Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa
File:                     c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa (raw, json)
Hash identifier:          x45Q6LR3S9bbkoIOpaK10qgxZ4+SS3UGmehmAw1ZP1o=
Subject key identifier:   36:30:15:9B:3C:7D:B2:88:6E:F3:64:F0:FF:5B:2F:5C:C2:96:06:6F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F498395FA41C49D7A1A02AD80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.197.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:95:fa:41:c4:9d:7a:1a:02:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=00f790a3-1a85-4e00-964c-0c33deff4127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:89:75:08:a1:98:cc:fb:ab:38:fc:8f:95:
                    86:51:06:4e:3d:ca:ac:0c:54:6a:f1:7a:42:8d:f2:
                    2a:fd:5a:8e:d1:6f:0a:a1:8f:b3:65:e1:ab:cd:12:
                    41:9a:0e:1a:5c:ed:6a:32:e8:07:29:09:23:5c:4b:
                    95:5b:50:64:e3:cc:45:a2:5c:ec:7c:24:3b:0e:ad:
                    62:75:f7:01:34:f0:dd:47:85:b4:00:44:9c:41:63:
                    16:83:a0:aa:06:c3:66:19:80:ef:09:e8:b1:a8:8a:
                    20:f7:1e:cb:24:84:4e:ca:ac:74:4c:5e:40:e9:da:
                    60:7e:ef:31:94:12:f8:a0:31:8b:c2:75:89:85:d8:
                    39:39:94:1a:a1:53:b9:1e:9b:4f:8d:7e:18:cb:ae:
                    42:bb:6a:8e:fc:49:bb:5b:90:8e:d1:46:51:d0:b1:
                    1a:90:77:5b:04:cf:40:d7:0c:7e:1a:01:80:fd:5e:
                    f4:2a:c8:18:6e:ea:6f:9e:78:11:67:8c:60:c0:5f:
                    6b:c6:4a:77:8c:3a:b7:a3:13:14:7a:5b:ad:b8:e9:
                    0e:d3:29:42:04:33:38:58:76:e5:56:25:f8:95:cd:
                    ab:96:18:92:68:c6:e9:60:d8:c1:ea:ac:de:15:ec:
                    b0:20:47:19:8e:2b:c3:f3:0f:1c:f1:9d:e6:72:6e:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:30:15:9B:3C:7D:B2:88:6E:F3:64:F0:FF:5B:2F:5C:C2:96:06:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:18:ee:bc:fa:fb:5a:5f:bc:dc:7f:0f:2d:4e:ee:24:03:
         a8:c0:c7:51:63:cd:84:c7:e9:99:8e:8b:78:86:42:0b:2b:15:
         4c:0e:ff:23:74:d0:bb:db:84:b4:57:a8:e7:19:97:a8:37:05:
         47:c8:58:47:ac:1d:1e:2f:c8:a3:15:4e:d1:29:af:9d:4c:95:
         b1:b9:13:5f:8b:cb:26:b5:e4:0c:27:33:37:5f:f9:a7:e7:0e:
         51:df:a1:9a:6a:29:72:12:54:ff:67:d7:d6:fd:ab:12:50:3f:
         3b:b1:6a:cc:b7:e4:7f:3e:e8:f5:ff:42:71:06:e9:9f:a6:1e:
         d2:25:bc:ed:b2:dc:96:23:e0:79:14:c2:a3:ac:2a:12:51:7e:
         2e:33:b0:be:6d:fe:de:fb:5b:fb:74:0e:a7:a9:d8:d0:cd:cd:
         1d:97:e9:38:f8:ff:ff:c6:8d:90:c4:68:e2:f0:c4:4b:d5:8a:
         71:a1:1a:6c:e8:56:3a:0a:01:cf:15:17:64:7c:93:3f:88:1d:
         e3:0e:09:5e:c0:38:8e:86:41:df:a1:9e:0a:a3:17:1c:99:b3:
         c8:3f:6c:d2:8d:9b:3f:50:45:c6:77:cd:8f:16:c0:54:b2:77:
         7e:4f:b1:84:3d:45:bf:7d:07:d0:ee:0a:46:82:6a:b0:7c:23:
         1b:3a:a7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:27:04 2026 by rpki-client