Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d600b95-fd5c-3270-bb04-84823b7d33c6.roa
File:                     7d600b95-fd5c-3270-bb04-84823b7d33c6.roa (raw, json)
Hash identifier:          x26XF4tnZgXuP+8MHq1slyIpQmWuwAPL7OPjKJT9i+g=
Subject key identifier:   71:D1:10:7D:2E:5E:43:0D:3C:1A:FE:7D:31:02:87:72:69:0E:84:A5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD00E80502174838673D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d600b95-fd5c-3270-bb04-84823b7d33c6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:00:e8:05:02:17:48:38:67:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b63a70d7-d84c-448a-b9d9-6bad4250302e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:35:97:8a:91:72:bb:dd:0a:8b:cb:fe:c0:
                    1f:71:7b:e4:b0:1b:4f:68:fe:6e:43:42:3f:d4:a7:
                    12:00:6f:7f:8c:0e:96:d8:1f:5e:8c:6f:b1:42:86:
                    c3:ed:16:ed:e5:41:37:a0:21:0b:6c:f9:3e:7e:55:
                    6e:90:0e:27:3f:e1:ab:2f:1a:9b:d5:cb:db:fd:c8:
                    0b:61:6e:26:90:55:65:f0:96:3c:f0:fd:a1:35:b6:
                    ac:c0:a2:29:ca:21:0f:fb:58:5e:31:e4:da:d5:d5:
                    f3:96:bd:42:aa:18:83:d6:c3:7a:ce:dc:7e:4f:de:
                    10:b9:2f:ac:9a:a5:a5:13:2c:e1:9f:74:dc:88:b3:
                    e6:a3:ad:15:7f:86:47:9a:6a:4f:de:77:a5:25:b6:
                    5b:e8:52:2c:d6:bd:ae:4f:5c:51:b4:94:cd:19:01:
                    6b:53:6c:cd:31:80:a5:0c:b8:3f:3e:3f:2c:94:0f:
                    d3:3c:8e:38:b6:c4:eb:c1:2b:50:bf:95:d8:fb:35:
                    1c:5f:74:28:bf:35:3c:27:63:b7:07:06:40:88:75:
                    e5:0f:d8:1b:3a:3a:7c:e0:54:89:50:df:2e:f3:0f:
                    c1:a9:1f:6c:72:c8:f7:50:8a:69:1b:9d:03:89:07:
                    12:f2:27:df:0f:99:1b:d5:fe:af:46:7a:6c:97:c8:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D1:10:7D:2E:5E:43:0D:3C:1A:FE:7D:31:02:87:72:69:0E:84:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d600b95-fd5c-3270-bb04-84823b7d33c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ff:39:b4:cc:98:fc:d4:86:4f:b2:00:9a:0d:6b:4c:f0:1a:
         ab:1d:36:31:6c:0f:41:c8:7d:c9:d8:86:02:7d:8f:15:72:be:
         d5:68:5b:5b:0b:ac:93:68:6a:cf:71:12:3b:b3:fc:81:f0:51:
         84:81:76:24:6f:7c:37:65:39:91:c4:0e:89:49:bf:0b:7a:f8:
         0c:f9:e8:e4:96:11:5e:5c:93:3b:84:2f:6e:61:41:e6:29:7c:
         82:a9:13:22:82:ed:24:e0:1a:e2:d1:cd:80:29:fb:1b:4b:17:
         80:dd:2a:58:59:d5:ab:34:93:38:8d:cf:4c:64:4e:e7:36:41:
         73:fe:64:4e:67:96:01:6e:2b:77:7a:f2:89:ba:73:1c:23:b6:
         ab:5c:17:0a:09:9e:5b:5b:50:bd:80:9a:0d:88:90:65:5f:61:
         f2:df:0d:2c:01:eb:c4:4d:62:b3:98:d5:d4:82:32:e0:20:0f:
         c5:c9:9a:af:df:1c:69:9d:74:53:2c:24:4c:cc:be:69:dc:46:
         06:ac:cb:06:12:e8:b0:a0:94:1e:55:02:e0:a3:b2:4e:45:aa:
         8b:d8:01:7c:5c:10:f6:9a:7d:81:9c:52:73:cf:ca:1c:5a:b6:
         96:c7:38:90:06:22:ab:95:00:e4:5b:16:7b:7d:01:d3:1d:e3:
         eb:25:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:52 2025 by rpki-client