Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33571a34-d5c9-37b0-a109-8ed33008ff87.roa
File:                     33571a34-d5c9-37b0-a109-8ed33008ff87.roa (raw, json)
Hash identifier:          IvnEg67499pgqpBVr+TQ1C+qYruGX49XIV/qlGvIHcE=
Subject key identifier:   60:A2:34:24:3A:14:B1:E8:14:3D:E4:D9:53:CD:69:13:A5:AC:81:C7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD07EDA37DD29C5D3FD500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33571a34-d5c9-37b0-a109-8ed33008ff87.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:07:ed:a3:7d:d2:9c:5d:3f:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=21e21443-b1f2-4e75-9ed2-c9b06e43dded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2e:c1:d0:46:e4:e7:38:b6:65:2b:93:3f:04:
                    96:b7:17:e3:65:f4:be:a5:d1:1f:68:c3:a3:90:bd:
                    16:37:77:b8:4b:41:5d:bc:25:07:12:6d:23:e1:86:
                    f4:8f:0f:1b:92:2c:e4:6c:af:e0:20:50:e8:e7:d8:
                    85:7b:42:80:57:16:0a:5c:0e:0e:f8:0b:3b:a4:a8:
                    22:b2:66:b5:ef:88:20:c4:5a:8b:1a:cc:56:08:48:
                    75:f1:a1:9f:e1:76:df:de:ee:4d:84:9e:d5:cc:f5:
                    48:21:74:2d:3a:72:26:4a:13:58:f2:15:cf:07:87:
                    58:e3:aa:94:78:77:2c:d2:10:21:ef:ff:22:7c:6f:
                    e3:7d:e1:60:34:0c:5f:ab:96:48:91:1c:de:7b:d9:
                    dc:3a:72:d1:57:5e:58:70:7f:7a:ce:5a:9f:16:f8:
                    25:82:c4:f6:31:9f:72:5d:d9:a0:f4:9e:32:e2:24:
                    5a:98:93:3d:ce:0a:21:34:d5:cd:ee:d2:0b:21:30:
                    6c:cb:14:c8:4e:db:6d:95:2b:ff:a6:f0:77:47:aa:
                    ff:8a:2d:6a:9d:b8:60:6f:e2:cd:ea:78:c7:7c:6f:
                    29:bb:e6:76:54:12:71:cc:e9:21:02:bd:0b:4e:2f:
                    11:9d:76:7d:6e:53:ef:31:fd:fc:ec:8a:fe:fd:05:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A2:34:24:3A:14:B1:E8:14:3D:E4:D9:53:CD:69:13:A5:AC:81:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33571a34-d5c9-37b0-a109-8ed33008ff87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:32:ae:7a:c9:e4:07:5a:73:ea:50:b9:d3:b0:92:23:7f:25:
         cd:25:35:4a:b3:90:2e:17:b4:f3:75:e9:f9:7c:5e:aa:d3:37:
         04:39:b3:3c:a9:7e:a5:41:22:5b:e5:4a:9c:64:c1:17:e0:85:
         5f:11:cc:a7:51:59:b9:fd:2a:04:06:35:83:1c:ca:dc:5c:f1:
         fd:3e:31:f7:3e:8c:6b:86:e3:7e:6c:be:a9:62:07:01:03:64:
         4a:fa:07:23:f7:80:b2:63:cb:a2:f8:71:79:13:bd:c2:71:c3:
         92:23:22:a1:2f:15:7a:cc:e1:09:fd:8b:d4:50:c5:c2:e9:01:
         70:1b:1e:ce:94:43:22:fc:9c:3d:99:73:3d:b7:5c:45:cf:8a:
         33:d3:4e:11:d7:71:57:5d:fd:ab:01:1f:f1:e1:ec:15:e2:de:
         54:81:fc:04:77:0f:a6:2f:d4:eb:8a:db:dd:14:59:bb:4c:40:
         87:53:e9:01:49:07:bc:dc:ef:ec:a7:37:fd:0e:fc:6b:da:6d:
         89:a4:d5:53:62:f2:a5:77:98:22:b2:8e:a6:ee:f6:41:71:94:
         93:0e:fc:59:4e:97:d2:b7:55:cc:2c:92:0d:66:6f:0d:d1:35:
         33:e3:cd:3e:08:69:32:fd:ce:ce:b4:e3:7f:c7:ad:5c:76:ed:
         72:a1:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:18 2025 by rpki-client