a7:44:72:
         8d:bd:0a:03:c6:be:af:84:36:49:81:4a:56:00:28:cf:ec:f2:
         d2:c9:65:08:5c:93:c3:92:ed:cd:5f:50:7f:83:e1:94:35:ac:
         48:8d:5b:cf:e0:35:e1:01:a5:39:61:de:81:ca:fd:9f:38:c6:
         80:2c:a0:d2:55:cc:df:8f:8d:d3:2c:12:6f:e5:57:30:6e:5d:
         2a:67:94:5d:f2:7e:95:c5:e2:cd:76:c2:d4:25:35:d1:0d:6a:
         63:92:65:94:c1:e0:fc:01:78:94:90:ce:28:75:61:8d:33:74:
         6a:b3:68:fd:de:32:d2:65:a8:01:d3:ed:bf:d5:82:54:56:4c:
         52:e6:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:46 2025 by rpki-client