Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a793d5-c94c-3745-bdd2-b28a91cd854f.roa
File:                     10a793d5-c94c-3745-bdd2-b28a91cd854f.roa (raw, json)
Hash identifier:          CXjnO4n6wMRfeMmsXOHCK4ce+cuc1o74mVDjjM3a4l0=
Subject key identifier:   FA:99:5B:2A:D7:8B:F6:B7:F7:C9:5A:0F:0C:5A:DF:BC:0C:6C:EB:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD063689848BEF75C2A580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a793d5-c94c-3745-bdd2-b28a91cd854f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:06:36:89:84:8b:ef:75:c2:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=fc94dff0-0bf0-4576-a42c-1007fee6d9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:e7:53:ea:d3:60:3f:78:4a:24:21:53:45:
                    c8:c4:58:22:9c:5c:48:50:56:f3:2a:04:07:5a:91:
                    c9:68:9c:26:f7:5a:fb:af:da:7b:7d:31:3b:33:25:
                    97:7d:4b:65:f1:e3:a8:03:fd:b2:81:db:f2:fc:45:
                    a5:21:e8:02:34:8e:a9:eb:51:85:dd:b2:77:96:da:
                    b8:37:c3:91:9f:56:9a:e4:0d:4a:90:7d:26:77:27:
                    f7:75:a8:57:ae:35:70:3f:e9:d0:60:f4:b1:5f:b9:
                    55:22:39:e3:e3:c9:68:69:fc:f7:7c:d2:6e:09:f8:
                    84:49:f8:4a:9b:c1:93:7a:74:8f:2e:83:ac:6a:da:
                    45:f4:c4:3c:d8:9a:d6:8f:b9:28:87:fe:70:a6:10:
                    dd:0e:50:02:84:b7:07:c9:51:8b:f7:28:96:45:b2:
                    c4:ea:f2:98:ae:e4:53:32:30:df:52:5b:9f:04:d2:
                    a9:e4:de:14:77:ce:46:2c:18:bd:1b:86:8a:d9:6f:
                    76:b5:6c:69:82:4c:d4:d4:30:aa:02:f0:31:d2:50:
                    3e:db:01:77:70:91:59:80:c7:7e:53:d6:d6:0b:06:
                    3c:c9:c9:d7:15:01:ca:ac:b0:fb:08:84:1b:f1:16:
                    06:6f:48:07:b3:0a:09:3c:a7:ae:d6:41:21:19:c2:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:99:5B:2A:D7:8B:F6:B7:F7:C9:5A:0F:0C:5A:DF:BC:0C:6C:EB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a793d5-c94c-3745-bdd2-b28a91cd854f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:1c:52:bd:ea:be:3e:4f:99:59:ab:0a:b9:91:01:49:b9:
         34:3b:3b:fb:e9:d0:f4:c5:3e:0e:07:ad:56:ea:7d:20:c5:95:
         25:ae:ac:1d:76:16:43:6d:7f:bc:e0:0b:19:51:24:11:9e:89:
         86:35:c8:f7:e1:fb:2d:32:28:16:66:ec:08:3c:83:ef:20:f0:
         82:b6:8a:8c:98:0a:88:a3:b6:70:16:4d:17:c3:ea:2c:82:99:
         a7:f4:db:5c:1e:29:8d:71:0a:62:51:04:04:66:31:84:b8:43:
         21:75:f6:bb:24:0e:65:33:94:bf:9e:9c:da:a3:5c:59:69:71:
         cc:a5:ae:23:4b:3f:77:4e:46:3e:1f:eb:62:75:3a:1a:d6:53:
         43:bd:2f:3f:da:6f:e5:53:84:cb:c8:0b:20:ab:fd:8c:bc:86:
         bc:0e:7b:a5:a4:86:9c:f9:e9:4f:e0:a6:33:3d:06:15:63:1f:
         09:74:dc:a9:81:86:b1:d2:a0:5d:af:cc:ce:6e:18:53:32:93:
         5d:b5:59:ce:8d:84:77:01:c4:6f:b1:ad:60:42:62:63:87:0a:
         85:7a:f8:53:29:92:c7:6b:be:c2:ed:1b:f4:74:89:03:c2:9b:
         59:69:7b:bd:ea:e1:9e:9d:81:91:45:2c:2e:ed:53:ef:f8:b8:
         32:51:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:15 2025 by rpki-client