Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/541a9423-f9a1-30d1-9722-c8c00a6746a5.roa
File:                     541a9423-f9a1-30d1-9722-c8c00a6746a5.roa (raw, json)
Hash identifier:          tbx4sE9aYEcaqd/1fzRUUNHb1Vg8vABqpTi41WkN2zI=
Subject key identifier:   03:DD:FA:C0:40:53:89:DE:D8:87:7F:C1:3D:41:C0:C9:E8:4B:AE:A0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DF4B497821BE960FA1C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/541a9423-f9a1-30d1-9722-c8c00a6746a5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.197.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:f4:b4:97:82:1b:e9:60:fa:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2f03a411-95c0-401d-b3c7-0afd2213ec67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:51:b5:10:65:a3:5f:8a:c9:c6:4a:0f:1a:
                    dd:4f:9e:ac:8a:ae:74:3d:09:12:76:80:3c:4a:53:
                    f1:12:f5:17:71:ee:46:7c:e6:88:62:34:5f:40:d1:
                    16:70:c0:8c:0f:de:46:97:3b:23:1b:7d:80:eb:e2:
                    ad:f8:aa:7f:6b:da:b6:ea:46:13:9b:dd:4e:5d:5b:
                    6f:d6:4e:1c:7a:94:b2:ed:c9:9c:ee:0a:c6:5f:84:
                    56:04:5e:27:76:4e:45:aa:3d:8f:6d:1a:0a:ad:15:
                    65:30:cb:98:e2:6f:ea:5c:d2:2d:72:10:51:ec:9f:
                    f3:e8:1e:b7:b1:e3:f1:48:22:3e:ea:0a:57:73:b2:
                    ca:20:71:1a:b3:52:de:97:1b:e4:f6:56:2a:b1:16:
                    62:ee:dd:e9:c9:a5:4f:27:94:ad:6c:aa:46:b3:1c:
                    bf:5a:6a:4f:58:95:f9:80:24:70:91:1c:0b:62:45:
                    cc:be:87:74:d2:e7:19:11:d3:d7:a5:44:02:72:7c:
                    01:dd:04:04:3b:6d:82:c5:74:25:ca:e9:a7:4f:06:
                    b1:00:f8:46:da:e6:ec:a9:93:9b:4c:cc:ae:fe:95:
                    b0:ac:c0:a3:27:00:e8:d5:65:62:8d:5b:ff:e5:cd:
                    61:2f:07:75:3e:b7:e1:13:9b:d7:59:5c:13:e5:7e:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DD:FA:C0:40:53:89:DE:D8:87:7F:C1:3D:41:C0:C9:E8:4B:AE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/541a9423-f9a1-30d1-9722-c8c00a6746a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:78:13:fc:29:78:22:bb:db:b5:35:a1:b5:2a:19:ae:76:12:
         d0:4e:19:76:6d:e7:fc:94:ef:20:3d:a7:29:d4:1c:4b:71:2e:
         60:ee:12:b5:5f:b7:91:f5:b0:2b:a4:d2:d1:54:06:5a:b0:b3:
         79:2f:d1:86:28:82:12:70:c4:f4:b9:9b:6c:b9:02:b9:1a:8d:
         38:91:c1:3d:b1:ba:a4:01:11:68:83:17:e2:e5:b1:06:f4:98:
         fc:ce:7b:26:7b:21:c2:9d:b2:05:24:84:43:40:86:2e:63:13:
         72:f8:5a:7c:10:ed:84:37:5f:77:13:95:d5:c2:38:1c:de:85:
         b9:fd:a0:69:15:b1:be:04:a1:7d:70:95:cb:fd:ad:39:c4:e9:
         7a:9a:f3:e8:1d:c6:02:a8:3e:a8:b7:20:81:20:22:65:fe:45:
         89:76:5e:b2:69:99:bc:38:d8:fd:75:d1:fd:9c:35:32:be:ca:
         32:50:f7:ad:27:90:f7:5a:84:69:c4:c5:68:79:e5:c7:8b:1a:
         7a:47:ef:cd:9b:97:f6:df:77:e4:18:91:3e:52:27:b8:0f:0f:
         af:d4:b4:11:cc:62:92:b5:99:01:e0:b0:44:ea:9e:fc:db:20:
         78:5d:d4:1e:68:56:6c:60:7d:8b:fb:20:2b:af:15:db:fe:72:
         fb:a5:1f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:41 2026 by rpki-client