Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1750f2d2-91db-35a5-a865-c1b81b7367e1.roa
File:                     1750f2d2-91db-35a5-a865-c1b81b7367e1.roa (raw, json)
Hash identifier:          iQj/ZJhvubsTU5JgYEqwmMrY8/nzfh5shppPMBXj+a8=
Subject key identifier:   60:5A:B0:F2:74:8D:0C:3E:24:22:A0:C1:4D:61:DF:CD:52:74:07:0C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E08F8FBDC4F131A7E7B280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1750f2d2-91db-35a5-a865-c1b81b7367e1.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.196.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:8f:8f:bd:c4:f1:31:a7:e7:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=eb6299c0-7098-4fcb-9f4c-19fd2c219365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e7:fe:58:64:28:d6:2e:91:69:ab:32:32:e1:
                    e3:f2:13:cd:1b:fd:15:5f:d3:df:30:57:d3:a0:ec:
                    54:d1:ad:88:e6:8f:c8:16:90:51:f9:c1:48:d4:c2:
                    22:91:57:92:ec:36:d7:80:0e:07:b5:c3:2a:bf:dd:
                    a1:c2:9a:d5:94:c2:0e:76:5b:b5:14:d9:04:62:38:
                    03:51:9f:6f:49:69:65:69:ad:d9:49:3d:94:6e:31:
                    55:fb:1e:4a:76:2b:37:bc:67:dc:3b:68:12:d0:d9:
                    e1:b3:61:35:db:3c:67:36:3d:5d:f0:67:2b:6d:0c:
                    db:45:a2:bf:36:4a:78:9a:52:0a:2e:b2:f3:d8:71:
                    68:45:c3:26:8e:86:12:8c:50:eb:c4:e3:96:9a:ce:
                    02:bf:a7:1e:bf:60:8d:35:db:cc:42:14:a5:e1:d0:
                    13:70:d2:1a:44:f1:d5:25:06:f5:10:f4:00:6d:54:
                    18:55:f1:69:f3:44:50:ba:8a:7b:74:00:c3:4c:22:
                    c7:48:b8:70:4d:ed:51:7f:db:c1:a8:53:0d:f0:9f:
                    37:6b:05:92:1f:82:c1:91:d8:70:f1:65:dc:8e:40:
                    de:0f:83:b6:27:d1:9a:5e:ed:8d:d0:4b:33:fe:d4:
                    55:a8:57:52:44:d7:5a:44:8a:0c:19:00:6c:7d:bd:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:B0:F2:74:8D:0C:3E:24:22:A0:C1:4D:61:DF:CD:52:74:07:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1750f2d2-91db-35a5-a865-c1b81b7367e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c4:41:10:ba:d9:f4:2a:68:6e:f5:bf:01:a9:7f:6c:30:02:
         fa:eb:53:e1:f6:cc:4f:4a:b8:43:73:8c:a1:bf:8b:83:91:a7:
         b9:20:59:33:88:ba:27:29:07:99:95:f5:76:7c:e5:9c:95:e2:
         a0:19:41:2f:07:97:60:2b:25:4c:6f:89:e2:00:f5:d2:7b:6a:
         d8:9d:61:cb:5f:8b:95:f0:8f:05:06:2d:35:cf:2e:b6:38:7a:
         97:d1:42:0b:22:b5:62:44:05:50:51:23:6a:7f:8c:13:ae:e1:
         eb:14:5e:98:85:ec:e9:d5:5d:e1:b0:3d:2e:54:bf:81:87:df:
         f9:fd:74:22:93:a2:53:3f:f0:69:68:a1:4b:3b:af:4c:ef:3c:
         55:3c:68:1a:bb:04:25:6e:c2:fe:84:03:00:ed:e6:ce:d0:a6:
         9f:a4:6b:76:a8:1e:46:50:21:a4:75:4a:1b:fd:bd:69:81:ee:
         d8:27:b9:4c:be:9f:47:5e:d3:5a:2e:d7:a5:b2:7c:00:5f:fe:
         ea:ef:a2:c3:c4:ad:5e:60:b6:98:11:4c:31:1d:87:1d:bd:90:
         4a:cd:34:18:50:8c:fe:33:71:83:e4:99:a5:e6:84:49:31:bd:
         37:b0:3f:7c:66:ec:2d:fd:74:70:0d:d0:00:02:85:4d:24:b3:
         c7:3c:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:42 2026 by rpki-client