Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb457af1-a3cd-34fc-a443-481bdae41bc0.roa
File:                     fb457af1-a3cd-34fc-a443-481bdae41bc0.roa (raw, json)
Hash identifier:          lirnttCMHenT8RzLNQtwuVM2z/ffXbacVzz4u2ff+18=
Subject key identifier:   9F:45:80:C3:2A:7D:C0:73:98:6A:FF:31:E9:AE:E9:70:D5:EF:E6:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD06579A54B6EC80282FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb457af1-a3cd-34fc-a443-481bdae41bc0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:06:57:9a:54:b6:ec:80:28:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=94b3d8d1-5a8a-4f74-b952-5fc4cc4e54ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:8f:28:d9:01:3a:9a:af:14:17:bd:a6:b7:
                    44:08:07:05:ad:f8:82:7f:7e:79:0f:b5:41:9f:89:
                    51:3f:02:5e:ac:52:ee:8b:56:e1:56:9b:87:06:aa:
                    af:f1:54:66:d5:ee:52:00:a3:d4:79:e1:30:bd:45:
                    3e:3c:da:b2:3d:ec:68:fc:cd:71:e5:2a:48:32:0e:
                    c6:8e:c6:fd:3a:82:65:97:5d:42:51:1f:d2:71:95:
                    2e:3b:39:be:32:8c:2d:b4:c0:f7:4f:b8:8e:24:ce:
                    57:3d:1e:3c:3b:3a:90:59:ad:2b:f0:19:34:2b:6f:
                    5b:cd:10:d5:73:82:00:3b:ea:44:c2:a4:f1:bf:fa:
                    66:7a:f8:4b:ea:29:69:eb:17:f7:d2:e3:95:d3:43:
                    e8:bd:94:ad:11:28:f0:3a:da:db:99:10:8f:5c:a2:
                    15:f1:72:da:ef:26:1f:d4:6f:8b:7b:dc:42:12:b4:
                    6e:ac:d7:e0:79:c6:84:b5:b7:30:8d:e2:c7:ee:86:
                    11:40:7b:6d:ac:e0:df:2a:85:07:76:4c:da:ca:ff:
                    8e:e6:02:4b:38:97:35:6d:c8:09:14:af:49:be:b1:
                    32:80:07:8b:2e:3c:ad:7c:13:f6:d6:83:b1:e7:8a:
                    51:3e:b1:61:2e:58:f1:e0:d4:e9:b1:d8:e8:87:20:
                    d9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:45:80:C3:2A:7D:C0:73:98:6A:FF:31:E9:AE:E9:70:D5:EF:E6:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb457af1-a3cd-34fc-a443-481bdae41bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7e:51:a4:d2:57:61:b8:cb:5f:4c:16:7a:3f:30:49:dc:c9:
         70:af:e8:e0:16:5a:41:64:0b:c1:a0:b1:6a:0b:a7:48:e3:7a:
         3f:35:56:07:db:57:1f:0f:e4:b4:f5:b4:d2:8f:46:a5:e4:8b:
         4e:f1:31:b3:c5:28:e3:ae:8c:86:04:09:b6:2a:40:b1:35:e1:
         96:bb:5e:ff:6e:a8:e4:79:e4:38:12:d7:bb:ad:e7:24:af:55:
         39:a8:26:ea:d7:6c:a7:d2:84:75:e4:a9:a2:e5:1f:80:90:04:
         38:79:be:7e:3a:43:57:6b:6b:b2:0b:fc:c9:4b:a9:5d:79:cd:
         0c:d2:c5:ea:ac:45:7c:97:ea:e6:55:8c:bb:3f:5e:04:77:4a:
         d6:39:1e:9b:dd:7e:29:0b:34:5a:7f:42:9e:fa:40:72:33:1f:
         e5:7e:f4:35:1a:85:07:70:ad:68:59:87:8d:6f:5e:d5:70:3c:
         2e:fd:80:5a:62:dc:ff:ef:ac:41:c2:5e:52:6e:ae:b7:fb:55:
         51:bb:a0:a3:3c:f9:fa:5a:90:5e:8d:e7:51:d1:8a:9d:98:ef:
         1b:b6:e6:1b:70:e6:6d:ee:65:df:ea:55:11:6e:b1:29:02:87:
         af:55:d8:45:96:28:c8:4b:4d:56:31:25:0a:ca:0c:ec:7b:08:
         8b:c1:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:25 2025 by rpki-client