Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86103eea-ebf9-32a5-9252-b336f4cf6945.roa
File:                     86103eea-ebf9-32a5-9252-b336f4cf6945.roa (raw, json)
Hash identifier:          zGjUAWfqAuOQtbmpKE6FBC9dOClZsi8z84u/UvE5zzA=
Subject key identifier:   C4:06:8D:50:0A:34:5E:C9:F7:CD:B0:63:03:EB:5C:13:04:B3:CD:20
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB93764FEE20362AE83E4
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86103eea-ebf9-32a5-9252-b336f4cf6945.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b9:37:64:fe:e2:03:62:ae:83:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7c56348f-dac2-4d2f-a1d6-270531c82536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:00:b6:b9:9c:56:e3:48:d4:40:3f:c3:be:
                    ec:81:e8:eb:30:da:19:9b:f2:85:74:b2:80:6e:fa:
                    a9:45:4a:57:c5:3b:bc:4c:ce:7b:0f:c1:95:07:5e:
                    21:33:e8:0a:44:01:9c:78:2d:c9:ba:8e:44:82:04:
                    05:df:17:d5:7e:36:70:26:21:ae:56:4a:90:d8:92:
                    28:cc:c7:5f:af:27:84:db:82:89:55:f9:8d:ad:16:
                    3e:3b:84:10:43:06:53:e3:b3:8a:0e:95:74:e4:b7:
                    73:de:a5:ae:78:1e:86:83:f0:06:73:7d:3e:87:83:
                    38:46:c0:b0:26:f9:8e:0f:75:cd:8e:b0:70:ca:6c:
                    f3:54:08:bf:2f:c3:0c:c2:1a:c0:5e:5a:bb:b9:cf:
                    23:9c:24:fc:01:2c:0d:d2:bd:2f:77:e7:47:73:c1:
                    46:44:a4:8d:8e:b9:d0:1d:8e:04:b2:6c:86:88:4a:
                    c0:a9:61:24:09:d1:16:87:8e:91:41:53:9d:17:e2:
                    9e:91:3b:9a:b6:45:15:9f:1f:dd:38:0c:d1:0c:33:
                    15:45:56:96:51:cc:bd:0f:61:a1:b1:4a:f8:91:f4:
                    da:83:f0:0e:d0:07:ec:e8:42:12:34:22:88:f4:90:
                    a8:53:e8:4e:42:f7:a6:2f:57:2c:75:00:2e:11:cb:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:06:8D:50:0A:34:5E:C9:F7:CD:B0:63:03:EB:5C:13:04:B3:CD:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86103eea-ebf9-32a5-9252-b336f4cf6945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:cb:ef:6c:a3:31:89:15:31:b7:81:8b:85:26:16:57:a3:
         56:6c:7a:d1:cd:ea:35:7c:cf:23:d1:23:8a:6e:03:3a:cd:01:
         6d:6e:8b:28:68:5b:22:a4:a1:88:ff:6b:13:44:51:51:a0:92:
         4d:03:3a:68:61:92:ae:78:44:79:17:14:2d:fb:ed:47:f0:37:
         7a:39:e9:f9:65:c4:80:0f:b9:80:0d:ac:cd:0c:ca:e0:2c:0d:
         44:60:1b:da:ba:cd:9c:3d:e1:18:44:cd:c0:2b:2f:09:e6:3f:
         59:c7:fe:14:5c:9b:c3:2a:e6:05:c0:e5:02:7c:66:ff:f5:bf:
         c4:4a:bb:0d:5e:e0:8a:9c:9a:9a:8a:73:ec:ed:02:7f:93:f8:
         bf:03:22:bc:12:83:48:56:f1:e4:f9:8a:3d:0f:5f:3d:53:08:
         24:a5:67:52:44:20:13:ef:0a:88:c8:40:2b:da:05:1e:66:31:
         93:30:56:9a:dd:66:32:9e:e4:f8:bf:67:6c:d9:94:1e:fc:7b:
         3d:eb:44:eb:a1:60:89:e7:d5:ee:b0:ca:0c:d7:30:eb:be:02:
         84:1c:1d:f0:fb:21:15:06:91:89:4c:aa:19:15:7e:b9:47:9f:
         d5:ae:49:3d:75:fd:2a:cd:8b:71:92:c2:4e:de:82:8b:1c:1a:
         55:95:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:26 2025 by rpki-client