Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65fc3f7b-8ac0-3a0f-be93-55414619a0d1.roa
File:                     65fc3f7b-8ac0-3a0f-be93-55414619a0d1.roa (raw, json)
Hash identifier:          fMH5fBv4Q4GaFDTcI33ABJOTvMmzR6W+C7ZnQStFz2A=
Subject key identifier:   05:1D:2D:58:22:F5:36:89:97:AE:5E:29:05:D9:3E:E6:26:30:AA:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC2057AA49D8A7488A4C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65fc3f7b-8ac0-3a0f-be93-55414619a0d1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c2:05:7a:a4:9d:8a:74:88:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=987f3650-79e1-4a07-85be-d48c22532323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:90:ab:3b:88:64:8f:8a:c2:d8:7a:fe:57:b9:
                    d5:9f:0d:01:fe:9a:4d:2c:08:ee:49:86:17:8f:5c:
                    51:47:4b:e1:d3:16:27:d5:e7:7b:c8:10:2f:df:64:
                    58:bc:8e:c7:3d:59:e3:40:dc:c9:37:5a:27:6e:88:
                    c8:33:bc:95:be:22:ad:16:1f:7e:fb:9a:bf:ea:4a:
                    5e:52:a8:5c:b4:4c:3f:0b:c4:7f:16:fe:87:08:49:
                    de:85:bd:01:d4:5a:68:06:db:d1:16:c5:97:99:bd:
                    11:10:d8:12:f2:ce:c3:d5:cf:d9:2e:aa:bd:69:d9:
                    48:29:57:9e:33:f6:c8:b2:be:d5:d9:a1:7b:1f:c8:
                    d6:c9:25:8e:80:3c:67:62:6f:70:84:5f:b0:0c:d1:
                    d7:56:d3:5d:e2:e3:33:98:90:4d:a8:23:be:9f:24:
                    df:1f:aa:36:ed:87:e1:02:8a:84:2b:e7:9e:55:5b:
                    da:30:98:ef:c4:1f:a2:c7:f3:13:d6:f8:ed:02:38:
                    a1:1f:fc:c9:ca:03:8a:f3:0c:be:33:8b:99:59:df:
                    a6:f6:fc:40:1d:d3:7d:d5:03:de:6f:59:11:f2:19:
                    28:dc:fe:6f:9c:e9:24:d1:6a:55:1c:69:b3:b8:cf:
                    0b:9b:99:ac:6f:16:a3:d1:0d:19:90:47:7e:b7:9e:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:2D:58:22:F5:36:89:97:AE:5E:29:05:D9:3E:E6:26:30:AA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65fc3f7b-8ac0-3a0f-be93-55414619a0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:93:64:e5:ba:d5:a6:e9:2b:56:81:16:ec:4a:2b:ff:f0:
         57:4c:fe:93:2f:8c:af:42:98:ad:03:f9:74:1c:99:a6:99:db:
         d8:e3:ff:04:62:8a:26:9d:8d:b8:a3:18:50:23:ed:b6:dd:61:
         8f:19:e8:82:cd:80:0e:7f:a1:a0:d6:30:8d:d8:81:a8:11:77:
         37:86:6b:8e:ac:6d:ba:05:fb:f0:01:6d:40:42:33:79:9a:5a:
         4a:39:97:12:4a:78:20:30:cb:be:d9:95:8c:e5:44:83:05:be:
         ef:81:d1:ae:05:02:62:1a:24:3a:c2:8a:f1:04:75:84:4c:23:
         3e:e2:99:60:f6:84:cb:ff:9d:8a:05:c3:15:38:10:4c:ed:14:
         73:73:45:47:c1:da:67:28:c6:fe:5d:60:f7:3a:7c:ef:46:88:
         e8:43:da:b1:1f:a4:e3:92:88:a7:fd:24:29:75:a5:70:a4:90:
         9a:b9:06:78:ac:7e:0c:c7:a4:35:a0:82:1c:b9:c5:bd:81:d9:
         e3:2f:14:bd:d0:5c:e6:df:ba:74:cc:8b:a6:2c:81:d7:4f:ad:
         f0:73:67:90:82:7c:d8:7e:fa:02:1c:07:4a:20:93:ae:3e:60:
         3c:b5:ef:0e:41:b6:16:11:65:10:dd:65:a6:2c:28:2a:61:2d:
         39:31:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:53 2025 by rpki-client