Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0174c256-cc51-3d6f-b9e9-5faad349b02f.roa
File:                     0174c256-cc51-3d6f-b9e9-5faad349b02f.roa (raw, json)
Hash identifier:          fZ90xdYh3rzs14pE/SFR7Bpr3o6gfj3fHndgBGePN7w=
Subject key identifier:   A2:D7:1C:8D:02:82:C7:9E:F8:46:52:3D:69:07:53:88:C6:AE:6C:C0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD0877555175E675B4A700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0174c256-cc51-3d6f-b9e9-5faad349b02f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:08:77:55:51:75:e6:75:b4:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1c57bdb9-e953-47be-91fa-d85df117d77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:fa:29:54:0f:64:72:41:98:98:57:bc:c7:
                    4f:b2:d3:d0:69:f2:fb:35:3c:ac:26:4c:5f:70:c5:
                    ee:7e:50:09:7c:ec:72:70:8b:d0:e8:18:f7:48:67:
                    53:e2:a3:ff:3c:04:fb:ef:cf:62:e0:41:da:a4:0f:
                    2f:8f:a2:ba:d5:6e:79:82:a1:b8:7a:fc:36:19:a1:
                    36:fa:21:dc:0a:ab:92:37:ab:28:42:32:04:c9:70:
                    06:ef:88:46:10:a6:8c:e9:be:b9:97:57:13:26:8d:
                    9b:ed:b5:75:dc:fc:ba:b9:3d:37:de:ae:7d:38:4f:
                    09:0d:0c:43:14:01:43:3d:db:44:fe:96:22:9c:80:
                    bd:b1:50:02:75:75:06:3d:69:18:7b:cc:ef:d4:ec:
                    27:59:30:9f:41:2c:18:9b:be:29:34:9c:07:07:76:
                    7e:60:9b:13:28:75:62:f6:c0:c1:04:59:66:a2:f1:
                    cf:74:ff:05:65:ab:49:4d:78:90:fe:ef:fd:fe:05:
                    83:a5:fa:3d:fc:46:2f:92:9c:98:e4:97:47:3b:b7:
                    00:ca:dc:83:42:f9:eb:6c:8d:69:b1:99:94:f1:1b:
                    8a:db:88:f9:3a:d0:d0:cb:82:35:1a:97:87:32:00:
                    3d:af:8e:13:ea:4a:20:67:eb:8c:55:36:59:96:7b:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:1C:8D:02:82:C7:9E:F8:46:52:3D:69:07:53:88:C6:AE:6C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0174c256-cc51-3d6f-b9e9-5faad349b02f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:ed:41:7c:c5:ab:14:63:8b:47:bd:72:da:f9:f6:0a:e1:
         ee:06:d5:23:95:2b:8b:65:4e:b3:09:b6:c6:f8:b1:60:f6:24:
         62:4f:54:68:ce:71:92:bb:d2:7c:4f:98:29:e5:b8:33:da:a4:
         9f:19:db:6c:8b:89:aa:f1:af:8f:dd:01:ce:ef:08:4a:3d:34:
         a6:b4:b7:13:09:95:d1:cd:88:c0:c9:3b:eb:9b:45:14:d7:81:
         cc:0a:b0:07:92:1b:c0:b5:ae:a4:7f:9a:12:e8:6f:51:73:52:
         50:2c:08:4f:c0:a5:d0:46:f4:0e:88:57:57:9b:2c:86:16:54:
         fb:14:3b:b0:5c:53:98:31:68:ce:03:f6:e8:4b:f8:93:36:2b:
         d8:eb:85:c7:19:82:37:d5:82:64:83:4a:71:7b:1a:c8:5b:f5:
         50:ea:bd:84:d0:fc:71:c4:f4:81:a5:76:a7:ce:33:1d:c1:90:
         18:33:a3:fc:78:8b:7d:02:d8:d9:41:2d:c9:fa:64:46:e5:51:
         31:87:c9:89:f8:04:c8:48:f3:22:bc:33:62:42:8f:28:9d:71:
         73:4e:bd:72:fb:f2:0c:8e:b7:67:61:72:89:60:26:43:8e:10:
         07:1b:54:10:88:2e:8a:6c:94:e4:9e:dc:a8:36:04:07:02:52:
         82:ad:f1:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQh3VVF15nW0pwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MWM1N2JkYjktZTk1My00N2JlLTkxZmEtZDg1ZGYxMTdkNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyn6KVQPZHJBmJhXvMdPstPQafL7NTysJkxf
cMXuflAJfOxycIvQ6Bj3SGdT4qP/PAT7789i4EHapA8vj6K61W55gqG4evw2GaE2
+iHcCquSN6soQjIEyXAG74hGEKaM6b65l1cTJo2b7bV13Py6uT033q59OE8JDQxD
FAFDPdtE/pYinIC9sVACdXUGPWkYe8zv1OwnWTCfQSwYm74pNJwHB3Z+YJsTKHVi
9sDBBFlmovHPdP8FZatJTXiQ/u/9/gWDpfo9/EYvkpyY5JdHO7cAytyDQvnrbI1p
sZmU8RuK24j5OtDQy4I1GpeHMgA9r44T6kogZ+uMVTZZlnuDwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLXHI0Cgsee+EZSPWkHU4jGrmzAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDE3NGMyNTYtY2M1MS0z
ZDZmLWI5ZTktNWZhYWQzNDliMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiO7UF8xasUY4tHvXLa+fYK4e4G1SOVK4tlTrMJtsb4sWD2JGJPVGjO
cZK70nxPmCnluDPapJ8Z22yLiarxr4/dAc7vCEo9NKa0txMJldHNiMDJO+ubRRTX
gcwKsAeSG8C1rqR/mhLob1FzUlAsCE/ApdBG9A6IV1ebLIYWVPsUO7BcU5gxaM4D
9uhL+JM2K9jrhccZgjfVgmSDSnF7Gshb9VDqvYTQ/HHE9IGldqfOMx3BkBgzo/x4
i30C2NlBLcn6ZEblUTGHyYn4BMhI8yK8M2JCjyidcXNOvXL78gyOt2dhcolgJkOO
EAcbVBCILopslOSe3Kg2BAcCUoKt8WA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:40 2025 by rpki-client