Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/49db7ff5-91a2-3b02-a913-94c979f50383.roa
File:                     49db7ff5-91a2-3b02-a913-94c979f50383.roa (raw, json)
Hash identifier:          R6el++mZIlwu9FmqyTnba/RJpLkwU7foHYFEJ9I49zA=
Subject key identifier:   72:19:66:18:35:E4:67:23:5B:01:8A:24:59:3C:DD:E5:A4:46:6A:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD0259C02AA4A458DAFD80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/49db7ff5-91a2-3b02-a913-94c979f50383.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:02:59:c0:2a:a4:a4:58:da:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=203cb908-07bb-4007-905b-141c2f4f11fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:44:68:d4:14:f0:04:a5:8b:6c:1e:20:08:
                    c0:2d:b3:31:8b:e7:57:42:cc:19:d7:5f:10:56:10:
                    75:18:d5:b1:d9:ad:4a:eb:2d:d0:b0:8f:be:84:48:
                    e2:ae:07:6d:67:dc:76:ec:66:ac:a5:50:42:ca:b3:
                    bf:51:49:e7:79:70:8a:94:1d:1a:68:f0:0c:e0:95:
                    53:e7:8a:47:68:12:f6:39:cf:be:b2:1e:7d:6d:6b:
                    2b:5c:a0:67:70:05:de:84:50:93:b6:ca:d0:8d:fa:
                    0e:f7:be:f0:73:17:b1:ff:13:99:fa:94:2b:fc:fe:
                    53:44:9e:8d:21:d3:e0:c5:76:d5:53:37:f8:dc:6b:
                    4f:5c:fe:60:f7:5b:2e:23:28:20:ba:95:6a:2c:78:
                    89:38:de:15:16:d3:ff:ce:d3:f3:9f:0f:17:d6:ea:
                    97:a3:d9:41:5d:8b:bf:07:7a:1c:cc:73:19:f0:10:
                    3b:a8:33:fd:df:4b:78:13:20:68:27:58:af:62:15:
                    3d:1d:ff:ab:da:78:d3:a7:ce:e6:5c:32:89:00:6d:
                    25:ac:3c:f1:22:05:34:03:7f:48:bd:07:ba:ac:34:
                    0e:09:8c:03:a0:5d:de:52:7f:1a:09:09:23:03:42:
                    6c:a9:45:50:41:f2:55:13:15:a6:02:a3:1f:54:06:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:19:66:18:35:E4:67:23:5B:01:8A:24:59:3C:DD:E5:A4:46:6A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/49db7ff5-91a2-3b02-a913-94c979f50383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:99:8c:2e:ea:dc:37:77:84:32:bd:21:bf:3e:a5:13:e1:18:
         1a:75:0a:f8:d5:77:b3:55:3d:5b:6f:7d:ab:bb:d6:53:36:6e:
         ba:89:b9:fb:96:cc:7f:a3:fe:55:80:8e:39:74:9a:ae:80:69:
         58:8c:ac:33:84:b0:52:73:a1:41:8a:02:09:d5:a1:b8:3c:41:
         59:c5:b7:6b:0d:b2:9a:ff:9e:87:ac:b7:39:bd:18:15:cc:08:
         13:67:9e:33:5e:6f:62:1c:07:81:09:65:d4:97:7e:d7:7f:b6:
         61:07:d4:22:eb:76:d6:ca:d8:0e:cd:31:a9:2d:c1:3a:87:fc:
         e5:18:d4:74:d7:89:9b:01:48:7f:e7:6c:f4:fa:dc:36:f4:d7:
         94:6f:42:85:7a:70:74:4d:e4:93:89:bf:bc:da:ae:66:4d:44:
         24:63:a5:eb:86:6a:94:e4:2e:b3:eb:27:1d:04:05:35:e6:63:
         c5:8d:78:19:e2:9f:bd:0b:08:76:fb:dd:e6:a9:d4:3c:05:2a:
         39:50:9d:c1:c4:df:15:6f:54:3a:a7:57:8e:b8:58:cf:88:b0:
         c2:6f:22:62:8d:95:1d:a6:80:7b:80:5f:61:c6:b8:73:91:b2:
         39:20:5f:64:d4:66:07:5c:b4:0a:fb:a1:70:5d:4e:c2:21:e5:
         5d:2f:b7:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQJZwCqkpFja/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MjAzY2I5MDgtMDdiYi00MDA3LTkwNWItMTQxYzJmNGYxMWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyBEaNQU8ASli2weIAjALbMxi+dXQswZ118Q
VhB1GNWx2a1K6y3QsI++hEjirgdtZ9x27GaspVBCyrO/UUnneXCKlB0aaPAM4JVT
54pHaBL2Oc++sh59bWsrXKBncAXehFCTtsrQjfoO977wcxex/xOZ+pQr/P5TRJ6N
IdPgxXbVUzf43GtPXP5g91suIyggupVqLHiJON4VFtP/ztPznw8X1uqXo9lBXYu/
B3oczHMZ8BA7qDP930t4EyBoJ1ivYhU9Hf+r2njTp87mXDKJAG0lrDzxIgU0A39I
vQe6rDQOCYwDoF3eUn8aCQkjA0JsqUVQQfJVExWmAqMfVAaGXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHIZZhg15GcjWwGKJFk83eWkRmqZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDlkYjdmZjUtOTFhMi0z
YjAyLWE5MTMtOTRjOTc5ZjUwMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSZjC7q3Dd3hDK9Ib8+pRPhGBp1CvjVd7NVPVtvfau71lM2brqJufuW
zH+j/lWAjjl0mq6AaViMrDOEsFJzoUGKAgnVobg8QVnFt2sNspr/noestzm9GBXM
CBNnnjNeb2IcB4EJZdSXftd/tmEH1CLrdtbK2A7NMaktwTqH/OUY1HTXiZsBSH/n
bPT63Db015RvQoV6cHRN5JOJv7zarmZNRCRjpeuGapTkLrPrJx0EBTXmY8WNeBni
n70LCHb73eap1DwFKjlQncHE3xVvVDqnV464WM+IsMJvImKNlR2mgHuAX2HGuHOR
sjkgX2TUZgdctAr7oXBdTsIh5V0vt+A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:01 2025 by rpki-client