Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa
File:                     b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa (raw, json)
Hash identifier:          iTdoOKawAXZnOi1ottsx1G8O6vmzoE6m2F39XxaLXMk=
Subject key identifier:   D6:56:70:FA:15:58:01:44:7B:5E:8F:49:D1:6D:07:DC:8A:F2:69:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B87E337E6B773B24A6420
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.196.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:87:e3:37:e6:b7:73:b2:4a:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=896035a3-a0ee-400f-944e-bdef31e1631e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:2a:2e:de:fe:cb:50:29:3e:c1:8c:0d:a5:
                    3e:e4:d0:f7:15:0f:64:b0:8f:c9:ab:6d:ec:94:88:
                    c1:a3:05:fe:35:fd:25:ff:30:26:73:27:2f:8c:26:
                    a0:72:f7:f0:11:20:32:d0:61:cc:d1:71:95:96:07:
                    96:e9:e2:cb:41:e6:d5:1d:d8:98:aa:79:a0:37:5d:
                    aa:38:6f:45:e1:c8:32:80:f5:f1:49:0e:8b:8f:c6:
                    a8:b4:c8:e6:82:6b:05:f8:77:1f:f4:05:45:f1:b0:
                    ff:31:9d:5c:01:d0:bb:7d:23:9e:f2:69:ef:48:6d:
                    01:d6:67:40:32:a4:94:7b:5a:02:9c:ca:02:6c:1a:
                    9d:14:1d:09:d6:d8:a0:7f:93:d2:c7:a1:7a:f7:2e:
                    6e:fe:7a:2e:02:4b:25:66:a2:5d:90:15:b9:a2:df:
                    63:e6:24:c2:de:ec:5b:98:15:a2:f3:cd:f9:ea:42:
                    90:1e:e5:54:3e:fa:fc:ef:7a:cb:fa:3f:f7:c9:70:
                    92:7d:c8:44:61:6d:5c:93:54:ea:e5:73:c6:2d:98:
                    ef:a1:45:80:da:c9:eb:84:0c:75:8d:c7:f3:38:68:
                    8f:a2:6e:f0:50:92:40:0e:7b:8a:a0:c8:83:57:f6:
                    a8:b6:0d:fd:68:d8:5a:73:1e:85:c6:f1:d9:2d:2a:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:70:FA:15:58:01:44:7B:5E:8F:49:D1:6D:07:DC:8A:F2:69:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:9e:03:d9:99:93:dc:fe:79:a6:dc:75:f5:04:4b:32:fc:
         dd:d1:29:d9:94:5b:9a:6d:2e:a6:29:02:20:ea:b5:0a:bd:d2:
         d2:ea:c3:0e:70:2b:15:26:d1:44:74:7a:75:53:39:0f:e1:1f:
         09:20:2d:ae:e8:fc:d1:63:a2:81:9d:03:f3:8f:7f:dc:ff:52:
         6a:7d:6b:5a:5d:6d:0c:b5:c3:c3:38:b1:77:7c:55:2a:db:ed:
         ee:16:85:51:e1:db:c4:4d:38:dd:ae:84:d7:74:c5:45:e2:9c:
         c6:be:cc:12:30:44:a9:8b:b4:40:3e:23:95:e8:d5:8c:78:ca:
         32:62:10:3b:83:62:54:ed:dd:85:1a:68:34:e0:06:c3:f3:73:
         68:7d:80:21:0b:a8:52:55:b2:c5:1d:e1:e9:5a:05:d7:5a:e8:
         a2:e7:85:4a:66:3c:b2:e6:6e:e6:ab:95:5f:e8:f6:e5:b3:94:
         b3:e0:cf:29:9c:8b:75:52:18:b4:a6:a5:6e:6f:cf:d2:34:56:
         bb:7f:5d:09:22:f9:d6:e9:db:cc:5e:3d:8d:23:21:c0:3e:2f:
         2c:29:88:f8:77:d8:07:ed:34:1c:d2:94:da:2a:b1:0b:88:7a:
         2d:1a:86:3f:62:a2:d3:19:c8:ff:20:ab:d7:ac:cf:be:f6:b1:
         51:b7:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:43 2026 by rpki-client