Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54146332-c765-3c5c-97d2-9ddda152e44d.roa
File:                     54146332-c765-3c5c-97d2-9ddda152e44d.roa (raw, json)
Hash identifier:          wyw3Lt3QlvCJBmGi29c1xzQd9pq0ngZYqP2cv3wjdEU=
Subject key identifier:   4B:B7:9E:5F:79:11:BF:F6:5F:F3:6D:17:23:7B:1D:19:D8:E4:F1:69
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E090854847CA394AD00F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54146332-c765-3c5c-97d2-9ddda152e44d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.196.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:90:85:48:47:ca:39:4a:d0:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=437512a4-8c60-4f65-8eb8-2bd9fb2e35c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:41:0f:64:58:e1:36:01:d6:6f:af:aa:87:
                    91:23:14:89:0b:fa:52:35:0c:3a:fe:b9:4a:68:ba:
                    99:99:71:0c:dd:43:63:a7:c2:b4:be:a0:a6:ac:64:
                    52:fd:ba:ab:bf:b5:03:f3:65:8f:85:9d:da:47:8f:
                    1c:52:8b:f5:72:a3:59:b5:5f:36:2b:d9:de:40:53:
                    1a:47:3f:a9:2f:2d:84:d6:bc:56:bd:95:65:9e:96:
                    20:bb:72:c5:c4:ae:be:a4:77:2e:13:94:83:4b:ae:
                    60:2a:ad:cb:5e:fd:f3:9b:1b:0b:de:d3:5f:98:46:
                    54:18:64:4f:df:f3:a9:36:fb:e6:a9:f5:b6:c8:b3:
                    0e:6e:63:e8:ae:e6:65:af:d5:e6:10:14:e6:84:e6:
                    c7:c1:80:b8:0b:b2:8f:2e:79:85:53:54:99:e7:7a:
                    a3:f5:3f:2f:44:99:5e:b2:bc:64:6b:8f:14:63:95:
                    5a:51:b3:5a:33:90:dd:ca:ed:7b:b3:35:2e:02:4c:
                    c3:d0:9b:d8:7d:51:9c:f8:67:6f:ca:7d:e6:38:3a:
                    da:ec:0e:31:9e:48:ff:bf:fc:74:7f:ba:d4:98:0d:
                    f0:cc:55:37:a0:50:a2:5c:d2:2d:30:38:1c:00:47:
                    51:f1:67:d0:08:51:03:8f:fb:9a:b9:83:0b:e1:e3:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:9E:5F:79:11:BF:F6:5F:F3:6D:17:23:7B:1D:19:D8:E4:F1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54146332-c765-3c5c-97d2-9ddda152e44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:88:15:20:77:e2:f9:71:fd:b3:6f:b5:e3:53:d1:85:4c:45:
         c8:22:82:a4:17:e3:1d:fa:49:a5:8c:05:97:9f:36:d2:0f:2f:
         43:fa:ca:74:1a:d6:b4:db:e8:b8:15:be:41:e5:3b:be:f4:eb:
         95:7a:43:15:87:17:ed:2a:25:af:27:64:40:38:75:75:8a:3d:
         5d:61:54:48:5c:ed:01:46:7d:12:4d:05:32:f4:81:e5:cb:6e:
         ac:87:30:f0:c0:8e:20:ec:e0:dd:3c:61:b0:ea:0c:a1:b3:ab:
         f8:ec:da:aa:1b:8f:50:bc:68:11:1f:fe:12:d8:bb:39:2a:75:
         19:37:cd:d8:17:fd:75:ff:a5:fa:9b:9c:98:13:4a:ae:a1:e2:
         c9:b7:cf:10:5f:39:62:55:e7:96:45:9d:30:19:17:1b:bf:9b:
         ab:cf:de:b6:0a:e8:e5:b5:3e:6c:b3:d6:24:36:cd:27:ea:25:
         c6:49:b5:67:f6:fb:21:2e:76:be:19:ca:c6:f9:36:dd:43:12:
         81:22:07:13:b5:5b:21:0a:ad:1f:a7:46:73:ea:d7:ce:e3:75:
         f6:a0:d4:49:3c:4e:ba:03:42:96:9f:6c:df:e4:71:f0:a3:2b:
         95:fb:45:bf:b0:4e:eb:78:ae:cd:9b:03:5e:b5:67:8a:4a:d7:
         90:ba:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:31 2026 by rpki-client