Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb89af5d-680f-3086-850d-7eb8dc349054.roa
File:                     eb89af5d-680f-3086-850d-7eb8dc349054.roa (raw, json)
Hash identifier:          CBH0zT3np8q5YE4/ti7Z0OKLzo03WvrKgZJbp0L61Jk=
Subject key identifier:   25:13:40:18:EB:61:A1:8A:34:B4:6F:41:BC:85:11:54:40:2D:6E:CB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E099FFBB915AD67DF68700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb89af5d-680f-3086-850d-7eb8dc349054.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:99:ff:bb:91:5a:d6:7d:f6:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=bc2c8fa3-93ed-4b06-8d20-26fc7c319df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:35:e6:d6:04:4e:cf:64:26:27:7a:68:14:
                    63:fb:d6:96:a7:7a:29:30:2f:bc:d6:42:b9:ef:60:
                    84:e9:64:1d:a5:1c:e0:69:32:27:b1:4b:93:ef:91:
                    1a:10:5a:fb:2c:54:1e:bd:31:ba:53:e3:61:8b:4e:
                    a3:65:68:de:c3:84:17:7d:db:12:95:8f:8f:71:fc:
                    0b:ed:81:6c:71:fd:ba:2f:d7:16:30:bb:66:41:35:
                    ee:27:2c:28:f2:4d:a8:5a:12:41:58:7f:56:a5:5b:
                    b7:75:90:70:a0:c0:53:ed:2b:d4:1f:ec:58:7b:0d:
                    53:1e:e8:44:d2:10:73:8f:d7:73:96:07:a2:78:df:
                    b1:b3:bb:1a:c6:ee:98:8b:50:9d:2a:10:ff:4a:b9:
                    5b:91:57:38:44:3d:42:39:36:92:60:e0:9f:ea:07:
                    7b:c6:e8:67:e7:ac:65:eb:0d:11:85:40:99:14:8c:
                    19:fe:12:32:d4:f4:81:b7:91:24:5c:a3:e2:52:e0:
                    da:37:66:94:c6:1b:53:1f:a4:fb:c3:24:58:31:5f:
                    44:d1:8a:3e:da:1c:21:0a:38:e3:29:5b:de:70:fd:
                    29:bd:de:f4:ae:94:78:e5:1b:27:64:84:0f:c5:74:
                    dc:03:33:7f:d8:15:7a:e7:d0:06:d5:8c:36:5d:2d:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:13:40:18:EB:61:A1:8A:34:B4:6F:41:BC:85:11:54:40:2D:6E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb89af5d-680f-3086-850d-7eb8dc349054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:65:ae:7f:61:9c:81:01:6d:60:a5:03:7f:10:7d:2f:2c:fe:
         1b:df:61:a9:e8:9e:35:aa:b4:87:67:7b:b2:bc:42:96:2c:56:
         cc:35:bb:6d:c9:bd:89:7d:87:f3:4e:5d:91:ff:51:b5:51:a2:
         ea:2f:3b:ee:8d:3f:f1:00:9d:e6:57:51:08:b8:7e:8a:51:83:
         b7:63:5b:36:99:9e:17:88:bb:19:33:ea:00:92:a6:9c:81:a0:
         94:f6:5a:a7:1d:52:9c:6d:68:1f:69:b6:69:94:c2:9d:c1:89:
         34:bc:8b:38:ec:47:d2:a7:da:d8:67:09:bc:05:b1:2a:eb:fa:
         28:4e:01:2a:b8:bf:d7:fc:ed:7e:7b:fd:67:7c:2b:13:97:b9:
         45:f9:43:a7:65:5e:9a:d0:ee:41:73:9c:41:3d:5c:73:7d:21:
         e8:58:1b:30:0f:4b:79:47:25:a2:bf:7b:92:cf:b0:17:ae:1f:
         ae:bc:7e:29:91:86:e9:f2:e8:88:21:17:4f:fd:18:85:49:da:
         a3:5b:66:fe:52:9c:15:b3:db:b0:52:d6:39:1e:34:ee:1a:4c:
         e1:67:eb:b3:f7:2a:e0:21:28:95:98:19:9c:9c:7d:11:9d:97:
         9f:be:13:cb:c2:58:a7:38:78:36:fc:42:52:ef:aa:fb:ef:d4:
         1e:86:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:13 2026 by rpki-client