Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56273e46-cd80-341a-b5b3-88260354b9f5.roa
File:                     56273e46-cd80-341a-b5b3-88260354b9f5.roa (raw, json)
Hash identifier:          Fb8ARkI8v+SoE68JWCIryq/Dih4X9x6oaO/2OFjfArM=
Subject key identifier:   22:FE:1E:D0:64:F0:67:4F:4B:3E:B6:36:02:81:76:61:AD:EB:DD:25
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B328C403362AB62A4A7BD4280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56273e46-cd80-341a-b5b3-88260354b9f5.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     40306
IP address blocks:        99.196.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:40:33:62:ab:62:a4:a7:bd:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=a1b9303a-68c9-48b6-8003-74d35c9229bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:18:f6:0d:05:1b:a9:20:8f:ca:ce:2b:c3:
                    9c:ec:8c:a7:d2:0d:8d:e9:b4:0d:02:5d:dc:cc:5e:
                    96:07:97:b3:1f:ae:ca:2a:76:2e:5b:38:72:a4:9e:
                    74:0c:23:eb:f2:66:1b:75:1f:4a:af:8f:43:09:ba:
                    96:c9:1c:1c:26:43:55:64:54:2a:0f:27:9c:e9:eb:
                    e6:25:2e:07:44:57:7c:22:21:ae:bb:3f:fe:4b:fa:
                    54:73:19:6b:f5:7a:d7:5d:ba:23:52:4a:11:28:05:
                    cc:0e:46:8d:6c:8c:2e:55:49:b9:5a:19:84:89:d0:
                    1c:1f:b9:83:1f:68:76:0c:da:78:97:83:8b:4a:3c:
                    e1:88:cb:f8:7f:7f:aa:6c:e3:42:5c:0a:9c:a9:43:
                    24:3e:7d:a4:0d:32:f8:b5:ae:2a:b6:0b:9e:c7:a0:
                    48:c2:c0:1e:10:56:43:3f:8a:43:b8:4d:f3:c2:a2:
                    cd:9e:11:4e:ee:2f:ba:e5:e3:41:49:29:03:a0:75:
                    d8:e0:a0:79:b8:bf:9e:02:93:19:50:74:f8:83:3d:
                    23:e7:6c:81:db:e8:36:f4:f0:f8:1c:ad:6f:dd:1c:
                    c9:e5:2f:3c:e9:25:25:b0:1b:a3:32:ee:48:ea:10:
                    c1:10:a6:88:49:4b:bf:cd:73:db:46:09:a1:56:8b:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FE:1E:D0:64:F0:67:4F:4B:3E:B6:36:02:81:76:61:AD:EB:DD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56273e46-cd80-341a-b5b3-88260354b9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:99:83:e4:fc:22:54:9a:d0:2f:9c:48:a5:48:11:01:18:3f:
         bc:b3:d0:ce:cf:b7:c6:66:3f:c9:c1:a2:ae:8d:9e:ee:12:48:
         34:23:ae:47:c8:00:bb:94:1f:99:54:11:99:0e:a9:57:38:c1:
         01:4b:06:99:0c:17:3f:73:7a:c2:d3:c3:d2:45:47:91:f9:5b:
         ef:e4:c5:d4:db:0b:cb:0c:20:d2:71:84:cd:19:c8:2d:c4:ae:
         8d:5d:ef:32:6b:20:b8:1a:29:36:13:f8:a4:94:3a:09:7d:65:
         ef:80:24:04:e9:a8:c3:b8:07:e9:f0:f7:e6:96:59:b6:29:89:
         97:e6:c1:03:0b:1f:ac:5d:e2:d5:c6:06:20:35:6a:2f:86:28:
         ca:e3:9b:8f:e0:f6:b0:b8:a5:cd:54:95:ca:e0:3d:c7:1c:9c:
         c8:59:07:90:e0:e1:c3:34:5b:33:60:ac:e1:38:c4:52:32:6c:
         d9:bc:eb:41:f4:59:47:14:98:44:f2:78:78:06:f9:58:07:e8:
         73:3b:fa:f0:a8:d0:e9:8b:1d:09:e8:9c:d1:d6:c2:a0:99:92:
         a4:04:98:b9:96:b1:3f:a3:e4:cf:e3:04:e3:81:3f:a9:90:50:
         a8:d3:2d:a9:c6:e2:c5:07:3f:a4:a5:17:3f:5d:bd:20:59:5b:
         22:8c:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:11:54 2025 by rpki-client