Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d1dd0b3-011b-3bc1-8be1-039ec40810b6.roa
File:                     7d1dd0b3-011b-3bc1-8be1-039ec40810b6.roa (raw, json)
Hash identifier:          Kj300SoXiMjqDkZJICpTcGxOB9dEgwZ2F0Yq0iIk5wE=
Subject key identifier:   35:80:83:F0:F0:30:FD:8A:6C:0D:C6:A9:E1:03:35:1B:F6:E6:14:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD08A9BE598CD22363B640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d1dd0b3-011b-3bc1-8be1-039ec40810b6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:08:a9:be:59:8c:d2:23:63:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=43aa8003-ea5e-4733-bdb3-f116df48a79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:70:02:54:94:d2:0e:4b:ea:58:fc:06:8b:
                    34:ce:af:0a:11:dd:79:14:66:3e:f4:54:ad:7d:9e:
                    92:a7:c7:c3:38:62:5c:0e:cc:32:c1:6d:4a:63:cd:
                    2a:c5:0c:4d:e7:15:56:be:b1:86:35:a9:39:f1:27:
                    3f:35:15:26:4e:15:3b:fe:68:c0:44:3a:71:82:19:
                    30:19:dd:46:6d:ed:0a:32:fc:f7:2a:98:5a:78:b3:
                    63:64:d4:98:69:07:35:4b:a9:72:dd:3f:64:8f:4a:
                    eb:0e:0c:1d:80:c2:1c:ea:0b:3c:3e:57:3d:ce:c0:
                    7f:31:11:33:cf:80:e5:79:98:dc:80:58:c8:9f:93:
                    53:78:98:47:26:a7:ce:6c:94:8b:13:5a:64:98:aa:
                    ee:72:77:8e:87:71:69:c8:61:fe:19:a7:3e:f3:27:
                    79:bb:94:ee:f3:b2:a0:75:f1:8c:51:fe:25:bd:a7:
                    c6:92:41:07:4f:8d:4e:e4:6b:96:6b:15:79:54:16:
                    64:eb:aa:ef:19:19:25:ef:33:75:82:7e:e1:e0:e5:
                    a3:0b:5c:ae:d3:89:f9:81:9d:32:64:a3:37:04:e8:
                    77:03:a7:33:b6:b6:31:07:6a:dd:a0:f8:fc:c1:6e:
                    96:e1:4a:3b:89:b0:84:e3:13:9c:5a:4a:61:06:2c:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:83:F0:F0:30:FD:8A:6C:0D:C6:A9:E1:03:35:1B:F6:E6:14:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d1dd0b3-011b-3bc1-8be1-039ec40810b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:43:40:a7:70:c2:fa:75:2a:54:77:0b:38:00:0e:e2:45:4b:
         2a:fc:8e:2d:32:fc:87:07:0b:91:8b:1b:77:7a:03:b9:16:27:
         b9:f7:b3:b2:5d:6b:52:e7:2e:a6:11:11:aa:ba:a8:4c:0a:10:
         90:d7:cd:0c:08:87:5a:64:af:f4:3c:93:9c:e7:c1:dd:db:df:
         6e:06:62:65:a8:a0:10:cf:e0:b3:a5:7d:a1:e9:d4:04:cb:4d:
         0a:ec:0b:88:74:13:a9:60:f0:5c:c2:c9:7d:5d:a0:07:1f:99:
         d9:93:ec:11:18:26:3d:b5:ca:d2:69:dd:c0:ca:c5:7a:94:84:
         b0:34:b2:64:b0:c1:8d:5b:ad:ef:aa:d6:81:34:af:a8:11:e8:
         70:3e:15:a6:f9:e8:11:1c:29:cf:1f:b6:be:22:0a:9c:d8:d9:
         14:8f:cc:53:f9:38:8c:a1:17:ad:34:56:41:ae:fd:32:22:30:
         09:67:97:75:68:ad:d7:57:f2:5a:85:4c:a3:70:15:4f:a9:63:
         89:a2:8c:d9:b9:12:37:9e:88:70:ed:2d:2f:cc:5e:d2:62:44:
         95:7d:bd:48:cc:bc:9e:33:74:c6:1b:dc:9c:6d:8a:19:11:4a:
         3a:4d:8e:cd:ec:60:6c:d2:9f:2f:26:c4:00:5c:1a:e2:0e:03:
         ba:dc:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:53 2025 by rpki-client