Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c37fde8c-24f4-3fe0-8cf3-3569a8b0c818.roa
File:                     c37fde8c-24f4-3fe0-8cf3-3569a8b0c818.roa (raw, json)
Hash identifier:          QVwxqVmYuXD+2pHmaGAx3PZczMcZDqEnWH+/Qx4eZ+A=
Subject key identifier:   5E:DA:3C:CB:38:FB:EE:74:B0:07:E9:FF:27:6D:39:01:B1:06:D0:E0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DE77985F486E17EF016A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c37fde8c-24f4-3fe0-8cf3-3569a8b0c818.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.196.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:e7:79:85:f4:86:e1:7e:f0:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=814cb8f9-ca91-40ea-92e9-5013baec289f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:bf:4f:9e:03:17:b2:a2:4c:cf:53:1f:d3:
                    3e:51:7c:09:b5:b9:b1:f8:3d:9e:63:6b:55:65:bb:
                    68:d0:f4:7b:46:7d:46:36:af:8d:1c:5e:87:2c:3c:
                    cf:de:a5:e9:af:87:63:76:f6:37:22:9e:b5:27:60:
                    bb:29:43:62:1a:49:f6:3f:f0:32:0d:2f:3f:96:99:
                    86:af:7d:e8:93:95:43:4b:e6:a3:ed:2c:af:41:e7:
                    f1:1b:83:07:6b:95:87:c3:f7:6c:4e:22:8e:dd:ec:
                    5b:c7:c1:72:ae:88:f8:96:3c:21:fb:21:1b:22:7c:
                    52:1b:02:aa:56:11:1b:0e:d0:4e:36:0f:41:5a:32:
                    3f:3a:0d:2c:1b:c6:aa:26:87:8d:6b:4c:26:32:cd:
                    5f:30:d2:26:d6:69:90:e6:83:1d:e0:46:fa:8e:5b:
                    65:ac:f7:22:3c:50:94:0c:95:24:a1:9f:cd:83:7f:
                    55:4a:7e:ca:55:19:cc:4c:27:59:0d:74:0f:5c:b1:
                    69:61:88:ee:47:3b:fa:10:eb:17:8c:8d:e1:7e:b5:
                    3d:8b:63:75:76:a0:72:6d:fd:c1:6a:65:ee:80:71:
                    42:34:c4:d5:64:bf:36:c6:2c:4a:0d:16:a7:b8:97:
                    2f:e9:20:1e:ad:cd:16:71:f8:ea:be:c0:88:6b:3b:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:3C:CB:38:FB:EE:74:B0:07:E9:FF:27:6D:39:01:B1:06:D0:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c37fde8c-24f4-3fe0-8cf3-3569a8b0c818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:04:9a:bf:bd:b3:21:18:3f:b1:89:39:7d:97:ea:bf:c8:3c:
         15:5d:b0:a3:61:6a:2a:13:ac:fe:ff:da:0f:a2:b9:d8:00:b0:
         fa:7c:91:07:5d:a9:7e:99:e2:98:52:7a:9d:38:05:8c:89:24:
         40:df:e1:4b:b1:16:1d:7a:05:dc:92:cb:51:ae:6f:12:91:70:
         db:23:75:28:bd:52:64:ec:e5:57:c1:45:7e:5b:5d:46:6a:c8:
         33:53:b9:9a:f2:11:9e:3c:6d:25:1e:6f:02:11:46:85:a6:f5:
         97:eb:41:d3:d3:68:4f:e1:94:b5:1b:2a:75:03:6a:d7:aa:c3:
         cc:e4:bf:5d:eb:4c:4a:5a:d8:ac:d7:c1:15:98:02:2f:c7:cd:
         79:af:8b:f6:c0:1a:09:27:d5:71:34:ae:5c:5b:c9:0e:48:3f:
         d4:25:b2:cc:b8:a0:76:27:cd:a1:c7:22:7f:c3:99:31:57:96:
         90:4a:7b:6a:9c:a6:d0:8f:ee:6c:f8:6e:12:25:db:5b:ae:de:
         03:5b:09:68:ce:bf:c0:0b:86:2f:d3:5e:84:49:64:4d:19:49:
         b1:ee:19:97:d6:fc:59:1e:2f:12:0f:6b:d6:ef:18:ab:83:89:
         5d:5f:bb:ae:fe:b1:3e:cb:1e:b6:65:a4:1f:91:1b:69:61:ea:
         c5:d9:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:40 2026 by rpki-client