Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e03d3c31-8ec1-31ab-addc-1578fd1747a9.roa
File:                     e03d3c31-8ec1-31ab-addc-1578fd1747a9.roa (raw, json)
Hash identifier:          nU+8LtGRgHI49of7ARJDDXFLC7kPdOwaFdNLz1FULic=
Subject key identifier:   3C:2F:B9:AE:C3:C8:47:EC:58:63:08:CA:60:5D:E0:FF:87:E5:87:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFEB4A400CA87B8008BC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e03d3c31-8ec1-31ab-addc-1578fd1747a9.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:eb:4a:40:0c:a8:7b:80:08:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8e9a64dc-f2f6-4df9-a8da-52b6de011dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:ff:a0:4c:94:49:68:eb:3f:d9:91:ee:4f:
                    e7:0b:54:94:43:89:e4:e6:06:40:d7:de:99:c4:de:
                    da:3f:da:00:81:dc:1f:f3:86:1e:a0:3c:0e:ec:84:
                    92:30:e4:eb:d0:97:87:1b:28:9c:b4:2b:c2:d0:45:
                    ae:0c:c5:47:d4:cb:e1:dc:16:e8:21:f3:0c:cf:4a:
                    da:6d:d3:8a:6b:2e:03:4c:07:fc:5e:f2:23:e2:75:
                    4f:2b:07:10:31:48:fe:a9:4a:4b:ef:1b:d0:98:fd:
                    76:c7:f0:02:d1:42:c5:fc:b8:30:a3:dd:01:56:79:
                    28:a9:25:69:21:98:6d:d5:e1:1f:9f:5e:f8:dd:eb:
                    e9:c6:61:3f:d3:c0:8f:76:07:e0:c6:2b:77:d9:de:
                    ae:f6:3b:20:49:6a:53:e2:2b:b6:b9:94:35:1e:db:
                    b2:c3:16:56:af:b2:f6:fc:52:92:f5:35:1c:95:0b:
                    ff:ce:e0:cb:c5:2f:e8:0d:dc:52:1c:9d:01:1b:ac:
                    f7:ca:aa:31:eb:24:9b:85:78:fc:a8:65:01:2b:5a:
                    61:d4:69:09:7b:3b:8d:80:b9:e2:da:36:f9:40:8c:
                    44:d7:f5:71:60:67:ca:15:fb:33:6d:90:a8:3e:8a:
                    5a:af:ec:c1:e2:18:64:a8:36:58:96:95:d7:07:1b:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:B9:AE:C3:C8:47:EC:58:63:08:CA:60:5D:E0:FF:87:E5:87:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e03d3c31-8ec1-31ab-addc-1578fd1747a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6d:d3:55:e2:36:0c:a3:e3:9d:ec:d7:d7:bc:7a:f3:ea:37:
         4d:11:23:4f:40:04:27:ba:24:3f:cb:1f:13:bd:c7:9c:5a:8a:
         15:0d:b6:b1:1a:d9:f3:88:c7:ee:23:08:a0:89:38:b5:f5:9e:
         43:5c:a5:75:79:79:02:a1:9d:c5:bd:49:62:d1:52:01:f2:1e:
         69:3c:50:50:57:29:9f:46:a2:ee:6b:5e:92:53:8f:57:e4:70:
         53:ae:0b:15:a5:95:01:1d:a5:ef:7f:f4:12:64:ff:8e:a4:3a:
         5b:e4:09:6d:27:b6:5d:42:71:ad:0a:a0:b0:2e:ae:c4:54:9e:
         90:72:e7:e5:58:34:42:d7:74:9e:84:8f:c3:73:da:1e:64:65:
         94:8d:a5:19:8a:28:b2:e3:bb:7c:04:9d:9b:0d:a5:c6:5c:40:
         ae:20:ef:d8:a9:7b:f3:55:57:b3:4d:9e:90:7d:9c:26:00:e0:
         22:ef:16:2b:e7:54:2c:03:50:e6:5c:b2:19:b7:8b:79:b3:5b:
         a9:91:0f:8c:8d:f2:99:22:93:e5:f3:3f:64:ee:cb:44:45:47:
         50:e9:f7:81:91:7a:0d:fc:76:0b:99:86:99:d9:63:66:6c:66:
         6a:a9:e7:f3:f7:50:26:2f:d4:b6:8e:92:9b:47:2d:50:de:06:
         d7:bb:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:19:41 2026 by rpki-client