Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56273e46-cd80-341a-b5b3-88260354b9f5.roa
File:                     56273e46-cd80-341a-b5b3-88260354b9f5.roa (raw, json)
Hash identifier:          3oD+kr+yQbAnCmibugeogWLVetwhczVoj2Uiwgb+BnI=
Subject key identifier:   C2:3B:8D:6A:BB:04:3E:54:D7:D4:CE:9E:19:C1:80:FF:D6:B5:78:3F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA7880EA53BF58E3CD1AD1D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56273e46-cd80-341a-b5b3-88260354b9f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40306
IP address blocks:        99.196.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0e:a5:3b:f5:8e:3c:d1:ad:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e24f4ef1-e84a-4197-a984-dfd7b85f5a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:0b:da:79:d5:f6:4f:a6:bf:f7:07:aa:c7:
                    a5:20:6f:98:44:d1:66:b1:02:96:24:28:a3:17:89:
                    16:b0:3d:5f:94:a2:0a:6d:84:a6:d1:ac:ec:7d:e3:
                    b1:a9:f8:ff:05:bf:dd:1b:3c:4d:7b:26:f2:88:b8:
                    aa:35:87:17:a4:c3:c9:d9:7e:b2:44:6c:04:d1:b2:
                    11:f6:ed:48:10:db:d0:51:a8:a7:23:3c:f1:b4:6a:
                    60:b2:51:0f:c8:2a:93:a3:0f:46:7e:45:d6:33:48:
                    d3:25:8d:29:88:46:c4:d4:6f:83:5c:33:15:c1:64:
                    d8:2f:8c:8b:51:af:7a:bb:64:35:c5:3b:24:69:32:
                    1f:46:9d:a2:dd:d3:77:11:1a:03:2e:88:03:f1:cf:
                    15:a0:ca:c1:36:0d:7e:7e:c7:f9:d9:b7:47:69:51:
                    13:a5:3f:be:8d:c4:34:8a:9b:d3:a6:9a:83:38:11:
                    eb:4d:99:52:66:92:92:39:70:16:bc:06:23:26:ab:
                    81:5e:be:bb:cb:df:30:d9:11:56:c3:46:22:e6:ab:
                    0a:1d:0e:99:8b:bd:f6:48:32:1b:5b:26:cf:6b:b5:
                    52:85:bd:d2:03:82:7b:8a:28:8e:d8:21:b4:cd:c8:
                    f8:cc:63:16:ca:b7:4e:d4:d8:93:e3:14:44:6a:60:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3B:8D:6A:BB:04:3E:54:D7:D4:CE:9E:19:C1:80:FF:D6:B5:78:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56273e46-cd80-341a-b5b3-88260354b9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b3:05:25:64:28:3f:83:76:6b:0d:5e:3b:a1:e8:7b:a1:2a:
         7d:68:fc:ec:be:f4:0f:ce:b1:49:81:2b:61:20:15:b8:a3:b5:
         49:fa:dc:3e:56:5e:77:e7:8e:a8:8a:ce:e9:44:cf:9f:5e:60:
         00:82:39:02:9e:f7:1c:55:52:3b:9d:54:53:3e:b5:14:62:c6:
         60:c7:60:3d:16:40:42:ff:95:e1:e9:96:cb:c7:74:1e:03:7f:
         b2:3e:fe:51:87:3e:fd:00:c9:e5:27:e7:69:97:46:77:64:5f:
         9c:e5:40:d6:58:02:e5:e0:98:28:e1:9f:d2:c4:3e:88:79:a9:
         83:40:03:fa:a0:03:2d:c8:39:a9:5b:f7:90:07:ae:51:e3:00:
         02:0a:d3:c4:a4:50:e1:c8:5a:ba:17:f7:d7:9d:e1:f5:e8:c7:
         8a:0c:78:43:04:ea:b0:c6:94:c4:16:f7:ab:12:49:af:59:79:
         ec:aa:4c:32:93:52:42:98:f0:71:2d:b7:27:80:f6:e4:89:5e:
         29:c6:46:d3:0a:bf:fc:8e:27:1a:eb:76:a9:39:61:b7:4f:d6:
         da:c6:dc:42:23:38:77:4e:e6:2d:9b:84:b9:3a:a5:c9:2c:7d:
         9b:6a:dd:62:ea:f3:26:28:08:70:ae:2d:8d:0f:2b:b1:be:38:
         ef:a3:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:57 2026 by rpki-client