Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c511f9d9-7681-3255-91f6-2433776ca3e7.roa
File:                     c511f9d9-7681-3255-91f6-2433776ca3e7.roa (raw, json)
Hash identifier:          maqzaxOghrHVbKxbep2CLCA1NRfwfnytLzpv7m8gBOA=
Subject key identifier:   F5:90:9B:9A:55:03:19:A7:1C:23:C1:31:C8:70:3C:A3:D8:64:D2:19
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD0BEEC5AE4F2DED150200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c511f9d9-7681-3255-91f6-2433776ca3e7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:0b:ee:c5:ae:4f:2d:ed:15:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d76b143e-9b1f-4a14-8fe7-9a6b034c8755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:9d:9a:06:d9:9c:97:60:99:1c:3d:d4:de:
                    ea:10:3a:cc:27:3c:ed:63:c3:5f:24:ab:ee:14:1e:
                    01:31:44:c8:3c:22:a2:aa:68:e5:e5:ab:d0:ba:b0:
                    c1:34:21:6f:8d:24:bd:10:92:88:49:e7:26:0a:f4:
                    5a:fd:34:6e:51:fe:f6:1e:98:ae:81:b4:a4:ab:e0:
                    cc:46:9c:fa:5c:c7:b4:98:0f:63:36:23:52:50:49:
                    19:ef:ef:48:0d:4d:bd:a3:bd:29:92:8a:10:2c:b3:
                    44:36:14:e9:94:74:28:d2:37:2e:82:0b:a6:46:e3:
                    92:69:43:38:df:0c:b2:5a:3a:13:1c:43:c9:5a:40:
                    f1:1f:28:e2:27:17:3f:72:2f:ad:5f:78:37:42:fe:
                    e6:31:f9:7f:ea:4b:9f:8d:0f:f9:44:4c:4b:f8:be:
                    9e:57:b8:1e:b5:02:30:b9:52:f8:1d:cf:6d:36:be:
                    0d:4e:6e:5b:28:e5:27:96:cc:cb:fe:6f:d9:54:43:
                    c0:2f:b9:28:ed:0c:0e:f4:cf:01:12:f9:ea:8c:4b:
                    e6:f9:bf:88:c2:7d:06:33:41:52:e3:fe:37:ec:83:
                    54:9c:ac:7c:76:e6:09:29:28:bc:ff:ca:be:a0:79:
                    50:e8:9e:97:24:9d:4c:1e:ed:be:5b:f2:43:b0:1b:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:90:9B:9A:55:03:19:A7:1C:23:C1:31:C8:70:3C:A3:D8:64:D2:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c511f9d9-7681-3255-91f6-2433776ca3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:2f:b6:39:b0:ac:4f:d9:57:96:80:3f:8a:f5:ea:ae:a5:
         9b:f8:74:3c:af:39:93:ea:cc:8d:05:52:2c:a2:ae:8b:45:bf:
         fe:48:9d:c8:5e:09:e1:fd:f5:aa:bd:a0:4a:e0:ed:a2:3c:95:
         c6:05:cf:cc:13:c7:99:a1:d7:ba:60:2a:36:b7:e4:6c:09:ea:
         2e:98:97:a6:a8:87:56:2c:fd:0f:4f:da:c2:91:a2:a8:23:0f:
         c2:48:11:31:ca:78:31:a3:04:45:f9:17:0b:3d:ca:a9:84:c7:
         38:30:cf:15:7a:c3:7d:6a:64:3e:aa:dc:e7:82:53:67:e9:49:
         5d:5c:59:04:34:51:03:0c:b3:22:03:1d:55:15:c7:46:c7:cb:
         11:19:25:3d:a6:96:2a:da:5a:c8:b1:58:d0:d8:25:04:39:92:
         b8:17:d4:7c:58:05:28:a3:20:32:31:92:00:e2:34:06:16:dd:
         02:20:61:d2:4a:20:68:1d:fe:cc:2e:4e:f5:66:34:a8:bb:fa:
         d7:03:87:0e:58:a7:15:96:b9:d6:1c:89:36:db:1f:dd:d5:be:
         e8:ba:b8:de:73:05:50:9e:70:a0:53:b9:1d:91:58:ee:22:dd:
         b1:da:12:76:82:72:7c:59:df:e4:31:f1:16:1e:1f:82:55:06:
         2a:a5:83:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:25 2025 by rpki-client