Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa
File:                     8a520675-6613-388a-be6a-1f5023da6b64.roa (raw, json)
Hash identifier:          f13Hs80pn8Tyxn7XqUjnkmZyCmGNaWDPzzWAOTmeAn8=
Subject key identifier:   98:91:26:3A:6B:69:29:DB:F0:1F:2F:F7:E1:9C:CB:A9:0D:10:45:F5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B838C77639C071169E780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.196.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:83:8c:77:63:9c:07:11:69:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=015f0def-cf33-43de-b744-08c4987625d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:76:7c:14:cf:89:e6:dd:db:c1:0b:3d:9e:
                    37:80:92:8b:5f:5a:23:09:0d:24:f5:2d:7c:c4:40:
                    29:77:41:69:fa:96:35:37:39:a9:82:1d:89:7a:e6:
                    0b:9c:a8:d0:46:a1:46:43:eb:87:50:d1:f6:da:e1:
                    76:ca:f5:66:11:ee:63:44:4d:a7:bc:ad:66:7c:18:
                    09:a8:79:e5:ca:58:e6:1a:cd:21:91:3f:8f:60:fa:
                    51:ae:8b:6b:ee:38:a1:d5:0f:0a:8d:ff:60:a2:ee:
                    3f:9b:ea:01:de:2d:9a:ae:c3:a0:5b:fe:50:9e:7d:
                    16:ee:c3:c4:9a:d7:78:03:82:3f:00:f5:0a:e5:60:
                    93:bf:b2:f4:33:78:1d:cf:8c:51:28:99:30:e8:d3:
                    75:57:34:47:bc:2b:5d:f0:c0:75:a0:06:83:69:4a:
                    96:44:cb:94:6f:00:aa:da:db:4f:f4:da:43:3c:f2:
                    d4:31:68:2d:27:f5:ff:d4:0e:27:ac:84:71:ce:8e:
                    90:63:5e:24:e9:e5:a9:6b:31:aa:46:da:0f:eb:98:
                    59:73:c7:55:01:15:41:f6:fc:58:a6:6f:30:d1:ae:
                    44:c8:3e:6c:4f:fe:5a:88:2a:62:3b:46:1b:d9:57:
                    b6:06:32:5b:f4:77:42:eb:67:35:c0:8f:8b:81:88:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:26:3A:6B:69:29:DB:F0:1F:2F:F7:E1:9C:CB:A9:0D:10:45:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:39:0a:d8:3c:b1:82:ce:83:99:84:0d:5f:6a:8e:fa:4d:1b:
         9a:6c:88:66:6f:1b:9a:80:49:2a:1f:98:bb:df:52:63:8a:c0:
         8d:c9:ed:a7:9c:49:f0:02:51:c2:f7:f8:12:3f:32:91:cc:2c:
         9f:d5:f8:74:11:82:2c:33:03:b5:69:d5:0c:32:d3:29:71:51:
         61:23:ca:31:0b:dc:0d:17:7b:1f:f7:a4:cb:bf:90:0d:84:40:
         8d:66:3a:95:1a:28:16:4b:7e:b4:e6:93:48:c3:8b:63:36:80:
         7c:a6:81:e8:a2:a5:fa:68:ac:1f:0c:4d:71:04:1c:e8:3d:0e:
         98:95:dd:3a:aa:0a:ab:64:fa:62:46:08:f7:1d:7f:8f:19:4d:
         df:97:6f:9d:80:43:a1:fd:04:c2:3f:20:1e:ad:fa:41:92:c1:
         1d:43:89:ac:14:b6:f6:1f:8f:54:8b:00:c1:28:0d:2b:c2:48:
         09:5f:51:bd:7e:23:28:e4:a1:52:75:1f:b5:f0:51:79:8a:33:
         4f:a2:06:71:2c:0d:f0:9e:e3:de:62:e0:50:56:50:4e:e7:2d:
         af:f8:70:4b:59:c2:c4:29:65:49:f0:cf:5d:83:99:a7:da:a3:
         08:9d:45:09:60:19:8c:7b:da:34:0c:73:e7:6b:2d:01:c8:a1:
         8d:bf:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:03 2026 by rpki-client