Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf10e0-b4ef-360f-b244-22addc1c6a31.roa
File:                     36bf10e0-b4ef-360f-b244-22addc1c6a31.roa (raw, json)
Hash identifier:          NLWhQrr2FG1MAXXhIf1dpxnvBLOSCby/T2mjIzBwmk4=
Subject key identifier:   09:3F:E4:C6:0F:9F:A5:8B:8C:C3:F1:A7:A9:AC:88:C3:DC:B9:10:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B712552F2DE3F276A8B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf10e0-b4ef-360f-b244-22addc1c6a31.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.197.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:71:25:52:f2:de:3f:27:6a:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f8b55d91-534e-4aab-8f44-5f67710e6d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:51:2a:aa:63:aa:f6:09:1f:60:3e:76:44:
                    bb:ff:c4:9d:af:40:97:9a:61:3f:50:6b:cd:22:5b:
                    0a:49:09:f1:39:b7:27:dd:2e:6f:53:52:21:00:f6:
                    d7:c3:10:b7:0b:1c:07:6d:d5:af:4b:19:8a:b7:ef:
                    2a:dc:c2:21:06:c5:e1:17:55:17:72:1a:0c:df:0c:
                    c5:b2:f6:f4:ce:94:30:ad:04:28:a5:e5:7a:06:79:
                    8a:da:74:87:f5:a2:5e:bf:b6:0c:15:03:31:6e:4f:
                    5e:a5:76:31:cd:25:f5:53:7a:62:9e:da:9c:d7:29:
                    bd:11:a6:9a:85:13:7b:61:84:6f:79:34:e6:38:b2:
                    d9:73:54:63:df:73:3e:17:fb:54:1b:04:6d:ae:d1:
                    a3:21:6c:ea:f0:1a:e2:1a:01:89:9a:0e:9e:9f:61:
                    8a:b3:f6:7a:c5:74:f1:0b:72:6e:c0:d3:07:e2:6f:
                    36:43:33:ec:a8:bd:b5:55:e8:30:d0:e8:35:14:ae:
                    30:34:29:53:58:f7:4f:31:b4:62:24:20:54:8a:35:
                    ef:ce:eb:52:dd:f1:13:e3:c0:9d:29:c8:99:f5:35:
                    61:8b:be:4b:fd:93:48:47:ce:37:51:b5:01:d4:12:
                    9a:30:5d:ca:3a:54:9a:94:3b:76:72:51:d6:0a:2a:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:E4:C6:0F:9F:A5:8B:8C:C3:F1:A7:A9:AC:88:C3:DC:B9:10:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf10e0-b4ef-360f-b244-22addc1c6a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:b6:13:d8:eb:01:7c:1d:fe:9e:c7:7e:d4:2a:4f:46:ab:
         01:73:df:c0:db:f1:4a:6e:80:2f:5b:97:01:2a:c7:89:2e:c2:
         b2:8e:86:9d:09:0d:98:23:c9:76:f0:c4:86:45:d6:e4:91:13:
         e3:eb:ce:71:8b:6b:2a:f7:0f:4a:3c:9c:ff:c0:96:ea:ea:2a:
         b4:62:12:1a:25:16:80:87:28:cd:d5:d5:7e:cb:15:9d:a8:13:
         6d:0a:34:4c:4a:7a:ab:6e:bf:eb:22:69:e3:ac:75:de:cc:ba:
         7d:98:1c:6f:35:f5:6b:d5:65:d5:9a:65:a3:46:84:12:91:bb:
         bc:7e:24:c3:ad:6a:a2:7a:ac:4e:2b:b0:8d:a0:81:49:62:28:
         06:ca:bb:fd:a6:03:ca:ae:be:37:c0:5a:28:3f:8e:61:37:4c:
         d3:23:dd:58:ec:96:af:ae:c9:72:60:e2:5d:b8:3a:49:fe:eb:
         32:d1:c4:c4:0d:de:c8:23:01:08:ae:25:d2:1d:ba:5d:d7:0e:
         cf:b1:db:32:d8:dc:0f:43:ca:c0:f9:39:b3:ef:0e:68:66:1a:
         9e:a7:4f:f5:14:51:50:52:85:ae:a6:bb:cb:45:5d:e3:e8:1d:
         48:5b:4a:54:71:c6:76:41:d4:a4:c1:77:61:97:f7:a3:ab:02:
         fd:12:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:57:36 2026 by rpki-client