Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1532cd4c-e2f3-3213-8299-395c7af9575c.roa
File:                     1532cd4c-e2f3-3213-8299-395c7af9575c.roa (raw, json)
Hash identifier:          U/E83ij0mrR7bclKInUkgKuv8c37u5/BSn1otJDqgQA=
Subject key identifier:   CB:51:88:B5:F6:53:7B:C3:8D:93:2D:FC:98:5E:CA:55:9B:73:18:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD0579DAB1CF42161B9694
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1532cd4c-e2f3-3213-8299-395c7af9575c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:05:79:da:b1:cf:42:16:1b:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5a8e3a17-db66-4853-ad78-037a6ae525ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:43:e9:33:95:52:02:7b:10:95:4a:5b:5d:e9:
                    30:bb:f7:a2:5b:e8:30:4f:93:97:93:0d:e4:df:a5:
                    2a:85:88:23:f7:87:d0:fd:8c:00:b8:b9:b4:52:4c:
                    00:40:6c:29:50:40:30:38:da:24:75:00:9c:22:b9:
                    51:06:24:f7:67:a9:3d:1d:bf:04:ac:a8:76:2f:3b:
                    68:87:f5:27:62:b8:c1:66:1e:4e:15:b3:19:12:26:
                    9d:95:b5:91:cc:a5:4c:bc:db:dc:8c:14:d2:0c:02:
                    99:f3:16:9e:bc:b6:b2:3e:5c:cc:87:f2:65:28:7a:
                    ae:f7:12:5c:7f:41:fe:33:0a:7f:9b:34:68:45:c6:
                    fe:25:82:a5:d6:c3:da:74:69:d3:1e:d4:63:aa:2b:
                    eb:1d:7a:2f:10:d7:4c:ba:83:00:de:fa:1f:64:c1:
                    d5:13:ff:f8:cb:67:08:79:46:2b:9e:76:13:d4:98:
                    54:54:95:ba:ed:4c:e6:e0:8d:fb:b0:a9:3f:a4:ec:
                    58:87:da:8e:cb:be:9b:72:e1:ca:39:27:82:58:f6:
                    fd:ba:15:14:74:ac:f0:ca:0b:fa:a6:5d:e7:39:79:
                    da:e6:36:d7:b8:c1:a9:0d:b4:78:e2:a5:50:95:64:
                    5b:9d:34:a2:9c:61:a9:a7:46:42:e9:d6:67:96:89:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:51:88:B5:F6:53:7B:C3:8D:93:2D:FC:98:5E:CA:55:9B:73:18:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1532cd4c-e2f3-3213-8299-395c7af9575c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:93:75:92:60:14:f8:4f:d6:1e:8a:9c:fe:dd:1a:24:7b:0c:
         26:f9:4b:bb:00:54:b7:75:d0:46:19:7a:fc:59:c4:55:58:cc:
         be:b3:2f:41:b0:e4:2d:bd:72:0d:44:6a:db:95:f0:9b:f5:33:
         10:57:af:b6:1e:7f:51:e4:e5:67:d5:54:e2:2e:57:10:f9:36:
         af:1d:7f:bf:aa:88:5a:e4:8d:31:f7:9c:24:38:80:5a:6b:e6:
         53:cc:30:e3:65:9b:83:27:e6:1a:7b:d0:81:a6:5a:99:4d:96:
         47:1c:1a:15:08:fc:16:99:c0:25:3c:a7:28:ef:88:c7:ba:75:
         96:a2:e7:0e:00:14:d8:91:6a:f6:8a:0d:2f:c2:a7:d7:4a:6e:
         66:6f:ed:db:cf:c4:37:af:d2:1f:a0:6e:50:11:62:ba:1e:a3:
         a8:69:4b:83:0b:da:90:1f:e3:2b:81:ef:9b:53:95:a7:63:db:
         86:ac:fa:17:d9:88:6f:0d:79:5f:32:4a:e2:d5:c3:35:c8:18:
         fb:dc:82:00:7f:dc:a3:06:aa:74:f8:2e:88:2f:28:a4:88:2d:
         01:fb:95:1d:70:bb:a5:4f:dc:2f:d5:af:4e:49:8d:11:4e:95:
         d8:0b:ce:6a:20:85:b4:0b:37:cf:b2:47:88:52:a6:f9:79:72:
         bb:30:98:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQV52rHPQhYblpQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NWE4ZTNhMTctZGI2Ni00ODUzLWFkNzgtMDM3YTZhZTUyNWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kPpM5VSAnsQlUpbXekwu/eiW+gwT5OXkw3k
36UqhYgj94fQ/YwAuLm0UkwAQGwpUEAwONokdQCcIrlRBiT3Z6k9Hb8ErKh2Lzto
h/UnYrjBZh5OFbMZEiadlbWRzKVMvNvcjBTSDAKZ8xaevLayPlzMh/JlKHqu9xJc
f0H+Mwp/mzRoRcb+JYKl1sPadGnTHtRjqivrHXovENdMuoMA3vofZMHVE//4y2cI
eUYrnnYT1JhUVJW67Uzm4I37sKk/pOxYh9qOy76bcuHKOSeCWPb9uhUUdKzwygv6
pl3nOXna5jbXuMGpDbR44qVQlWRbnTSinGGpp0ZC6dZnlomFXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtRiLX2U3vDjZMt/JheylWbcxidMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTUzMmNkNGMtZTJmMy0z
MjEzLTgyOTktMzk1YzdhZjk1NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASTdZJgFPhP1h6KnP7dGiR7DCb5S7sAVLd10EYZevxZxFVYzL6zL0Gw
5C29cg1EatuV8Jv1MxBXr7Yef1Hk5WfVVOIuVxD5Nq8df7+qiFrkjTH3nCQ4gFpr
5lPMMONlm4Mn5hp70IGmWplNlkccGhUI/BaZwCU8pyjviMe6dZai5w4AFNiRavaK
DS/Cp9dKbmZv7dvPxDev0h+gblARYroeo6hpS4ML2pAf4yuB75tTladj24as+hfZ
iG8NeV8ySuLVwzXIGPvcggB/3KMGqnT4LogvKKSILQH7lR1wu6VP3C/Vr05JjRFO
ldgLzmoghbQLN8+yR4hSpvl5crswmCU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:18 2025 by rpki-client