Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa
File:                     8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa (raw, json)
Hash identifier:          BMbcjMKme3tuRn9cvm/e7v+JFWlgN3d7N+03CUGviSY=
Subject key identifier:   AC:07:72:41:1D:38:CC:17:6D:15:9C:EC:6C:25:69:72:5B:F6:33:B5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B7356E8015F1F637C5DC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.197.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:73:56:e8:01:5f:1f:63:7c:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=26283fdb-3b42-46a6-9e79-1d7c7b8e3daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:a6:2f:a2:8a:82:34:8a:38:00:e1:e6:f2:
                    b4:ec:b1:7f:ea:b8:89:01:a3:f8:9b:dc:97:18:40:
                    c1:6d:75:fe:cd:97:d7:8f:30:98:2f:6c:fc:11:b6:
                    70:29:c5:c8:d0:0a:e9:f5:ba:d5:72:f3:01:e7:93:
                    eb:82:ce:82:11:5b:ec:1b:82:39:78:3d:ec:af:40:
                    a6:e4:06:fa:f7:d4:07:5f:fa:03:ef:a6:02:a5:94:
                    97:c6:0b:79:e5:f9:42:25:7e:8b:d5:df:1d:de:6b:
                    3d:c1:67:1d:e7:e6:d3:db:99:17:a3:4a:f8:ce:0f:
                    62:02:2a:81:fd:f2:9d:ff:00:90:71:b9:c5:0f:21:
                    53:df:77:b6:4a:e4:c3:16:3f:28:29:9f:b2:3f:fa:
                    61:31:ec:43:9b:09:6d:fe:60:8b:28:49:f3:e3:3b:
                    ae:91:90:69:af:f7:98:4e:70:90:5e:e0:78:63:94:
                    64:6c:eb:57:c9:8e:58:b6:c8:7d:63:2c:47:08:dd:
                    f4:ba:b3:b3:8f:41:d0:c6:34:87:76:fe:52:4d:aa:
                    3d:85:2d:3e:03:2d:a1:5f:7d:04:cd:25:f3:d7:f1:
                    30:1a:1f:25:c2:4e:9d:60:f2:2c:5f:42:ec:4b:fd:
                    23:96:00:71:9f:8f:eb:c2:c5:2e:11:9e:01:a2:c2:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:07:72:41:1D:38:CC:17:6D:15:9C:EC:6C:25:69:72:5B:F6:33:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8493cee9-95f5-3be6-b8b0-dc19fb9fa25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:40:10:0a:dd:19:8c:42:b0:1e:34:ec:fe:c4:62:03:95:
         a4:75:e7:d8:07:f6:54:89:0b:83:28:2e:ae:08:2a:5d:20:bc:
         36:28:59:06:85:e5:39:6d:e2:6a:d2:74:eb:06:ed:72:dc:13:
         03:e7:a1:f6:e4:20:ac:2c:00:99:eb:e4:15:3c:54:85:7f:9f:
         20:ca:0b:d1:53:69:1a:99:1c:35:1a:be:28:26:8a:e3:57:9e:
         84:3b:48:47:75:f2:05:c4:46:31:61:3c:d6:6b:f8:82:80:6c:
         57:45:7e:b4:ed:d7:98:c4:a7:c9:ff:bb:d8:ed:f2:e0:a7:c8:
         67:6c:a1:9e:e2:d1:72:12:da:ca:f4:bd:57:b5:5e:be:91:bb:
         fd:45:93:1e:e9:6b:9f:ba:96:d9:65:c5:a4:2a:ff:bd:13:d4:
         7c:a7:8a:ef:06:d3:f2:0a:7c:a0:26:08:75:02:e8:4c:95:be:
         2f:22:a2:85:fe:8a:48:40:98:94:71:ad:95:57:1c:17:c7:63:
         e5:c1:47:62:a4:cb:4e:a9:c4:33:5d:af:73:9e:93:b7:4a:3e:
         56:55:3d:77:71:81:db:41:28:a0:31:18:9c:4b:a5:5e:fc:dd:
         ee:f2:eb:70:3e:56:15:a8:c1:4d:10:1a:f5:06:8e:ca:f2:bc:
         86:7d:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:40:03 2026 by rpki-client