Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9b0f9ca-b8ed-3aef-b739-fe3b9399caf5.roa
File:                     e9b0f9ca-b8ed-3aef-b739-fe3b9399caf5.roa (raw, json)
Hash identifier:          Gp+P1LMWvZCVrVTYvyUEeWGGsYiNGI+75ZKeAkIItQc=
Subject key identifier:   58:91:05:E9:A9:97:8E:41:AC:F6:A9:87:6E:32:FF:A1:FE:DA:5A:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DF904DE4B2AAF1A4A1080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9b0f9ca-b8ed-3aef-b739-fe3b9399caf5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.197.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:f9:04:de:4b:2a:af:1a:4a:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ad92cbb-5eff-4a8d-b798-e35c2a1e4aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:b7:f2:1c:7b:93:ea:02:21:86:bd:90:22:
                    ee:82:2b:33:77:89:ae:ac:cb:58:2f:17:e8:12:c2:
                    c4:20:2d:74:54:68:53:d3:32:59:a4:ad:16:a1:0e:
                    14:77:e1:06:be:bb:30:44:40:54:a2:a6:69:40:b7:
                    37:81:6f:5b:ec:8c:8d:db:31:5e:24:a4:02:5f:fb:
                    03:d0:55:40:95:7d:90:3b:d0:19:42:a4:81:d7:39:
                    ca:86:e9:1a:3c:39:15:6b:a2:cc:42:37:da:4f:b7:
                    54:3a:83:df:ec:78:99:5b:37:98:5e:8c:e7:ed:6c:
                    d5:ec:f5:44:8c:66:ad:e3:50:99:39:62:24:e8:e3:
                    77:e6:2c:bd:f0:53:46:d6:ed:fd:ed:b1:49:38:d7:
                    ce:27:60:2e:c0:8b:bb:25:55:84:37:b2:be:65:be:
                    a0:4f:0f:0c:bd:8a:f9:c0:bb:eb:a6:bf:0b:c1:b7:
                    80:90:47:de:ef:da:3a:87:a9:29:aa:d0:88:80:6b:
                    42:ed:d6:56:c9:20:71:a7:d6:79:6d:65:ef:a5:fd:
                    a6:e2:40:c4:49:93:f0:bb:ce:29:7b:dc:4f:5a:5a:
                    97:76:3d:5a:21:21:3b:7c:08:83:4e:42:6a:de:4a:
                    73:b6:75:e6:c0:ac:d1:52:1e:0c:f3:11:33:08:9e:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:91:05:E9:A9:97:8E:41:AC:F6:A9:87:6E:32:FF:A1:FE:DA:5A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9b0f9ca-b8ed-3aef-b739-fe3b9399caf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:1c:38:48:67:49:ba:d0:53:9f:a9:45:82:9f:db:d7:e9:
         47:23:ad:03:a1:83:5f:74:f7:e7:b0:37:af:c8:ef:b8:e0:e8:
         00:0f:35:d3:84:5c:3a:70:ab:bc:d1:a0:fb:df:d5:1e:8f:fa:
         93:9d:56:ec:09:dc:bb:f9:a0:e3:d5:47:b6:bf:a1:90:31:fb:
         03:7d:c3:f8:42:4f:cb:ac:9c:f6:93:d7:dd:65:74:01:96:b5:
         e3:dc:c9:c9:6f:7a:c2:af:3f:db:da:d9:78:19:11:2e:dc:62:
         1f:35:bc:36:ca:cc:7c:90:fd:8a:8b:69:c0:41:66:24:9f:be:
         65:ce:fb:f4:82:12:cb:49:48:81:d7:55:37:4d:4a:7f:77:84:
         cd:ba:1d:7f:40:d9:fa:90:58:d7:3b:1a:aa:c3:57:7e:b5:7b:
         99:08:e1:ae:e5:58:54:30:19:bb:60:1e:db:80:43:1b:c0:8a:
         dd:85:e2:ae:34:a5:61:4b:c2:25:21:40:e2:b3:3e:0d:38:bd:
         51:c8:f6:14:27:4a:02:29:a8:8e:a2:2c:f1:b4:d3:3b:9d:66:
         46:05:07:ff:3e:2a:98:9a:12:65:c9:d6:8a:1d:e7:e6:e9:01:
         43:71:23:a9:47:b5:1f:1b:de:71:9c:d2:bd:42:71:c9:89:9c:
         99:b5:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:59 2026 by rpki-client