Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760aaa89-b59e-3b51-8ea7-de0ea665854b.roa
File:                     760aaa89-b59e-3b51-8ea7-de0ea665854b.roa (raw, json)
Hash identifier:          8U/hxt/mIu1pZEUolnoGwfmpH6lKKYjkMVx/ibJxveE=
Subject key identifier:   E7:F5:D0:86:07:9E:18:1D:47:1D:8F:17:B2:B9:6E:A2:10:AE:1F:9A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDBADC9E511F12676DBCA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760aaa89-b59e-3b51-8ea7-de0ea665854b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:ba:dc:9e:51:1f:12:67:6d:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=86ada1e1-03ce-4c56-ba34-570d5dcdc214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:80:4d:8d:ab:3e:a6:60:86:8f:f8:83:b8:
                    b6:28:03:75:c4:47:18:1d:69:b9:5e:e2:6d:4c:1e:
                    96:82:4f:4e:e5:c0:be:66:a2:7d:a6:65:72:57:64:
                    cd:b0:c9:b4:ce:7a:61:05:5d:ad:58:ab:5f:de:4c:
                    56:6d:34:38:5d:8c:a7:52:9e:00:2a:7d:94:e1:08:
                    c1:35:d5:b9:cd:6c:47:ce:7f:4b:07:fe:bd:1d:f8:
                    c6:ca:79:df:c4:53:e7:81:fd:a0:95:72:e3:71:d6:
                    24:2a:68:fe:e6:dc:1b:27:bd:f9:35:1a:a8:f0:4f:
                    7c:c9:bd:ec:11:da:92:76:0b:f9:91:a9:6c:ce:d5:
                    3b:42:40:6b:7f:06:cb:40:43:2e:06:c0:b9:ae:bf:
                    ba:fe:01:0a:d9:0e:b1:96:b8:3e:0f:08:30:d0:71:
                    45:54:43:b1:7f:2d:39:63:46:e3:e1:31:e1:1a:ae:
                    da:be:c2:db:e3:2b:4b:b7:56:79:88:b9:a9:3b:28:
                    0d:7c:2c:37:1d:c2:6e:f7:27:e1:ff:d5:d0:7f:8c:
                    8f:f5:f2:3b:09:7c:c6:f5:da:61:0b:96:90:05:f7:
                    e6:cf:7b:2d:1d:5f:c9:42:42:43:2d:4d:09:49:ea:
                    72:e1:3b:f4:f0:77:f8:b6:a1:46:94:f6:1e:ae:77:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:D0:86:07:9E:18:1D:47:1D:8F:17:B2:B9:6E:A2:10:AE:1F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760aaa89-b59e-3b51-8ea7-de0ea665854b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:08:f1:8b:45:2a:cb:a0:16:0c:e3:2a:97:1a:94:6b:a5:49:
         90:fe:ac:7f:d1:68:28:e9:fa:8d:1b:d3:9b:31:5b:69:2d:b6:
         d5:65:22:c6:c1:b6:8c:1c:d7:f6:ef:45:1a:d3:05:fb:a0:91:
         8f:27:eb:1b:5d:d8:cc:15:7a:59:fc:6e:bd:b3:2d:4f:2e:cb:
         a0:2e:36:d5:41:e1:81:10:59:7d:ee:47:f3:dc:08:be:02:5e:
         0d:56:9c:05:b6:61:7f:60:c5:c5:e0:bc:fc:24:10:a5:9f:8b:
         80:42:d8:0d:34:40:d1:3d:96:b1:c0:54:41:77:10:8e:f5:a3:
         6b:62:87:46:6d:f5:40:4d:29:8f:e8:6b:73:c0:94:60:c1:0b:
         01:06:07:d0:27:b9:27:32:71:36:ed:c1:40:70:41:6a:c3:cc:
         1f:23:33:39:25:b5:60:50:9b:ae:e9:06:48:f5:e9:9c:d9:35:
         d9:dd:77:53:b8:2f:f7:b5:b3:a8:f5:00:ef:27:1f:a8:51:8a:
         6b:0f:2f:29:e9:c5:2b:0b:5a:67:2e:03:1d:8b:3f:8c:7a:af:
         1a:2d:53:b8:7a:ed:de:cd:44:8a:29:08:52:24:15:cb:a1:2d:
         32:fa:f1:49:3f:c5:3c:0f:4c:62:07:a0:e8:41:be:8a:4a:e5:
         24:1f:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:22:09 2025 by rpki-client