Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96fa6424-61ee-38da-812b-175fa22f074c.roa
File:                     96fa6424-61ee-38da-812b-175fa22f074c.roa (raw, json)
Hash identifier:          LciOADisgPa4ofErig+hNiZ57llM4DpI996BvdZUJbQ=
Subject key identifier:   8B:A5:CC:D9:52:35:B3:21:B3:DC:BC:C2:8F:BC:C2:2D:34:50:08:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDBCF294B0ABB231857B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96fa6424-61ee-38da-812b-175fa22f074c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:bc:f2:94:b0:ab:b2:31:85:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c401f3c8-4028-4c12-abdf-49040fad241f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:07:07:73:73:96:81:6a:4c:9b:ec:48:73:
                    b5:d3:e1:f5:81:72:d1:1b:38:1e:be:4d:69:f8:ef:
                    37:a7:fc:4a:0a:60:4f:66:8a:25:a5:79:bd:f4:30:
                    f3:6f:af:4b:8a:56:db:43:14:05:d1:01:66:60:85:
                    48:40:b0:f8:60:14:fd:ed:bf:50:19:50:d5:93:c8:
                    63:5a:28:a6:4d:a0:ef:f0:ed:f3:a5:b6:68:c2:02:
                    e0:be:bc:ed:18:72:2a:eb:e0:74:9b:35:7c:16:06:
                    58:0a:0d:c8:0c:c0:79:c0:b3:54:3a:6c:c1:0b:fa:
                    f0:cf:d2:8e:9b:24:c5:f3:a7:b1:ed:3e:ab:b8:a7:
                    5b:8d:df:b4:b2:d1:7c:85:39:48:cf:fc:f8:09:72:
                    3f:ea:7b:2a:d5:1b:f6:79:e9:4b:ec:e1:88:7e:7e:
                    75:95:bc:2f:d7:87:7d:ee:3a:84:a5:1e:bc:36:e1:
                    d9:b5:e8:79:1e:74:2f:07:45:c8:b5:40:7f:d6:85:
                    88:39:eb:84:c5:6d:99:d8:97:d9:20:10:1f:94:06:
                    5e:51:0a:f3:22:7a:1f:26:8a:c7:f4:04:67:cf:59:
                    dc:d2:51:f4:6d:47:ed:e1:89:57:7c:6e:ef:fb:06:
                    05:38:6f:d9:fa:ac:b7:ec:0b:57:95:5a:26:e0:06:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:CC:D9:52:35:B3:21:B3:DC:BC:C2:8F:BC:C2:2D:34:50:08:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96fa6424-61ee-38da-812b-175fa22f074c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c3:71:1e:14:42:cb:19:5c:56:c9:89:20:30:e5:46:2b:ce:
         4a:05:eb:43:57:1d:28:1b:8c:74:44:a4:d1:74:89:43:9a:2e:
         5b:9c:65:98:ba:14:3f:82:fc:8f:ed:66:e8:01:85:22:ca:be:
         9a:3b:8f:33:63:dd:03:74:e9:3a:33:06:81:4b:ad:21:7a:90:
         4b:ae:42:d1:12:c3:c0:f5:f8:e0:d6:4a:ce:b8:cc:dd:da:db:
         1f:94:25:df:c3:ce:21:d9:71:82:76:fb:48:c4:11:3e:3b:d7:
         ec:5d:03:7a:b4:5b:77:59:0e:00:df:87:0a:38:ff:10:61:39:
         1b:0b:ef:6b:d7:7d:4c:84:72:7f:2b:fa:b8:08:15:f3:cf:6e:
         69:e9:83:ee:c1:42:16:22:21:84:06:bc:5e:fe:76:3d:58:2a:
         16:3c:8a:8d:d7:0d:4b:cd:41:b5:ef:46:5e:f7:17:4b:42:45:
         2f:fb:55:2f:eb:c5:57:78:23:b4:f8:2b:84:94:24:03:4a:9c:
         f5:75:e5:5c:59:eb:57:48:33:fa:30:49:90:1c:ad:9c:43:fb:
         ac:78:69:a9:a0:bc:14:d0:54:51:e7:2b:fb:d9:dc:12:0a:49:
         a8:ff:17:d1:eb:8f:f8:5f:91:6b:82:22:44:c2:83:5b:ff:b8:
         5f:8f:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:39 2025 by rpki-client