Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fef971a-a65a-3039-93a7-22a9c9bdca59.roa
File:                     2fef971a-a65a-3039-93a7-22a9c9bdca59.roa (raw, json)
Hash identifier:          CB/4jQ+r2ukXE2NaMAWiAaYi/CUdRM3Fgp8LWCCXPqc=
Subject key identifier:   10:FC:D4:12:EB:05:09:C7:B4:5D:75:05:64:6C:D0:FB:44:79:81:C5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFE3628F74479937422F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fef971a-a65a-3039-93a7-22a9c9bdca59.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.196.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:e3:62:8f:74:47:99:37:42:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b588794b-554d-4f94-95b1-36a7f87af9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:40:f0:e3:e6:6c:fd:e3:ac:ac:c4:f0:67:
                    24:ef:4e:e9:2c:be:0b:3d:5a:21:c7:30:86:6d:94:
                    ef:e5:58:9f:3f:9d:8a:69:7c:a2:5f:92:1d:17:d9:
                    8c:37:81:2f:6b:3b:fc:41:cb:83:8d:4f:bd:bc:9e:
                    f5:cd:df:80:5d:52:bf:14:3c:73:df:2c:b9:b6:74:
                    d5:a7:17:b6:b5:42:d8:97:09:7e:69:8a:80:8e:4c:
                    83:4f:ca:f7:de:d2:c2:ee:f5:fd:48:4b:ee:90:b1:
                    dd:9b:47:fe:ff:7d:6e:ee:7e:3b:52:23:16:42:4d:
                    6e:15:1d:24:03:7c:2f:4e:bd:c6:fb:ee:51:1c:dd:
                    ac:2d:21:23:43:c7:7b:c1:f8:52:b4:78:82:a3:f8:
                    f4:39:11:e9:5a:ea:ef:14:a7:83:97:64:09:5a:82:
                    19:51:97:9d:a2:0c:86:3f:c3:fb:c2:cb:df:61:ac:
                    d6:ea:a3:a1:d1:b9:e0:b7:88:56:f6:51:50:74:8f:
                    1f:24:1f:e9:f0:b4:f7:7d:d0:9e:54:4a:dd:6b:25:
                    c4:12:fb:8e:0a:67:7e:40:c2:1c:29:d0:b8:10:a5:
                    2d:df:86:51:e3:78:2a:d0:6d:7a:0d:90:63:ea:8d:
                    ac:f7:90:8d:d7:a7:a6:7a:6a:ae:91:48:4f:f2:89:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FC:D4:12:EB:05:09:C7:B4:5D:75:05:64:6C:D0:FB:44:79:81:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fef971a-a65a-3039-93a7-22a9c9bdca59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:ae:8b:d7:bc:25:57:f5:ba:07:b5:05:76:ac:2a:27:21:
         f4:ad:b4:3f:19:6f:39:b6:53:3e:3c:b5:02:b9:8b:87:e4:5d:
         dc:cb:92:06:bc:e9:e4:fe:f1:fb:5a:e2:d2:6a:3b:af:bc:84:
         44:90:77:80:4d:ab:be:7c:87:8e:0b:0a:85:f1:9f:06:20:19:
         73:c3:c4:c1:99:83:b4:7c:7f:42:3b:bd:6d:9b:4f:fe:ea:20:
         db:c8:47:20:42:c2:b0:4d:80:65:ea:0e:37:cb:b6:7d:5c:fa:
         61:a6:d1:2d:02:57:5f:5e:ae:43:9d:cd:49:aa:b3:db:1a:4e:
         e9:cc:2c:98:83:a8:84:a6:ee:78:f9:31:b5:b0:cf:c5:30:7e:
         ee:0d:8a:fb:c4:1d:af:4a:41:31:a9:24:d7:dd:b6:29:c7:6a:
         f9:5e:42:4e:9b:1e:0c:76:c4:da:8d:47:d1:96:13:14:89:c1:
         fe:2f:4e:f5:60:69:56:d5:a0:e0:13:38:c2:ad:8f:ef:0d:2b:
         1d:42:16:71:2b:1c:5f:b3:a0:84:1f:ed:9f:3b:1d:0c:39:37:
         0b:7b:6a:72:50:a1:4f:40:07:d8:0a:59:19:ec:36:88:d1:9b:
         a5:13:79:90:eb:a9:0b:4e:7e:3e:1e:e8:62:12:b6:5f:28:24:
         8f:56:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:45 2026 by rpki-client