Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f8db3ff-881d-3796-bed3-2c661c07f16f.roa
File:                     5f8db3ff-881d-3796-bed3-2c661c07f16f.roa (raw, json)
Hash identifier:          Qq8wHZnsUTla2s8i01ofL6AooWeUUQqpgZdl7By7yfk=
Subject key identifier:   00:7A:4C:0A:45:16:15:0C:DB:02:1F:80:1C:4D:E8:E5:F3:B4:E1:51
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD0BFF926F55496CB68A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f8db3ff-881d-3796-bed3-2c661c07f16f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:0b:ff:92:6f:55:49:6c:b6:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3eed048a-a4fb-411d-8a79-ddc9e75f6fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:9b:eb:53:6c:67:eb:34:0e:10:18:d6:c4:
                    ac:ee:59:6b:9e:f9:85:3a:9a:8c:8f:f6:83:9c:34:
                    6a:61:4e:d7:a5:62:b3:88:aa:48:e9:83:29:5f:17:
                    39:d2:1d:f3:2e:98:53:6b:1a:9e:ed:81:55:6f:92:
                    fb:4d:6b:f0:bf:53:f2:15:fb:5e:78:7a:25:c6:47:
                    ff:d7:68:3f:e3:eb:26:e2:d7:c6:70:6f:ee:0b:14:
                    bb:00:4d:53:8d:6a:8e:71:f3:87:31:eb:1a:69:c5:
                    96:e8:24:5d:95:d4:d5:75:ab:c5:52:0b:32:3e:37:
                    bb:3f:1e:a0:70:85:e0:c3:fe:84:75:7b:f5:7f:9f:
                    25:22:2e:ab:e8:24:58:99:bd:30:0e:25:4e:7a:f9:
                    51:bd:39:e7:50:2b:69:9b:8b:bc:3e:cd:a2:4c:46:
                    5e:84:03:5d:57:58:1a:87:95:56:49:fd:cb:fc:ea:
                    ee:52:e4:94:a4:24:dd:e3:9c:0a:0f:bc:a5:1f:17:
                    8d:07:79:cf:9c:b8:2f:b1:ec:57:e1:9f:09:68:2a:
                    94:0b:22:81:04:6b:17:2a:83:fe:8b:6f:a6:be:5b:
                    c6:fb:44:b6:6f:fe:2c:e9:f5:d5:5f:fa:8b:87:67:
                    1a:c1:b4:5a:2c:8a:ed:a2:31:97:5c:2f:b5:82:da:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:4C:0A:45:16:15:0C:DB:02:1F:80:1C:4D:E8:E5:F3:B4:E1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f8db3ff-881d-3796-bed3-2c661c07f16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fb:71:3a:be:83:6c:e5:ba:26:c1:dc:17:f7:40:44:8d:cd:
         56:0c:94:b9:a7:ae:84:f2:0a:4a:88:62:d0:bf:4f:bb:57:9d:
         7e:82:b9:75:e9:eb:bd:7a:a4:57:80:48:9c:2f:46:95:0e:a1:
         23:47:84:f1:0e:67:35:11:f3:1c:14:09:c9:81:d0:63:89:9a:
         91:ac:df:d7:c2:e5:5c:78:69:78:e9:b6:32:e7:ea:59:7c:c0:
         b2:fb:7c:e5:c3:0e:07:5c:ba:57:89:ea:09:52:02:d4:33:59:
         32:ea:ea:4a:45:62:a7:7d:ba:74:ff:60:c3:29:f1:0d:a3:a2:
         0e:67:3c:7b:4b:a6:6c:b5:5b:9a:fe:0a:31:29:36:e7:07:c4:
         48:6d:fd:dc:fe:d6:04:31:bb:78:12:7c:f5:0f:6d:08:47:13:
         f9:dc:45:08:f7:0e:d7:ef:01:79:d5:7e:8e:90:86:9f:3f:b3:
         cc:07:bc:04:8b:29:15:c0:02:72:5c:54:27:cb:4f:56:9a:f5:
         b3:0b:f7:b6:a4:65:5b:b6:14:41:86:5e:49:e8:f7:79:fa:b3:
         05:14:d9:6d:68:f1:fe:f6:b1:e4:41:f5:ea:be:e5:79:fd:cd:
         8e:bf:5d:b8:b1:99:d5:e6:8e:cb:27:f8:40:53:9d:45:1c:ab:
         58:b0:93:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQv/km9VSWy2ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
M2VlZDA0OGEtYTRmYi00MTFkLThhNzktZGRjOWU3NWY2ZmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzKb61NsZ+s0DhAY1sSs7llrnvmFOpqMj/aD
nDRqYU7XpWKziKpI6YMpXxc50h3zLphTaxqe7YFVb5L7TWvwv1PyFfteeHolxkf/
12g/4+sm4tfGcG/uCxS7AE1TjWqOcfOHMesaacWW6CRdldTVdavFUgsyPje7Px6g
cIXgw/6EdXv1f58lIi6r6CRYmb0wDiVOevlRvTnnUCtpm4u8Ps2iTEZehANdV1ga
h5VWSf3L/OruUuSUpCTd45wKD7ylHxeNB3nPnLgvsexX4Z8JaCqUCyKBBGsXKoP+
i2+mvlvG+0S2b/4s6fXVX/qLh2cawbRaLIrtojGXXC+1gtorZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAB6TApFFhUM2wIfgBxN6OXztOFRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY4ZGIzZmYtODgxZC0z
Nzk2LWJlZDMtMmM2NjFjMDdmMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACb7cTq+g2zluibB3Bf3QESNzVYMlLmnroTyCkqIYtC/T7tXnX6CuXXp
6716pFeASJwvRpUOoSNHhPEOZzUR8xwUCcmB0GOJmpGs39fC5Vx4aXjptjLn6ll8
wLL7fOXDDgdculeJ6glSAtQzWTLq6kpFYqd9unT/YMMp8Q2jog5nPHtLpmy1W5r+
CjEpNucHxEht/dz+1gQxu3gSfPUPbQhHE/ncRQj3DtfvAXnVfo6Qhp8/s8wHvASL
KRXAAnJcVCfLT1aa9bML97akZVu2FEGGXkno93n6swUU2W1o8f72seRB9eq+5Xn9
zY6/XbixmdXmjssn+EBTnUUcq1iwk+A=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:37 2025 by rpki-client