Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/773dc6c3-7c37-304e-88dd-1dcc7bf130e9.roa
File:                     773dc6c3-7c37-304e-88dd-1dcc7bf130e9.roa (raw, json)
Hash identifier:          DlpgRkzIrfO/vYHSn1HfObez9Z7Pb04X9hupQpz5/zk=
Subject key identifier:   2A:7A:7C:BB:63:0F:2A:E3:95:9D:44:D1:20:47:73:78:BE:6B:52:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49839D0A2D2F84741396D700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/773dc6c3-7c37-304e-88dd-1dcc7bf130e9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.197.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:9d:0a:2d:2f:84:74:13:96:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ef94ce04-abc4-4413-80e5-b564769cbc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:9e:7a:c0:5f:b4:0f:2f:64:cc:ee:4e:f0:
                    70:be:d2:54:61:42:92:2c:43:11:36:56:3b:b4:e5:
                    9a:7f:74:29:1e:a0:13:02:1b:ef:23:35:f9:4a:6f:
                    fc:9a:ad:fe:8e:18:11:8f:40:b4:6d:66:c5:e2:2a:
                    e2:83:ea:a7:5c:a8:b5:d4:f4:80:67:4d:e7:bb:e4:
                    5f:ca:f7:ed:7b:b2:d7:4b:6d:6f:af:4f:94:13:ca:
                    8a:04:06:45:17:8e:2e:54:7b:d5:36:10:3b:93:85:
                    af:bd:8b:76:09:1e:c7:80:f1:79:89:58:ec:35:25:
                    ef:19:a2:6a:ef:c9:37:61:02:20:1e:e1:f1:6d:04:
                    65:19:75:24:8e:27:ef:3c:fe:c4:13:40:40:9b:fa:
                    f9:27:4b:cd:48:61:79:80:7e:92:d1:d8:41:f3:c1:
                    04:79:37:16:1f:07:7b:ad:d1:a9:88:cd:0b:aa:fb:
                    cd:85:8f:ce:23:6e:b2:87:29:a3:98:52:65:fb:60:
                    dc:ab:62:20:2d:d1:36:17:a1:f4:63:ab:41:c1:2c:
                    c2:19:f4:a0:9c:20:9f:ca:81:fa:45:2c:37:bc:66:
                    74:b4:fe:bb:d3:e1:e8:09:db:6b:99:07:e4:21:37:
                    dc:e0:ff:92:5e:75:1d:37:6c:c2:55:3b:2e:35:1f:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7A:7C:BB:63:0F:2A:E3:95:9D:44:D1:20:47:73:78:BE:6B:52:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/773dc6c3-7c37-304e-88dd-1dcc7bf130e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e1:2e:a4:67:3c:6c:cb:35:62:25:5c:f9:75:4b:63:23:6f:
         44:49:3c:1d:06:45:1c:9a:27:36:df:d0:af:7a:d4:0f:7a:e9:
         5f:c0:53:fc:6c:94:23:56:b5:1a:29:e6:c3:72:48:c8:7d:00:
         aa:7d:aa:ef:aa:05:fe:cd:55:a4:bd:86:53:bc:ae:bf:1e:4d:
         9f:e4:d7:e1:1e:91:31:ca:16:95:ff:cb:3f:fe:16:c9:c0:f7:
         3d:fa:08:bc:01:d4:c3:35:2f:86:2a:ee:aa:87:45:2d:b5:4f:
         6c:18:20:d1:c1:e3:9f:77:c5:6d:30:f7:09:4e:27:8a:84:76:
         fb:80:68:c6:ec:e4:38:5f:77:14:dd:ce:93:77:39:36:2c:7d:
         cc:4c:a8:6e:24:e4:b8:b6:e7:50:e0:35:82:16:e9:27:6d:93:
         d3:bc:6d:aa:2b:b0:f6:e8:50:35:a3:19:c8:2c:ab:00:e0:86:
         da:54:d3:26:a3:31:8a:8a:f9:d0:83:fa:85:b3:a0:36:55:90:
         f2:cc:5b:7d:f9:45:20:31:49:33:08:78:85:95:af:8a:90:32:
         3a:2c:90:6a:e7:31:74:65:93:61:a5:9d:12:5b:a8:f9:23:f1:
         17:31:c9:c2:ae:6c:80:a3:60:59:e3:73:b2:8c:68:40:57:c3:
         1e:73:70:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg50KLS+EdBOW1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWY5NGNlMDQtYWJjNC00NDEzLTgwZTUtYjU2NDc2OWNiYzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM2eesBftA8vZMzuTvBwvtJUYUKSLEMRNlY7
tOWaf3QpHqATAhvvIzX5Sm/8mq3+jhgRj0C0bWbF4irig+qnXKi11PSAZ03nu+Rf
yvfte7LXS21vr0+UE8qKBAZFF44uVHvVNhA7k4WvvYt2CR7HgPF5iVjsNSXvGaJq
78k3YQIgHuHxbQRlGXUkjifvPP7EE0BAm/r5J0vNSGF5gH6S0dhB88EEeTcWHwd7
rdGpiM0LqvvNhY/OI26yhymjmFJl+2Dcq2IgLdE2F6H0Y6tBwSzCGfSgnCCfyoH6
RSw3vGZ0tP670+HoCdtrmQfkITfc4P+SXnUdN2zCVTsuNR8iKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCp6fLtjDyrjlZ1E0SBHc3i+a1LyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzczZGM2YzMtN2MzNy0z
MDRlLTg4ZGQtMWRjYzdiZjEzMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvhLqRnPGzLNWIlXPl1S2Mjb0RJPB0GRRyaJzbf0K961A966V/AU/xs
lCNWtRop5sNySMh9AKp9qu+qBf7NVaS9hlO8rr8eTZ/k1+EekTHKFpX/yz/+FsnA
9z36CLwB1MM1L4Yq7qqHRS21T2wYINHB4593xW0w9wlOJ4qEdvuAaMbs5DhfdxTd
zpN3OTYsfcxMqG4k5Li251DgNYIW6Sdtk9O8baorsPboUDWjGcgsqwDghtpU0yaj
MYqK+dCD+oWzoDZVkPLMW335RSAxSTMIeIWVr4qQMjoskGrnMXRlk2GlnRJbqPkj
8RcxycKubICjYFnjc7KMaEBXwx5zcCs=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:42:48 2026 by rpki-client