Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77cda104-4c01-30fa-a7a4-5b644a06832c.roa
File:                     77cda104-4c01-30fa-a7a4-5b644a06832c.roa (raw, json)
Hash identifier:          Y7t6lnS6c029Bwjwr0U1gKOyEupscFdE/5uoN/8fhIM=
Subject key identifier:   37:89:C7:57:E5:49:C6:9E:ED:5E:CF:14:DD:AB:82:BA:65:D3:71:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB5B042CBCD25835B3680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77cda104-4c01-30fa-a7a4-5b644a06832c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b5:b0:42:cb:cd:25:83:5b:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=54471df5-f243-4d85-b665-8facb674f1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:3a:16:49:84:5d:49:4a:c5:ae:dc:d1:21:
                    04:53:e1:a3:d0:d3:76:ff:6c:e9:c9:0d:6f:2d:1f:
                    0d:00:50:a1:c8:14:99:dd:64:93:82:fe:d6:cd:2d:
                    18:69:a0:e3:7a:ea:7b:ac:f1:bd:db:d8:be:67:46:
                    c4:c6:23:fe:8c:42:e3:3e:9c:fa:ab:ec:3f:5a:25:
                    6b:56:d6:82:47:05:62:ec:bd:ee:93:03:47:55:a2:
                    0b:44:8a:0f:84:58:40:35:b5:a3:9c:d3:85:d5:9e:
                    98:d3:7f:74:6a:63:4f:f0:60:3f:a5:00:c8:b3:24:
                    c9:b5:ae:f1:d0:a1:13:73:11:d5:ff:98:2f:63:79:
                    81:86:3e:4c:0d:c7:a3:39:20:b0:14:80:3f:b2:85:
                    1d:08:89:e7:34:69:3d:01:c4:96:a5:86:25:1b:1f:
                    dd:b2:5d:4d:09:c3:41:b2:a1:62:30:a5:0d:eb:c9:
                    99:f8:3a:7c:d5:bd:9f:cc:46:e8:af:6c:25:1c:4a:
                    60:5f:fd:82:ee:cd:e7:1d:61:e1:41:23:95:f8:b4:
                    60:18:ab:ff:a0:38:c2:89:fc:19:9c:68:22:71:5f:
                    cc:a7:bc:ed:4a:33:f9:05:b4:af:d4:e7:ee:a3:e1:
                    e1:01:6d:54:28:0b:aa:aa:38:bf:56:b9:dd:09:da:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:89:C7:57:E5:49:C6:9E:ED:5E:CF:14:DD:AB:82:BA:65:D3:71:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77cda104-4c01-30fa-a7a4-5b644a06832c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ed:d5:b4:22:a7:f5:4d:09:14:fd:73:2e:71:1d:6e:fd:df:
         d7:46:df:7c:f9:c4:43:6b:5f:f4:3e:e0:f1:98:b8:61:99:f4:
         20:dc:9a:e9:5f:88:e2:82:2c:d4:1b:e8:5c:03:14:28:f0:9a:
         ab:68:47:57:30:3c:21:d0:d2:55:d2:ee:8d:61:3b:9b:8d:db:
         85:dc:7c:ae:2e:94:ec:07:04:b4:9d:80:d4:11:5b:0d:d9:73:
         40:31:fa:98:8d:a5:10:24:c4:c0:e5:f0:55:5b:f3:53:43:f7:
         ef:a3:63:7b:90:92:50:93:7f:27:b6:03:e9:70:e4:0a:af:25:
         c2:4e:a5:7f:0d:5b:a3:d4:c8:c6:75:a2:86:51:e3:94:cc:4f:
         bd:60:4d:6c:68:ed:e7:10:26:a7:35:b4:54:f9:5a:c4:cb:7b:
         59:12:cb:e3:4e:c8:6d:34:e3:66:ec:08:a8:50:2c:62:23:e3:
         e1:f1:cc:d5:64:b1:cd:3a:ec:f3:2c:45:f7:57:42:91:7a:7e:
         5d:6b:81:82:99:7e:d5:bb:fe:d0:ef:10:7a:c3:1b:f8:67:df:
         fb:74:69:d1:82:cf:eb:ae:ca:12:dc:a3:58:a0:1e:9c:ec:80:
         3c:6f:1c:38:c1:bb:a7:a7:32:76:2e:0b:d1:14:aa:b6:b0:ba:
         f6:07:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:10 2025 by rpki-client