Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c0470fc-bda8-33df-b0a8-d47201f503dd.roa
File:                     2c0470fc-bda8-33df-b0a8-d47201f503dd.roa (raw, json)
Hash identifier:          iuIhFDJ/CmghKmBhebdg31v7DkQV/hTN+MGalb9Tsxs=
Subject key identifier:   5D:9C:AD:CB:FD:67:8F:63:28:44:6C:74:A7:7D:AD:8C:44:0A:64:80
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDCA339F88B3AC87E7CE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c0470fc-bda8-33df-b0a8-d47201f503dd.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.198.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:ca:33:9f:88:b3:ac:87:e7:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=cd2f6b83-6b00-4608-97ab-d9405d1daf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:cf:9f:cb:07:36:22:0b:6c:ac:9e:19:97:
                    5e:d1:da:d8:c9:95:8b:21:7d:b2:41:7a:99:c2:e1:
                    50:95:f2:98:ae:bf:e2:6f:4f:00:33:78:0a:2d:10:
                    37:e0:67:d2:07:20:ce:59:51:85:a2:e3:77:24:34:
                    d6:5b:10:bf:bb:eb:2d:98:2a:63:6e:08:ea:20:88:
                    7d:e6:da:79:55:7a:69:82:a0:11:0d:19:96:38:e7:
                    37:4d:f3:d7:ab:09:e8:03:30:1f:35:c6:e8:60:72:
                    bf:ea:c8:b6:07:47:70:70:00:d7:0d:2e:66:8f:9d:
                    cd:aa:63:a4:bf:3d:99:07:d3:73:01:0c:26:21:39:
                    34:9e:9a:d5:1f:19:9d:89:83:9b:87:d6:b2:49:a3:
                    98:e6:f6:c9:87:c3:ae:a4:89:db:cf:c1:05:51:a9:
                    46:4d:16:49:7a:07:f0:f1:ec:06:b6:1e:24:bf:0d:
                    96:e2:51:b1:bc:ca:d9:b2:e9:d4:08:6f:d4:f0:46:
                    4d:53:1a:f8:cd:b6:52:fc:76:9c:22:de:2c:82:ea:
                    9a:5c:f3:50:80:3a:c1:2a:ec:76:23:8f:31:b1:f8:
                    ae:5a:51:be:d4:fb:fd:c0:aa:c9:24:98:e1:1a:4c:
                    2f:3e:52:c1:e4:3e:2e:95:78:a4:61:d0:f4:69:5c:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9C:AD:CB:FD:67:8F:63:28:44:6C:74:A7:7D:AD:8C:44:0A:64:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c0470fc-bda8-33df-b0a8-d47201f503dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:14:2e:1e:7e:23:88:a9:be:3f:7c:d9:16:ef:70:49:da:5b:
         aa:7d:c1:5d:74:48:85:d7:65:80:5d:85:41:2e:ba:b8:9d:40:
         6d:44:e5:31:56:2c:e0:e4:e6:84:30:45:23:4a:fa:98:3c:20:
         16:77:56:12:44:d2:e2:3a:4f:33:d9:77:27:1d:fb:37:ab:5a:
         a4:b4:00:4b:b7:fa:70:bf:07:75:08:d9:05:eb:8e:11:3d:ac:
         f5:28:42:16:3d:12:ec:04:13:f0:f7:7d:83:b6:60:70:5e:47:
         44:86:1a:46:f9:b3:36:01:d0:40:7c:33:c6:57:55:d0:3e:d5:
         80:b1:12:00:45:0d:5c:e1:2f:47:06:42:ca:3b:81:12:59:43:
         2c:34:d0:f4:d9:70:f2:ae:ae:56:e3:d6:fe:55:8c:79:ca:28:
         68:cc:73:81:e8:48:8b:a9:73:33:59:23:0f:99:78:c3:51:38:
         ec:e9:8b:bd:3a:6e:c1:91:2a:43:6e:80:62:a9:82:db:46:19:
         08:33:f3:17:e1:5a:b5:f9:b3:84:85:7f:c1:c2:1b:25:d8:35:
         ac:7c:c7:c4:61:37:eb:39:e4:9f:fd:85:11:29:e8:fd:b2:dd:
         64:cd:0a:ff:fb:67:2b:6e:ba:bd:57:52:fa:87:2a:04:18:50:
         28:03:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:24 2025 by rpki-client