Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa
File:                     5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa (raw, json)
Hash identifier:          m75ut3xOyF9LPxZP65d51GBk5T50197Dzzd0vb22zWU=
Subject key identifier:   6F:B7:B5:68:E6:2B:F6:D8:2B:26:73:E3:1F:05:9E:E6:A1:4B:8E:89
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC34C5E4C21137871EC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c3:4c:5e:4c:21:13:78:71:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a479deaa-9fb4-4ea5-8bac-9d1208284460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:0f:24:cb:98:59:8c:66:eb:4c:79:df:95:
                    0b:d2:2f:b3:da:cc:05:5e:08:ae:a9:07:ca:6b:86:
                    e7:72:8f:6e:ab:71:8a:dc:dc:05:d4:1c:4e:70:5f:
                    56:2c:58:0a:f3:bd:91:30:63:9b:63:c5:98:ba:d9:
                    52:a3:23:c8:56:d7:cf:10:9e:3c:81:e2:28:e6:86:
                    cc:20:26:8b:ee:cb:ea:f8:4e:5e:fe:c1:a9:bd:cd:
                    9e:02:cb:20:1a:16:2e:b7:24:a5:ae:af:54:2d:c2:
                    cb:de:17:d1:84:ab:0e:17:2a:88:24:9a:25:03:4d:
                    0f:d4:79:5e:d3:b9:1b:af:24:79:72:8d:db:6d:dc:
                    6a:ce:d5:19:21:6e:63:a5:34:0c:f0:88:38:30:83:
                    95:3c:f2:bc:dd:d1:53:87:dc:a5:da:60:f3:a5:b4:
                    a1:28:ac:e0:f0:65:d1:14:13:b9:f3:5a:ce:bf:8f:
                    73:b9:a1:a8:f8:c9:50:06:bb:dc:07:da:67:2a:dc:
                    5c:a5:89:b8:d2:5f:a2:af:8e:b9:d6:f1:ec:66:b8:
                    da:c8:1c:87:bf:bb:b5:f0:80:e8:ed:36:c4:29:01:
                    74:ee:5d:18:1b:90:78:ba:23:cc:e4:72:ea:e2:ae:
                    73:b2:11:14:9b:ea:f1:5e:0f:ef:6b:58:0e:66:ca:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B7:B5:68:E6:2B:F6:D8:2B:26:73:E3:1F:05:9E:E6:A1:4B:8E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:4f:ca:5a:16:b5:df:3d:4b:85:99:81:f3:62:8c:21:d8:ef:
         78:ee:be:d3:65:7f:ea:67:6f:be:4f:8f:84:ea:82:5a:aa:3e:
         2b:55:c0:9a:88:1d:29:8b:5a:6f:ee:06:dd:42:7f:1c:14:d2:
         e8:4a:31:ff:1c:b9:13:8f:b2:0b:ec:92:08:44:f5:e9:77:2a:
         82:0c:b5:6d:eb:6c:cc:e7:16:a9:8a:ad:a6:70:95:40:b1:ee:
         4f:02:5b:ba:ad:ac:70:01:ca:ad:73:39:fa:41:79:ff:b6:45:
         9d:6a:f1:05:f7:bd:1c:6a:44:58:f9:01:f0:b1:23:c5:9b:f2:
         ce:1e:89:8c:eb:8e:43:73:4b:31:49:82:57:7f:5a:b5:bd:a4:
         7a:04:b3:7d:3d:cc:97:26:4d:c9:46:15:0d:d0:e8:11:30:64:
         98:07:fa:53:0e:0d:dc:ca:9a:20:7b:5f:b2:d2:3e:be:a2:22:
         fa:ed:fd:c9:e1:5a:35:c7:84:59:66:59:82:fe:de:b1:a8:96:
         dc:6e:26:be:03:72:f5:66:7c:e0:3a:d3:80:76:d1:03:b5:cf:
         7c:6c:9d:a9:c1:63:03:d9:52:2c:90:5e:62:a1:09:d7:11:5b:
         48:fb:b8:5e:b5:f2:d3:53:06:22:38:bd:74:55:f9:c2:61:0b:
         f2:fc:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:47:43 2025 by rpki-client