Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6989276d-eb4e-39b9-9d76-d39f776b72f3.roa
File:                     6989276d-eb4e-39b9-9d76-d39f776b72f3.roa (raw, json)
Hash identifier:          bGxJ9HV0Y9lisxC1R0OdLwffdJWKR0YdiGqOQFuWCf4=
Subject key identifier:   9F:47:BF:37:31:36:66:2D:89:7A:AC:19:E0:9C:F5:5B:A8:D2:3D:88
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB8E8455159B777E25A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6989276d-eb4e-39b9-9d76-d39f776b72f3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b8:e8:45:51:59:b7:77:e2:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=027a24d1-56f6-41ce-9c2b-c110bd362ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:ae:3a:06:c5:ea:5b:7e:0b:55:1a:44:08:
                    54:28:d8:cc:bf:7a:03:74:01:7d:da:51:06:c9:bf:
                    8c:7b:36:28:39:e3:ad:67:5f:48:91:02:40:95:13:
                    e2:eb:5d:76:89:8f:26:61:a8:6a:10:55:36:10:15:
                    15:2c:0f:fc:ca:82:32:e3:ac:79:a2:3b:0b:34:18:
                    cf:4a:cb:7e:ef:2a:4c:4a:14:c4:1e:89:3a:09:7b:
                    d8:50:16:77:e7:71:b2:79:f9:a4:30:c9:14:b2:f4:
                    13:fb:fa:d7:b4:75:75:0c:96:81:b5:2d:70:8d:3d:
                    b5:b2:7c:86:e0:73:ba:8e:b3:97:40:61:32:f6:b7:
                    e9:6a:bf:33:5c:55:b1:cd:ee:1e:1b:d9:f1:5e:29:
                    00:50:b7:20:03:13:b4:53:8b:91:74:80:d4:16:f6:
                    9c:b9:fe:84:ef:84:ad:03:78:76:3c:78:bb:e5:41:
                    9f:b8:94:64:f5:02:2a:41:55:23:91:e2:99:07:ce:
                    21:79:a1:7e:a2:f8:e2:49:19:53:17:fd:24:53:46:
                    b5:d8:f0:48:bb:7e:0a:d9:0e:c2:97:54:db:d1:54:
                    27:ed:1c:df:c1:e9:0f:f0:27:c0:2a:dc:0f:01:60:
                    95:d3:f2:d1:4f:7e:01:25:03:0e:c4:05:5f:5f:5e:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:47:BF:37:31:36:66:2D:89:7A:AC:19:E0:9C:F5:5B:A8:D2:3D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6989276d-eb4e-39b9-9d76-d39f776b72f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:a8:01:06:78:cd:dd:b4:96:ac:fc:64:75:b9:b7:c5:d9:
         a4:aa:95:9b:27:16:9a:8f:72:18:75:8c:6b:35:09:df:4d:fe:
         ad:a9:67:8f:53:f7:4a:2c:8c:aa:40:42:da:54:ec:5e:fb:94:
         a7:ee:04:39:68:13:4d:55:c9:7d:00:5d:3b:34:3b:d1:29:db:
         e6:a1:b0:08:2c:38:ea:82:a7:74:fb:f0:9d:a4:85:a4:7b:2d:
         e3:00:58:a1:6f:80:b0:75:ce:09:ea:ce:3a:ca:8b:36:d6:7c:
         e7:f7:49:aa:6b:8b:70:40:55:e5:e4:63:49:d7:c8:00:5c:f1:
         db:45:b9:f4:a4:8a:46:d5:6c:87:dd:6c:f7:5a:73:bc:fb:ae:
         02:37:3f:5a:74:3b:73:8e:ed:80:ad:bf:f9:61:c5:92:05:bb:
         71:77:18:36:33:22:e1:6d:60:00:0c:cc:c1:5f:bb:91:64:84:
         c3:5f:6d:15:ea:80:36:bf:33:44:e9:96:cc:22:54:dc:b5:65:
         69:32:65:1a:ab:49:26:bf:50:7b:2e:0b:75:16:72:d4:3e:18:
         13:f5:79:84:a4:66:4c:07:fe:d3:e2:83:dd:aa:df:ce:1b:24:
         8b:d2:7d:02:2f:5c:d9:b3:0f:d4:8a:cb:2f:1a:51:a8:6a:0c:
         1b:c7:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:54 2025 by rpki-client