Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1de38b41-d09a-359c-af10-71da31cc90f7.roa
File:                     1de38b41-d09a-359c-af10-71da31cc90f7.roa (raw, json)
Hash identifier:          AtjYBkoFH/lWpomZJ3q38yUmwMBvYGNKYtcMqs3ySDA=
Subject key identifier:   27:40:E5:26:2E:0A:B1:3D:6D:53:5A:B4:BC:F5:6A:0F:29:3C:3B:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B5FBCABAAE64FEA23CBA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1de38b41-d09a-359c-af10-71da31cc90f7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.196.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:5f:bc:ab:aa:e6:4f:ea:23:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bce9117e-9896-4bea-bed3-314dbae83b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:e6:84:ff:01:d4:fd:60:d1:74:c3:6c:7d:
                    5e:1b:67:91:d3:c2:fb:f5:be:12:a4:0d:91:a5:65:
                    98:c9:57:51:21:8d:f2:09:39:f9:5e:b3:42:d6:b4:
                    0a:6e:b1:95:75:58:9d:24:de:69:97:aa:22:75:c1:
                    fd:2e:02:ac:1a:f0:e5:83:0c:0a:b6:63:d3:e2:da:
                    bb:75:5c:80:cd:a6:57:01:9c:a9:f0:52:f0:15:23:
                    27:2b:7d:55:1c:ea:04:7b:d6:99:e7:1a:28:b0:6c:
                    e3:d4:a2:20:83:0d:48:e0:35:6a:bb:9b:69:1b:43:
                    e5:b8:01:89:11:30:9a:e4:4d:cd:14:ec:e7:2a:6b:
                    59:1e:55:b6:30:06:03:74:00:b3:f0:7b:ec:d2:25:
                    87:c3:3b:04:5e:61:05:f2:e8:b5:eb:f0:4d:21:a3:
                    1d:79:6e:6c:73:a7:b8:fd:02:df:2f:ff:04:20:61:
                    5c:ee:85:62:16:b2:3a:d5:b0:7a:dc:fd:be:d6:58:
                    aa:cc:ab:b9:c7:5e:84:54:f4:72:15:bb:d8:91:fd:
                    d9:48:b0:15:c9:d5:82:1b:4a:31:36:67:bd:56:ad:
                    66:f9:7f:5f:51:e0:66:ce:20:3f:ae:0d:46:c0:1e:
                    a6:70:97:03:d2:2d:96:c4:5b:72:59:b5:b4:f1:a3:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:E5:26:2E:0A:B1:3D:6D:53:5A:B4:BC:F5:6A:0F:29:3C:3B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1de38b41-d09a-359c-af10-71da31cc90f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8e:71:f2:47:77:0a:a1:67:27:57:f0:aa:7f:e4:ea:e0:bc:
         91:94:46:3d:a3:cb:72:09:16:91:60:a0:50:d1:03:71:45:24:
         af:a8:e2:e3:45:35:7e:b8:c6:03:74:ec:55:52:22:48:0c:42:
         e4:ce:d3:00:dd:c2:5c:cd:71:38:f6:99:00:ca:1e:e5:0b:2c:
         9b:bd:1a:5f:f8:17:4f:79:cb:eb:be:94:42:cb:4c:31:65:d7:
         f9:a6:b4:8e:1d:f0:55:80:6b:35:aa:62:e0:5c:8a:a2:b9:24:
         33:05:9b:2e:99:d4:db:9c:77:6d:2d:f6:f0:67:fa:1e:f0:c1:
         e3:43:4a:ce:5f:34:7f:43:79:0b:d7:fe:0c:86:5a:f5:ec:37:
         f0:0f:dd:39:4b:18:77:a9:6b:29:39:f4:25:ba:46:bd:fa:f3:
         e0:62:0c:87:17:a9:34:fe:81:e0:87:f0:24:e8:c2:8d:30:ff:
         1e:cf:4b:da:c9:5f:80:06:50:97:fd:a6:14:d9:40:71:2a:61:
         eb:e0:41:a7:15:0a:29:4c:c2:88:00:41:1a:d6:ae:13:73:24:
         c4:4a:47:29:ac:dd:8b:66:96:7d:d4:bd:e6:3b:0b:0a:74:e8:
         92:56:c4:94:f0:22:d3:bc:da:0f:5d:a9:d9:23:d3:7b:e9:84:
         07:cf:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:29:21 2026 by rpki-client