Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c786f49-4531-3022-9e65-1681923cfa6e.roa
File:                     5c786f49-4531-3022-9e65-1681923cfa6e.roa (raw, json)
Hash identifier:          HCb4GC65VjeobWwu/zyK/Ye8OYzyeSVKR95OEI9/vyw=
Subject key identifier:   09:BF:4E:58:47:E2:4F:05:FA:D1:1C:BB:FF:F7:B5:D1:63:50:D3:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD0A94523CC54813EFA750
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c786f49-4531-3022-9e65-1681923cfa6e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:0a:94:52:3c:c5:48:13:ef:a7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b75b5631-32c2-4fb2-b37d-d42048bea996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f1:d3:53:e8:49:a1:98:46:0a:2c:be:49:72:
                    10:46:25:38:8c:73:d4:ad:0b:91:5d:2e:2c:7f:20:
                    9e:9f:ea:7f:2b:f5:be:d5:d8:f5:89:ce:a2:ed:81:
                    59:36:d0:e3:8c:2f:09:6b:ca:42:d0:a6:70:70:14:
                    90:c2:7f:45:7b:ff:71:6e:b7:27:2b:fa:00:50:17:
                    6e:40:9f:5f:36:a4:57:a1:7b:63:44:87:a8:cc:d2:
                    c1:16:27:aa:88:03:a0:aa:13:ec:b3:6e:39:e7:77:
                    b9:cb:db:5f:a6:6b:c3:c5:8c:b2:db:d0:55:bc:31:
                    a0:d9:1f:39:63:99:72:07:82:03:35:fc:2e:88:c3:
                    07:60:87:7e:51:2f:f6:74:8c:d2:be:d9:a4:22:2a:
                    1d:28:a0:5f:8a:5b:69:24:05:7c:36:1f:1d:27:91:
                    39:5b:3a:46:16:57:fb:db:71:b7:17:fc:57:5e:24:
                    1b:fc:94:81:3c:70:2e:28:e9:80:52:1a:19:a4:dd:
                    18:30:f8:80:13:37:77:77:1b:44:a3:e2:87:fa:be:
                    93:05:69:df:f9:58:a1:5e:d5:2b:7f:7c:28:80:c2:
                    17:a5:66:ea:52:de:63:09:c0:ba:e5:b7:e6:88:78:
                    74:fe:1a:0c:5f:4e:5c:34:c2:a4:07:24:dd:55:bf:
                    ed:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BF:4E:58:47:E2:4F:05:FA:D1:1C:BB:FF:F7:B5:D1:63:50:D3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c786f49-4531-3022-9e65-1681923cfa6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:c5:68:7a:31:33:a9:a9:67:13:41:0c:10:eb:2d:18:ee:
         08:58:a5:07:9c:6e:ed:80:2e:72:96:7f:f5:a4:bd:b4:32:86:
         a9:00:4c:c0:23:64:a1:5a:0f:fc:7d:b2:38:5b:98:28:68:16:
         b2:db:a3:97:a8:37:0b:52:a5:29:7c:24:1c:17:fe:72:3e:eb:
         ec:0b:0b:98:d3:23:8c:15:7a:45:f0:5b:9b:e4:4d:6a:74:ce:
         47:8b:f5:d4:43:ba:84:43:df:0a:8b:ab:2c:68:fd:c3:1f:00:
         65:bd:96:2a:34:7a:08:6c:cd:bf:d3:d9:11:5b:99:9d:f6:cf:
         45:ff:9e:db:d0:24:71:71:7d:04:df:75:89:32:dc:fb:ef:34:
         5d:f0:ad:8c:c1:be:94:09:80:97:42:24:a8:08:95:b6:b6:3d:
         2d:cc:e0:a0:38:fd:a6:c7:13:ae:4c:43:e1:6f:a7:8d:c9:11:
         40:d3:a8:71:cf:27:89:f4:cb:05:28:80:3d:98:ef:d7:9d:44:
         64:c4:4c:84:44:62:eb:50:f2:50:c2:89:08:ac:c2:2e:5f:d3:
         70:3f:8d:c4:71:e8:10:17:d4:ed:93:21:0c:92:bc:8f:2d:69:
         58:f1:51:77:42:a4:8e:ea:bb:c4:40:16:68:aa:6b:41:27:4c:
         1b:8f:0f:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQqUUjzFSBPvp1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
Yjc1YjU2MzEtMzJjMi00ZmIyLWIzN2QtZDQyMDQ4YmVhOTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/HTU+hJoZhGCiy+SXIQRiU4jHPUrQuRXS4s
fyCen+p/K/W+1dj1ic6i7YFZNtDjjC8Ja8pC0KZwcBSQwn9Fe/9xbrcnK/oAUBdu
QJ9fNqRXoXtjRIeozNLBFieqiAOgqhPss24553e5y9tfpmvDxYyy29BVvDGg2R85
Y5lyB4IDNfwuiMMHYId+US/2dIzSvtmkIiodKKBfiltpJAV8Nh8dJ5E5WzpGFlf7
23G3F/xXXiQb/JSBPHAuKOmAUhoZpN0YMPiAEzd3dxtEo+KH+r6TBWnf+VihXtUr
f3wogMIXpWbqUt5jCcC65bfmiHh0/hoMX05cNMKkByTdVb/tCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAm/TlhH4k8F+tEcu//3tdFjUNNSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWM3ODZmNDktNDUzMS0z
MDIyLTllNjUtMTY4MTkyM2NmYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrJxWh6MTOpqWcTQQwQ6y0Y7ghYpQecbu2ALnKWf/WkvbQyhqkATMAj
ZKFaD/x9sjhbmChoFrLbo5eoNwtSpSl8JBwX/nI+6+wLC5jTI4wVekXwW5vkTWp0
zkeL9dRDuoRD3wqLqyxo/cMfAGW9lio0eghszb/T2RFbmZ32z0X/ntvQJHFxfQTf
dYky3PvvNF3wrYzBvpQJgJdCJKgIlba2PS3M4KA4/abHE65MQ+Fvp43JEUDTqHHP
J4n0ywUogD2Y79edRGTETIREYutQ8lDCiQiswi5f03A/jcRx6BAX1O2TIQySvI8t
aVjxUXdCpI7qu8RAFmiqa0EnTBuPD8w=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:07 2025 by rpki-client