Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa
File:                     c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa (raw, json)
Hash identifier:          upU/+LtUbZNqrQOM6EBQYTATGeeBzRltQSJjuFLLcRM=
Subject key identifier:   C3:80:7F:67:54:07:8A:F0:E3:49:98:FA:AE:53:75:B9:91:36:E9:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C05CFD107FF64FCAB5180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.197.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:05:cf:d1:07:ff:64:fc:ab:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=477a8708-9a73-4dfc-9796-d9569c8ae956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:23:4d:18:f0:1a:32:0a:a7:d7:af:4a:1a:b8:
                    28:15:cc:c5:eb:e3:05:6a:b9:55:45:4b:94:e0:56:
                    46:82:2a:92:74:2a:ea:2b:f3:d0:d8:b8:82:c5:14:
                    c0:40:af:a2:a3:d1:a9:8b:a9:a7:51:96:a8:c2:31:
                    e8:b4:54:12:fb:3a:b2:bb:58:17:bf:b9:ce:76:fc:
                    a8:2f:f5:f9:67:ad:fd:0c:4a:c7:0c:21:ef:c0:ad:
                    d0:25:e9:46:db:57:ef:8a:c3:2c:04:9b:fb:dd:56:
                    99:e9:f2:15:f2:68:57:c3:7a:0f:35:42:ce:f1:85:
                    7d:5d:6d:37:fb:67:a4:83:a0:29:0d:6f:d1:38:56:
                    59:26:b0:04:47:04:1d:16:a2:07:08:12:03:09:50:
                    30:5a:9a:fd:cc:7c:c7:89:20:31:4f:38:f4:02:90:
                    c9:57:e8:25:34:6a:33:ab:06:1b:04:02:a4:fb:86:
                    67:84:1b:f6:b1:e6:b6:a3:df:9a:19:1c:73:d1:7e:
                    7f:ac:f7:05:9e:ae:04:d9:ab:2b:ba:84:00:d8:50:
                    c8:d2:33:19:58:ac:5c:91:fe:91:73:64:df:87:21:
                    ed:43:6d:ce:df:ed:78:31:90:a4:6d:fe:50:86:0e:
                    38:07:5f:1f:5a:77:da:64:7d:a5:76:c3:d9:5c:14:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:80:7F:67:54:07:8A:F0:E3:49:98:FA:AE:53:75:B9:91:36:E9:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c45326f4-7c19-38a0-8566-a28b6b6fc77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:2e:65:a5:47:c6:64:98:3f:d8:81:f8:27:d0:69:93:bb:
         25:d3:9c:df:26:6f:70:28:a6:48:49:6e:2a:8c:15:b4:f4:c4:
         ae:7a:c7:57:0a:26:23:74:ba:c8:9d:3d:0f:ea:c9:c7:40:5d:
         de:0f:27:25:7b:1f:e5:dc:59:5e:f8:18:87:19:6d:44:6f:83:
         61:55:62:2c:00:d8:e3:22:47:64:82:da:c3:30:39:9c:34:da:
         be:65:cd:a6:ae:ba:67:11:8a:fb:e1:c3:23:d6:65:59:6c:21:
         b4:9c:7b:5a:e4:e0:3b:21:3d:e6:57:47:dd:78:9e:78:b3:26:
         2c:e9:3f:5c:5c:78:ec:6f:e9:70:d0:29:08:0e:9c:5a:cc:85:
         29:76:86:83:43:75:d3:08:60:9b:29:3d:ef:cc:e6:09:f7:1c:
         5c:32:5a:f4:99:2e:f4:90:dd:8c:68:a9:33:eb:bf:9a:c8:b7:
         eb:ee:71:ac:35:bf:db:2e:eb:b0:b1:c3:9b:bc:0b:5b:29:64:
         35:fb:b5:86:54:ad:7a:68:5e:db:7a:a0:0c:d6:03:64:15:11:
         0d:98:31:33:be:b3:68:9a:6d:db:fc:3a:56:f1:c9:eb:0d:2d:
         c6:56:6d:07:c8:67:42:3f:a4:4c:06:9f:11:1a:f6:e1:d2:9b:
         44:18:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:41 2026 by rpki-client