Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa
File:                     973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa (raw, json)
Hash identifier:          2HQbgZaojB0MpzVp4TAI6GOgRVqf2c604vJQ0WMrY+8=
Subject key identifier:   36:41:90:67:79:51:DB:F5:9B:65:D3:A6:B4:2E:7E:78:07:6A:C9:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49838E2C1015D3CEAD60D100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.196.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:8e:2c:10:15:d3:ce:ad:60:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e5e4ef34-0cb3-4384-868f-cceea4be03ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:33:3e:ac:7b:d0:e1:29:02:4a:0b:4b:b3:
                    41:2d:8c:44:38:d0:5e:31:13:26:f3:b3:d6:a8:98:
                    ff:3f:e3:2d:ed:f2:21:e6:f0:13:14:2f:06:77:fc:
                    a6:33:df:bc:da:e5:a2:82:58:fe:4d:58:8c:fe:10:
                    c0:86:1e:33:d8:ed:4a:e2:ff:ba:75:8a:0e:a7:08:
                    0e:a1:3c:04:7f:04:a7:8b:62:91:62:11:aa:35:0b:
                    0b:14:ad:ed:2f:a7:2c:7f:9a:8e:9f:5a:4a:b4:c8:
                    31:07:0a:67:57:16:e1:69:26:a4:1a:ce:23:07:a6:
                    12:c2:3e:3a:02:f3:83:b5:44:bf:7c:ad:aa:08:0a:
                    3c:78:11:a9:92:02:0b:89:c5:76:19:e5:83:b9:6d:
                    17:b9:35:54:21:a1:4d:c5:35:a0:9b:21:ec:cd:ad:
                    b5:95:83:4b:07:f8:4e:0a:04:fd:13:11:7d:bf:4a:
                    ae:3e:5b:7a:cc:35:b6:96:22:7c:db:c0:12:ff:9d:
                    a3:fc:4d:bc:b1:ec:b6:38:03:6b:01:b8:c9:48:17:
                    25:b3:5f:da:c8:6e:27:06:00:61:69:03:fb:86:c6:
                    f3:29:82:b0:98:b1:1f:97:3e:5c:ac:f5:9c:a6:e2:
                    42:4a:8a:f1:fb:7c:1c:54:c2:a0:51:03:9d:0b:9c:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:41:90:67:79:51:DB:F5:9B:65:D3:A6:B4:2E:7E:78:07:6A:C9:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:af:45:d8:60:09:26:2d:20:6d:d9:b4:32:55:5e:06:8a:
         a2:16:7a:69:f3:cf:c4:aa:8e:60:91:e5:7b:1d:8f:50:ac:8a:
         ce:08:33:c4:a3:59:7e:8e:81:27:24:b9:c0:fe:1a:3a:0f:24:
         6d:83:61:44:80:34:8b:76:be:08:67:05:28:99:6a:c4:a8:0a:
         f7:3c:54:7c:18:e2:a3:9b:79:fe:f4:ff:42:df:63:0c:10:9e:
         f6:5f:87:3d:4e:c3:9c:f7:0c:ce:28:58:19:13:90:2b:b5:5a:
         91:64:8d:41:fc:4d:7f:c2:00:3b:48:1e:5e:4b:82:7c:88:18:
         99:52:aa:10:89:3c:26:2d:81:ef:aa:12:54:8f:95:b4:9c:4b:
         05:d5:e7:d8:76:5b:1f:d8:0b:58:51:be:b8:ce:a6:b0:cf:b9:
         3e:3b:0e:69:77:2b:f9:bf:00:81:1e:2d:0a:0d:e7:41:cd:ff:
         f0:22:60:43:20:a5:90:64:3e:17:61:86:f6:f8:65:a2:d7:49:
         32:e1:73:0c:06:10:78:bb:d2:5f:26:57:8b:55:b5:e5:2e:fa:
         36:d8:a9:1a:7c:3d:04:4d:61:46:2b:f9:60:45:b0:bd:27:0a:
         3d:e3:b0:e4:65:e7:c2:f0:4e:78:de:64:c0:fc:5a:7d:78:c1:
         39:d3:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:54:20 2026 by rpki-client