Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/2c08f8b6-b286-3631-96f0-1489439c26e7.roa
File:                     2c08f8b6-b286-3631-96f0-1489439c26e7.roa (raw, json)
Hash identifier:          y2nJRRi7CZ2MZjJR71mtxEVO9HtamqnqX2vMWPRMSM8=
Subject key identifier:   77:11:DE:97:D5:CF:5C:57:78:82:6E:A9:7D:11:40:F2:7D:CB:C7:99
Certificate issuer:       /CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
Certificate serial:       010D0C9F4328584E94EA4E4E37FFB71523EFDA00
Authority key identifier: 91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/2c08f8b6-b286-3631-96f0-1489439c26e7.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        199.244.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4e:4e:37:ff:b7:15:23:ef:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=0323ee79-d72f-4587-8abd-71adbd2812ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:ab:aa:97:cb:76:6f:0d:bd:e4:fe:b1:15:
                    0b:ca:8d:c1:06:27:95:dc:b5:05:d5:45:b0:d2:c6:
                    79:0b:04:e8:b2:b5:03:9b:98:ea:fd:09:d1:c2:5f:
                    0b:8e:04:60:e4:e7:50:33:3e:84:bd:f9:e9:64:2f:
                    d1:7c:a0:89:a9:ac:0e:80:09:25:87:ae:b0:5a:2a:
                    51:d2:fd:41:c7:2b:37:73:72:40:0f:51:f7:f7:32:
                    f3:45:0e:d6:0a:db:f0:e2:91:4d:7c:6d:90:61:8d:
                    67:f6:be:f6:bd:f5:3c:d8:9d:4a:f1:e2:1b:89:94:
                    44:5e:34:16:ea:8e:44:78:0e:e0:cf:f9:57:9e:98:
                    83:dc:6e:cd:90:7b:5b:61:18:d8:87:bc:94:58:69:
                    57:f9:8b:61:5f:1c:bb:c3:26:2c:f9:db:8d:b3:f6:
                    2f:d0:2a:bb:76:6f:e3:f7:66:b4:b4:d7:f9:10:46:
                    05:85:be:50:02:46:20:6d:c6:b5:a8:be:14:db:89:
                    f5:16:50:c7:10:5e:52:cb:ad:42:a6:38:9b:94:dd:
                    77:ee:54:59:ae:df:ec:d1:19:f3:4e:ec:6a:9d:9a:
                    1b:49:b2:06:5f:4f:d9:cb:a0:05:80:f4:47:b6:19:
                    b5:f6:f8:8e:f7:70:cc:5e:bd:26:61:b7:3a:d2:51:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:11:DE:97:D5:CF:5C:57:78:82:6E:A9:7D:11:40:F2:7D:CB:C7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/2c08f8b6-b286-3631-96f0-1489439c26e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl

            X509v3 Authority Key Identifier:
                keyid:91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:be:8d:51:fb:8f:f4:5a:ca:77:47:9d:49:c4:57:02:b9:
         3f:5a:4c:2c:09:3f:02:56:69:40:c1:67:b5:c0:50:8f:0d:60:
         03:bf:73:b9:31:f5:09:d6:c7:9f:20:6b:8f:07:5f:0f:d8:d3:
         86:0b:3c:0f:e3:f8:51:7b:e2:bd:25:03:c8:58:eb:8d:2b:28:
         0d:de:4c:e9:0b:3d:8f:7d:bf:08:be:e6:de:4b:ad:e0:2e:a0:
         25:d3:17:d6:dc:da:8c:77:94:13:72:d1:02:58:aa:42:96:ae:
         28:16:69:99:f0:b3:d7:92:8c:be:88:9b:85:9d:be:da:0d:74:
         ed:4e:06:2f:3a:a0:52:c4:54:8b:3c:f6:bf:20:b4:78:09:4f:
         f6:f1:c9:95:1c:5f:6e:ae:05:31:10:39:a7:41:e3:ad:68:4e:
         09:0c:40:ad:88:e6:8c:a1:5d:da:89:19:b9:22:3b:ab:ef:ec:
         6c:2f:7c:ba:d9:15:e4:9e:5c:62:3a:1b:68:81:4f:b0:73:a1:
         69:90:98:a8:ea:bb:8e:36:df:e1:a2:b6:67:35:35:38:6e:63:
         72:42:31:e0:4c:91:52:d7:41:4b:a4:5b:90:19:fe:c7:33:27:
         6e:7b:75:ce:0a:6d:eb:bf:5e:98:ab:78:32:6a:64:75:cf:7c:
         b1:5e:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:53 2026 by rpki-client