Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91bd755c-e831-3b68-af87-73a6d97be6be.roa
File:                     91bd755c-e831-3b68-af87-73a6d97be6be.roa (raw, json)
Hash identifier:          HpT2ikJ45bgSbcSnU3ISqk3COCJcNJlqrMeyJ+4WPsU=
Subject key identifier:   D4:1E:A1:9A:41:92:F0:76:79:40:5D:27:28:A3:79:D1:06:61:E7:D9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B71313A82828B47E5D040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91bd755c-e831-3b68-af87-73a6d97be6be.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.197.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:71:31:3a:82:82:8b:47:e5:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=84094736-89c7-4a36-914f-79acadee94d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:0c:16:eb:73:63:cb:ba:77:60:b4:15:8d:
                    52:14:fe:b1:55:82:65:27:41:e8:32:6d:87:52:83:
                    54:ee:4d:6c:bf:aa:f9:ca:ce:4a:b1:70:8e:16:03:
                    32:01:37:98:28:57:ef:ac:c4:55:65:c2:1d:93:43:
                    6f:72:ec:c7:63:da:05:38:d9:cb:20:a7:a4:81:0c:
                    45:1d:8a:59:e0:cf:7d:6d:78:8a:f5:25:5d:94:3b:
                    db:da:7b:05:26:2f:5a:b7:0e:8a:8d:eb:ce:df:93:
                    cc:ca:fd:87:72:05:db:4d:da:2f:59:93:09:cb:fb:
                    fb:0b:cb:b8:6b:7b:00:9d:9c:71:8c:97:2c:e8:a5:
                    b5:9a:48:d2:60:0d:3b:e0:db:4a:f3:62:f0:18:46:
                    53:76:3d:e2:d3:5c:08:70:88:de:ff:5f:92:ff:1e:
                    d1:04:33:b0:0b:a5:0f:98:e3:ef:25:fc:b1:59:35:
                    ba:b7:04:e0:5b:c8:df:ff:c3:0b:eb:de:ef:fb:ff:
                    2b:07:6d:5d:b1:6d:fb:35:43:61:1b:01:89:2c:9d:
                    18:88:4f:6f:01:6b:b5:f2:d7:28:c7:0d:ed:66:8a:
                    c1:8d:19:5c:d3:e5:b0:21:f2:be:d7:35:76:9e:89:
                    e0:03:c5:df:ca:c7:70:b0:8c:e7:bf:f5:e5:96:50:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1E:A1:9A:41:92:F0:76:79:40:5D:27:28:A3:79:D1:06:61:E7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91bd755c-e831-3b68-af87-73a6d97be6be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:5e:b7:66:79:86:8f:3e:40:95:c6:9c:5d:6c:81:01:bc:
         45:cc:21:00:01:dd:00:6e:93:47:10:fd:dc:c9:d3:c5:82:ca:
         dc:5a:c6:d5:d2:fe:42:02:12:b5:6a:3e:a1:b7:3b:01:eb:a9:
         28:36:76:53:2b:c2:42:7c:03:fe:6d:31:86:1d:08:e5:51:f6:
         07:66:df:b8:ff:3b:7a:3a:77:ae:bd:7a:41:20:74:e5:0f:c8:
         91:9f:fb:13:de:d0:93:f3:3e:23:d4:70:41:9f:08:18:2e:f3:
         06:79:17:bd:ee:22:1f:ca:d5:6b:a7:ea:c7:56:4a:a3:19:3d:
         27:ea:02:b1:e3:90:34:03:34:b6:fc:ce:7d:97:7c:43:04:fe:
         43:d7:0a:20:a9:29:fb:8b:f3:87:30:88:c6:6f:ec:70:98:fa:
         05:5f:41:7b:a5:9d:97:78:5a:4f:76:c3:5d:ee:95:03:6f:3f:
         6b:19:dc:ad:37:ad:cd:c8:ee:e4:fd:78:e3:02:06:28:21:44:
         fd:36:c1:c5:0d:16:ee:33:25:cb:ba:c9:ce:42:9f:ba:42:9f:
         3e:06:35:d7:26:5e:f1:40:cd:c5:76:21:a4:88:ff:1b:12:76:
         6c:44:0f:b1:f2:e6:6c:11:59:8a:01:e8:56:77:e1:67:94:03:
         8f:9f:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:00:19 2026 by rpki-client