Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa
File:                     9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa (raw, json)
Hash identifier:          5GBqV72OCQYLUE1W5nPXCPzDw3iO2FvAzxwgGhBisig=
Subject key identifier:   4F:DE:3C:9F:5E:2C:65:C3:B4:8E:BB:24:6C:26:BE:18:89:68:F6:0C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB9D1E8B7EC4D92487E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b9:d1:e8:b7:ec:4d:92:48:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=456c2763-8546-4b8c-a1d7-8b3298990826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:3d:59:a7:f2:6c:00:ca:a0:21:72:56:48:
                    2a:d0:52:51:f0:b9:26:99:cf:28:dc:66:9f:8a:38:
                    7b:f0:97:36:ab:06:33:e8:42:73:cf:27:fd:92:bb:
                    f4:eb:1f:fc:2c:c5:86:c8:72:c9:dc:c6:11:df:cf:
                    d4:3b:f1:d0:97:a2:c9:bd:b6:ce:c7:12:d3:7a:4d:
                    41:f7:e5:c3:09:a9:ce:d9:9b:ba:74:ec:ec:bd:f1:
                    79:4b:f0:77:a4:02:db:3e:9e:cf:32:5d:28:31:c0:
                    25:79:94:a8:cd:f2:97:5a:6b:fa:a6:d8:e5:a0:56:
                    6a:e0:82:af:81:43:a7:60:f8:2b:60:bd:cb:cf:ec:
                    a4:ef:8e:df:ee:97:30:fb:be:7c:eb:a5:5c:ea:4f:
                    0e:67:1e:fa:ee:f9:eb:86:13:96:ae:9b:76:e3:06:
                    ce:ac:61:ec:47:36:64:9b:72:cf:5a:37:e5:1c:b5:
                    44:ce:ba:66:da:1b:07:5b:df:f4:bf:fc:46:32:9f:
                    2c:7f:c7:6f:f7:10:d0:5b:a0:35:60:76:fe:a6:9d:
                    4d:a6:bb:f5:30:71:db:04:ed:21:31:ba:cc:6d:77:
                    54:3e:bf:ef:e0:45:ef:1c:81:b2:71:5b:18:5e:37:
                    b2:f6:ee:40:ff:50:d1:4e:cb:1b:00:64:d5:c5:01:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DE:3C:9F:5E:2C:65:C3:B4:8E:BB:24:6C:26:BE:18:89:68:F6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:36:d1:14:0c:80:c9:2b:00:46:74:0b:49:33:b9:9e:89:
         49:53:ed:d5:7e:c2:9e:e3:a7:ab:0b:5b:ff:8f:c3:7c:3f:32:
         32:8d:b9:d3:f7:16:f9:84:b3:e4:ab:f8:aa:69:86:05:66:08:
         db:df:b2:11:6a:f8:67:3f:ca:5f:4e:30:cd:da:80:ab:cd:d0:
         ec:37:62:bf:d7:25:9c:54:85:4b:b3:c2:ef:f7:ea:27:8f:89:
         d6:52:ff:12:11:a7:81:d9:85:20:e6:41:24:c4:8e:46:d7:c2:
         b0:ef:6b:ab:ca:32:63:85:ad:5d:24:65:14:0c:51:cd:2d:f9:
         99:72:1f:90:b2:f4:71:59:a4:93:f6:2a:c3:0e:0b:e1:40:07:
         f3:14:42:15:6d:2f:b6:cc:f7:f3:23:be:d5:b7:f0:d8:fe:70:
         32:17:4a:fc:4b:d6:5a:86:fe:1e:68:8f:97:32:9e:62:67:16:
         b2:38:9d:d0:c2:2a:c0:a6:65:18:bc:50:69:d8:4d:76:1e:93:
         00:2d:58:d7:b0:d6:83:2e:b6:17:6a:35:8d:38:0d:1d:72:26:
         0d:0b:af:d1:f3:a1:ec:3b:ec:0e:1a:9c:53:1b:d8:94:67:46:
         15:c4:f2:b9:94:c5:6a:27:25:66:8b:6d:c5:3c:a1:c6:c3:c9:
         60:c7:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:48 2025 by rpki-client