Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85faa79d-c79b-3f86-8b4c-22b2d02d74d4.roa
File:                     85faa79d-c79b-3f86-8b4c-22b2d02d74d4.roa (raw, json)
Hash identifier:          BkG2Xm7oXBl5mjQznS5zZav8+TrvW4/baPt1o8PxHhw=
Subject key identifier:   F1:58:DF:87:82:97:26:84:7B:DF:AC:0D:71:44:BB:D8:63:CA:AF:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD018D63D2DBC94DB3D000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85faa79d-c79b-3f86-8b4c-22b2d02d74d4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:01:8d:63:d2:db:c9:4d:b3:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=884d95bd-8f37-4ce6-82bb-af32ad3095e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:b9:94:f1:e4:66:d7:81:4e:b1:29:99:07:
                    be:c2:64:19:22:04:fa:2c:de:e1:e3:ef:fe:f4:2e:
                    6c:9f:44:32:a1:e6:6d:cb:5f:b2:bc:1e:81:dc:9a:
                    36:1e:93:69:a0:11:6b:82:f4:e4:6a:9e:90:db:9a:
                    88:b6:d9:f5:6d:cb:96:18:88:34:86:ca:a0:03:8b:
                    81:b9:7e:4c:ea:94:8b:5e:55:31:fd:97:a1:b6:82:
                    37:03:ad:ec:1f:c1:e6:e4:f7:95:09:62:7f:c4:cd:
                    50:c5:c2:dc:fd:05:78:7a:17:02:cb:3c:8e:2b:d6:
                    3e:34:3e:0a:1a:6c:44:15:fc:5e:19:bd:df:43:4f:
                    93:ad:f2:a8:f8:04:ca:6b:54:6a:e4:79:d4:6f:32:
                    ef:cf:a6:4a:a5:03:64:2f:71:e5:09:19:0b:60:47:
                    62:c3:43:a5:01:24:3e:05:03:2a:73:7f:40:73:65:
                    75:5d:98:d7:89:31:47:87:73:17:a2:e8:ba:23:1f:
                    e0:17:2f:af:29:23:1e:9f:00:c1:24:14:20:f0:2c:
                    ae:46:c3:43:48:2e:0c:06:54:74:8b:1e:d5:d6:ed:
                    a2:e5:45:5e:ae:64:dd:6b:bf:cd:a3:6c:03:f0:49:
                    e7:5c:6b:db:29:ca:56:48:d2:af:bb:59:d0:f0:5a:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:DF:87:82:97:26:84:7B:DF:AC:0D:71:44:BB:D8:63:CA:AF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85faa79d-c79b-3f86-8b4c-22b2d02d74d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:f8:14:e5:a4:50:da:54:f8:1a:7b:c1:be:96:ea:54:96:
         e3:38:af:9c:7c:d9:18:ba:68:1d:f3:9d:31:49:0c:ef:41:47:
         ea:c7:08:7b:eb:65:6c:09:c0:19:0d:75:23:80:66:d1:ad:fa:
         dd:52:e8:f2:8f:32:fd:e3:0e:3c:32:c4:85:cd:b0:0d:25:43:
         88:d0:61:d5:9a:51:50:9a:bb:cd:a6:28:5e:10:2d:e3:5c:c4:
         38:5c:9e:98:af:bb:1f:db:6c:52:7d:e6:aa:1c:27:92:11:8e:
         50:ad:f6:ad:60:f6:d8:08:35:c5:28:e4:45:85:13:5a:2c:1e:
         b6:8d:46:94:e3:06:43:80:6d:38:93:81:d3:5b:96:e9:fb:43:
         cf:d1:a6:d1:f3:0e:9c:a4:6d:32:1d:f9:b4:4b:9d:ab:b6:5d:
         05:cf:37:e2:cb:fe:3a:2b:df:99:27:99:6c:5b:02:e0:66:98:
         d1:cf:f0:6b:e6:93:de:09:4f:66:7c:05:77:05:a0:c5:0e:8a:
         be:94:96:b3:fe:ed:26:86:6d:24:eb:9f:31:e7:8d:c8:2b:7a:
         6b:17:34:3f:8f:6d:f9:04:ce:82:73:45:db:48:97:f3:a3:0d:
         7b:06:fb:d8:e9:dc:99:10:fa:1f:e2:27:2e:4a:17:8b:d2:f0:
         f2:6a:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:21 2025 by rpki-client