Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb4ec6d5-bf2f-30e3-9b1d-91a850afc2ba.roa
File:                     cb4ec6d5-bf2f-30e3-9b1d-91a850afc2ba.roa (raw, json)
Hash identifier:          O9AyFnqaNCFYwfAWae+EIoQCrhT1jEvsMmq4icnSMRo=
Subject key identifier:   20:1B:16:79:F2:71:36:BB:1C:44:1E:71:7E:B4:97:99:8F:30:9A:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B8C46FE0B943263A68998
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb4ec6d5-bf2f-30e3-9b1d-91a850afc2ba.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.197.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:8c:46:fe:0b:94:32:63:a6:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9e28b20a-b30f-46b4-998d-f5a3ddc83c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:d0:28:52:a9:74:c8:08:80:e2:3d:63:75:
                    08:1e:59:8a:bb:5c:78:e2:7d:d0:20:62:86:75:59:
                    98:88:19:d4:6d:4a:88:35:52:28:1d:dc:26:bd:73:
                    68:cb:7a:16:cb:37:e5:12:6b:88:12:2c:77:73:30:
                    61:51:c8:1d:db:74:ec:43:04:b9:d8:ad:a5:64:8b:
                    79:b7:b1:90:b4:82:b4:05:cf:d7:7f:7d:a7:61:cd:
                    95:ef:10:cf:cc:89:61:00:cf:57:7e:c7:86:df:13:
                    96:9c:bf:71:1f:70:2d:cc:34:ef:1f:12:51:6f:6a:
                    45:38:41:4f:82:e5:19:39:af:6a:8f:98:8d:bb:8c:
                    b1:a0:1d:8a:a8:fb:58:0b:88:1d:16:b2:b6:b0:a1:
                    e3:d4:34:1b:0d:19:9a:eb:af:18:b2:84:b8:9d:16:
                    61:4f:ec:94:1e:a9:30:2f:98:b0:bd:4e:1e:0f:c5:
                    c9:d4:12:57:ea:bf:a2:cd:f8:aa:d2:37:1c:11:e8:
                    b6:72:8f:87:b5:76:90:89:b9:ea:0d:3f:bf:03:4e:
                    7c:8b:ec:e1:46:57:5b:e1:b6:90:8b:3e:91:e9:88:
                    c1:05:6d:a9:ef:5b:d8:7d:49:c3:7b:37:38:25:ab:
                    6b:a4:d2:c4:cf:76:8e:90:1b:f9:83:cb:5b:7e:e7:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1B:16:79:F2:71:36:BB:1C:44:1E:71:7E:B4:97:99:8F:30:9A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb4ec6d5-bf2f-30e3-9b1d-91a850afc2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:e7:39:d1:5a:f1:ae:39:0e:2d:5d:51:0b:b7:cd:0d:dc:
         0e:f6:7e:77:4b:f9:1e:cd:e0:aa:04:01:a3:1e:ed:51:60:3a:
         eb:b3:49:60:b6:20:4c:99:8c:17:58:e8:65:5c:e2:aa:d4:53:
         dd:d2:c7:72:52:b8:e4:93:1e:54:df:6a:13:82:ed:37:18:42:
         4f:10:75:26:2f:2c:d8:83:97:97:00:3c:d1:32:13:91:51:c4:
         f1:01:41:4b:ef:6f:e5:e1:70:59:93:53:2a:18:f5:0d:88:fe:
         83:3d:0d:28:0b:60:31:cd:9f:ab:23:d5:74:02:33:45:d9:bc:
         de:ab:d0:d8:a0:a5:b8:21:3e:5c:ac:f3:b4:57:89:67:07:d8:
         96:18:c9:09:b3:f0:42:8c:99:05:68:c7:8c:37:4e:55:52:3c:
         9c:ce:8a:c1:1f:c2:26:c8:68:47:10:c3:a0:ef:5b:bb:87:aa:
         40:57:7c:d1:94:bf:19:96:66:46:70:8d:84:09:6b:22:a0:64:
         49:04:eb:c6:72:25:95:55:e6:ee:53:bd:5d:80:62:cf:e1:04:
         67:20:76:e9:84:7f:bf:45:5f:51:d4:dc:47:60:4d:f0:39:e7:
         74:6e:7a:61:d6:76:94:25:ac:48:91:67:d8:be:f1:ee:16:7a:
         83:ee:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:47 2026 by rpki-client