Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee3eb807-b703-381a-8513-3a092dc4b191.roa
File:                     ee3eb807-b703-381a-8513-3a092dc4b191.roa (raw, json)
Hash identifier:          /1uVF8DY0zcj/1JTvzPouQpuN2envN4cBMef2U0TI1Y=
Subject key identifier:   A7:12:BC:F1:4D:A4:FE:AA:B4:E2:13:F8:99:7C:D5:A7:0F:03:AC:96
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E09E39C7374636DAF33F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee3eb807-b703-381a-8513-3a092dc4b191.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:9e:39:c7:37:46:36:da:f3:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=792bd1eb-85c4-46ad-9d2d-6c06009347da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:d5:c7:8c:01:2b:19:64:69:68:b8:1e:be:
                    0d:ce:6d:c0:84:50:d3:4b:20:6e:15:d4:15:dc:68:
                    c3:e0:8e:91:8c:23:64:25:30:bd:bd:40:8f:1e:b1:
                    bf:c5:35:28:e7:e8:a5:20:da:83:0a:e2:53:78:ad:
                    e5:2b:25:e8:62:c2:97:1a:68:2d:59:ac:93:62:b2:
                    ed:3e:00:b4:b9:5f:9e:5d:13:24:e3:32:a3:a0:2a:
                    28:ea:53:53:95:f5:90:1b:d9:1d:1f:83:5d:7a:a2:
                    02:26:4e:a7:12:fd:72:57:2e:6a:ca:97:d0:c4:48:
                    52:1f:d3:bb:37:49:48:7a:45:c9:53:0b:de:f7:6d:
                    e7:8c:53:dd:d4:bf:17:1f:8c:cc:e1:90:4e:ec:65:
                    a5:25:2b:c5:ca:31:61:c9:6e:10:f4:85:0f:58:b6:
                    2a:2c:fb:5a:c5:a4:5c:54:e8:71:27:c2:20:48:cc:
                    bd:66:8e:8f:72:88:6b:ac:67:6c:78:4d:69:03:c5:
                    30:03:12:cb:ce:72:82:1e:5d:01:9c:01:14:2a:62:
                    4b:25:e0:51:e6:ba:05:16:9a:cf:75:db:bd:39:f2:
                    1a:26:0d:f7:cd:69:d4:dd:11:5b:62:af:75:41:52:
                    ae:88:89:b7:87:f4:e9:77:24:8c:db:92:48:b8:16:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:BC:F1:4D:A4:FE:AA:B4:E2:13:F8:99:7C:D5:A7:0F:03:AC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee3eb807-b703-381a-8513-3a092dc4b191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:69:31:a0:c2:fa:76:02:cb:93:ca:e1:98:8d:89:b6:3f:b4:
         18:5c:53:6e:ba:b2:a3:f1:e4:d5:1d:10:76:f7:43:1d:0d:cf:
         f5:98:a6:d7:35:2c:18:2f:ad:0c:fc:5d:67:74:50:b4:7a:54:
         05:3c:76:99:96:55:16:8f:e9:44:1f:be:1e:99:15:80:73:ad:
         47:62:62:7c:a3:85:9b:38:f7:34:ba:ab:47:75:da:5b:2d:75:
         04:31:69:b0:01:50:f1:55:2d:4b:1a:d7:20:c3:23:af:ae:72:
         92:3c:9e:55:91:3b:41:2c:5b:2e:36:aa:00:b6:c9:8d:d3:9e:
         4c:d7:6f:f7:58:f1:0f:bb:bf:86:d2:d0:cb:e9:ca:db:ff:db:
         06:c8:b0:75:f5:cd:57:de:c1:f6:f6:3c:dc:19:5b:26:d8:a2:
         dc:32:d6:b8:18:a1:69:98:72:1a:e0:2e:cf:ce:1c:46:01:ae:
         82:19:9e:e5:39:d2:b3:8f:1e:15:73:50:48:c4:e0:cc:cd:b2:
         13:ed:ea:aa:2e:8f:10:92:46:f0:bc:a9:34:47:d6:55:78:6d:
         5e:bd:42:bb:bc:38:6a:c7:fb:be:16:1e:11:ea:c8:20:b7:8d:
         ab:e9:cd:5d:fa:93:b9:4d:41:53:f8:c5:c7:06:4d:88:b3:8b:
         12:93:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:23 2026 by rpki-client