Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa
File:                     9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa (raw, json)
Hash identifier:          CYNAUUvVX0PCrQKbbC9k7l5la7MvVtx8t1+wUhfRppc=
Subject key identifier:   75:C6:C7:2B:D2:48:5C:EA:25:33:45:A2:3F:9F:85:BF:AD:8C:F9:2F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB9435BA13F7AFC033780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b9:43:5b:a1:3f:7a:fc:03:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ac2b61c4-f85a-42fa-8d90-80afa9c9293e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:0f:48:06:98:ca:74:59:38:43:07:60:42:
                    ed:df:0c:48:ef:fc:75:d6:29:e6:c4:14:71:b1:72:
                    97:24:b7:f3:d8:f8:e7:1a:6a:6e:cc:bd:c8:f2:55:
                    08:93:96:5a:9f:10:dc:42:d7:39:fe:e2:f0:ad:62:
                    ee:5f:2c:86:38:4c:61:d8:a7:06:26:41:cd:d9:f0:
                    27:22:81:f0:44:36:14:b1:2e:c0:c7:d6:6e:c6:b2:
                    86:13:67:68:41:e6:47:6c:6d:28:6d:77:74:7b:24:
                    a2:d3:35:d9:9a:49:99:ed:d6:06:5b:ae:aa:43:19:
                    8a:47:f8:46:9d:06:ba:75:92:08:9a:1f:4b:20:68:
                    b3:84:45:0b:59:e9:27:e5:c3:c0:bc:e1:60:8b:5a:
                    ad:b6:94:7a:53:09:a1:a7:a3:d7:4e:03:87:8a:19:
                    fc:e7:24:ba:f7:0c:b9:08:fe:9f:28:a0:af:af:26:
                    17:27:dd:62:89:92:0f:a9:6f:3e:f5:15:c7:3c:f6:
                    97:76:e5:ce:9a:c4:06:a7:26:67:51:de:3c:02:73:
                    ec:ea:b1:51:c6:c6:0c:53:ea:d7:26:55:64:cc:cb:
                    76:46:ea:13:f0:fd:2b:8b:5b:79:eb:64:7a:f4:45:
                    14:f0:2e:8b:9e:40:3e:24:77:b9:b9:b7:f9:aa:a5:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C6:C7:2B:D2:48:5C:EA:25:33:45:A2:3F:9F:85:BF:AD:8C:F9:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:98:a6:a0:86:ea:a5:9e:90:d9:2b:ec:10:ac:05:46:bb:8d:
         c5:22:19:18:fc:36:05:b9:81:57:16:d7:f2:e3:45:7e:d9:67:
         65:d8:58:51:0d:97:f7:8e:1a:9e:d9:c8:fc:84:73:4f:d7:a0:
         39:9c:05:06:0b:09:3f:b2:13:8c:f0:ed:ff:af:7b:79:2a:d9:
         1f:e1:b7:fd:ba:80:de:02:a8:4a:8c:23:5c:78:73:01:53:2a:
         39:bc:11:fd:18:40:9b:27:8c:35:d5:f7:86:2f:2d:7b:c6:e5:
         c1:6b:8f:18:56:2d:23:c8:91:0b:a6:81:21:c5:33:db:9e:01:
         80:97:ba:9a:57:5f:f8:b0:13:0c:8a:5c:b5:dd:ca:c2:5a:34:
         e7:74:c8:b5:8a:ef:76:dd:c9:9a:de:ac:6a:66:14:3a:8d:0e:
         f4:ef:5f:a5:28:8e:48:fb:d5:61:ef:60:04:0a:f1:d8:eb:fd:
         dd:d3:b0:71:f1:eb:b0:cc:da:77:46:ce:d5:b8:07:3e:e9:3a:
         5d:8f:6a:4f:b3:ec:73:00:c7:58:d9:e6:7e:27:c8:a6:4d:16:
         e6:c1:dc:32:f3:81:fd:c3:04:7f:a1:a3:f6:10:74:ff:68:1f:
         4e:c5:d4:0a:fb:1e:20:c1:ce:22:22:4f:ce:9d:f8:ae:69:74:
         7b:8a:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:28 2025 by rpki-client