Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f13cd06-945f-37f2-8824-5ee3ae1cbe42.roa
File:                     6f13cd06-945f-37f2-8824-5ee3ae1cbe42.roa (raw, json)
Hash identifier:          6IhTirOtLltQhVOALs9jT25qgV0pLMF60naX4+MadJI=
Subject key identifier:   BF:6E:E8:BE:76:B4:95:F2:56:AD:73:BD:40:DC:C3:03:33:64:3F:87
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F498386294F118D893ABD2680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f13cd06-945f-37f2-8824-5ee3ae1cbe42.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.196.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:86:29:4f:11:8d:89:3a:bd:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a0cf9e38-4a71-4c7d-a499-12a19f8ae1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:3d:62:0f:97:0f:39:9c:c7:68:62:e8:ce:
                    7c:66:b4:42:9d:e5:d7:51:43:d8:39:f0:47:71:69:
                    e4:de:51:a6:8d:82:1a:4b:4d:7c:a5:07:7d:81:06:
                    c5:9d:4a:4a:51:38:a2:c8:86:1d:8f:8d:2f:40:d4:
                    3e:7c:30:d9:57:40:f0:1e:62:33:86:ee:e9:b4:35:
                    d0:04:64:7e:0b:64:28:aa:8a:66:91:05:02:34:38:
                    4b:90:56:87:2f:3b:96:48:e7:18:de:2b:ef:94:3e:
                    08:eb:ef:8a:28:80:57:26:47:af:c0:07:fa:cb:a7:
                    57:e2:08:8a:1f:0f:1f:ec:d0:74:9b:ff:57:f5:a3:
                    08:ab:44:f1:44:a3:f6:14:5c:6d:b7:5f:8a:12:9c:
                    6c:fe:1c:fe:5b:a0:a0:d1:a0:c8:c3:18:84:af:ae:
                    32:a9:88:7e:b7:b0:72:e4:3e:96:51:23:4b:41:f4:
                    6c:57:67:d6:9f:20:e1:cf:66:17:64:13:55:d9:da:
                    1a:50:74:50:13:6d:bd:44:50:51:9a:24:d8:77:87:
                    f6:89:83:92:4a:81:02:9a:da:9a:60:6b:87:bb:06:
                    bd:5d:2a:5f:35:9f:80:48:36:c1:7e:d6:f3:26:4b:
                    24:30:2e:91:6c:c2:fd:ee:1a:67:01:89:4b:dc:f5:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6E:E8:BE:76:B4:95:F2:56:AD:73:BD:40:DC:C3:03:33:64:3F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f13cd06-945f-37f2-8824-5ee3ae1cbe42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:fd:2f:3b:6b:ea:74:9b:45:83:f1:73:62:b5:7d:5c:5e:
         f8:95:40:d5:0e:65:e7:9e:19:51:14:0e:41:d0:8d:c6:41:3f:
         ac:50:41:49:ee:e3:6e:b5:76:3a:23:9b:95:05:85:e9:b0:8e:
         e3:d8:46:63:5b:b3:02:29:5a:a6:43:2f:bd:32:74:7d:2b:71:
         40:37:0a:d5:43:2e:1f:ef:89:1c:69:a4:7e:e5:6a:c1:31:f0:
         af:07:16:75:f9:a0:66:aa:9f:b4:d6:bb:5c:77:82:7e:e8:2e:
         89:b1:71:65:5c:9e:a7:e2:c7:89:7b:12:24:98:7e:cb:ab:c2:
         d3:1d:42:4d:fa:d8:a6:12:25:dc:33:5c:7e:d9:8c:d0:cd:13:
         f3:d9:ba:be:62:73:8e:b4:df:61:56:66:e4:2e:e9:cb:2f:45:
         a3:24:eb:2c:0d:51:ef:7b:87:15:c2:22:db:3c:1f:37:87:4d:
         30:a9:ce:86:4f:73:65:77:3c:7a:d9:d9:5a:5e:8e:a8:83:0d:
         1b:ff:91:34:49:83:8d:ac:6f:61:ab:3a:11:e1:58:97:10:4c:
         61:25:f2:61:b7:3d:fe:a1:1a:7d:74:4e:bc:f7:0d:4b:85:33:
         8d:68:51:22:b9:d2:b9:b8:d8:9a:5d:77:d3:7a:e1:4a:e0:89:
         42:08:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:17:21 2026 by rpki-client