Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92420a14-2737-39fc-9f92-700f818a1ef4.roa
File:                     92420a14-2737-39fc-9f92-700f818a1ef4.roa (raw, json)
Hash identifier:          1E51rlqrqlrUixup38SvvTTkEeQCHgcm2WWOkuNAUCo=
Subject key identifier:   D6:27:B9:33:AB:13:7B:07:FF:32:40:AB:B4:41:11:9A:7F:E6:29:7E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD0CC79B911B2A78C4E200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92420a14-2737-39fc-9f92-700f818a1ef4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.198.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:0c:c7:9b:91:1b:2a:78:c4:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=191a4f81-a8f4-460d-9be3-da0ca94b2211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:f9:89:8a:5b:a4:ce:43:f0:3d:2d:52:c9:
                    8b:6e:29:c6:46:ef:2a:ed:f8:82:6a:a3:a2:53:9c:
                    df:b6:19:6e:92:e3:29:7b:7e:a4:33:f4:31:f3:21:
                    56:5b:6f:28:c8:54:92:92:95:e7:16:95:39:93:c9:
                    60:89:12:16:24:21:cf:f7:05:44:67:7b:63:57:e5:
                    b3:7f:38:d1:e1:26:0d:8f:64:1a:19:cc:37:5f:54:
                    f8:23:6b:3b:d0:45:c5:95:7f:e3:07:42:ba:ac:b2:
                    e0:32:c0:8d:52:ec:cb:50:6f:2d:c0:e9:3a:30:be:
                    08:59:87:4e:81:80:b7:3c:aa:f1:fa:ad:0a:25:42:
                    fd:a6:dc:93:c6:41:51:95:67:9f:f1:58:a6:75:9b:
                    87:cc:dc:60:7c:06:b0:8a:85:88:63:75:62:48:10:
                    3d:83:21:a5:b5:ba:2b:10:0b:66:ff:ff:d3:2c:a9:
                    7d:29:d5:06:9f:8c:5a:4d:87:3d:06:9f:4d:78:f5:
                    15:9f:e4:94:00:e3:36:53:ee:4a:54:70:d3:d0:a0:
                    b9:9a:63:db:a8:e9:9a:67:62:e0:d5:ae:7d:3c:7e:
                    99:2a:a4:a4:37:4b:8e:79:ca:a7:28:89:ab:db:4b:
                    a9:55:d4:59:ce:a1:bc:95:5f:3d:1c:5f:aa:fc:72:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:27:B9:33:AB:13:7B:07:FF:32:40:AB:B4:41:11:9A:7F:E6:29:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92420a14-2737-39fc-9f92-700f818a1ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a5:b3:f0:b8:76:1e:f9:c1:94:09:0d:fc:d5:10:37:99:3f:
         f3:03:7a:e2:c6:7c:98:c7:79:e4:83:4b:d2:e8:c4:75:34:98:
         d8:2d:cb:89:de:9e:cb:8c:c0:60:bd:b1:cf:fb:5a:24:9c:83:
         a4:11:f2:38:35:d7:5c:b7:99:44:1e:1d:a0:17:2b:04:dd:ca:
         3c:f6:7c:f6:55:82:fd:4f:55:61:d0:0b:1c:e5:1d:2f:73:a3:
         4b:22:af:bb:b4:b2:d1:80:55:83:2d:0c:ba:7b:e0:b5:16:69:
         41:12:75:84:78:cb:fc:78:11:78:c0:7b:bd:7e:c9:c1:68:a2:
         4e:4d:2e:a7:f5:5b:f1:9e:25:7e:ed:c9:92:47:1a:08:04:48:
         d4:9e:85:8d:9f:53:79:66:9f:19:4a:b6:29:4a:9f:85:6d:bb:
         5d:61:4e:24:a9:4c:12:26:9e:f3:26:cb:56:ea:1a:ca:85:f4:
         36:2f:53:cf:16:28:ce:6b:7d:ef:d9:79:2e:4f:4d:ce:ce:8e:
         a0:ef:f0:f8:5b:bb:41:e1:f8:00:53:dd:38:38:ba:0e:04:17:
         b7:67:d0:2b:0b:c8:e8:7b:fa:dc:4e:4d:78:41:79:41:26:4d:
         87:30:16:60:10:56:5c:dc:af:bb:1f:c9:75:b9:78:b9:e6:4f:
         5b:bb:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:24 2025 by rpki-client