Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83140b00-fa01-3716-9b48-329f6e15b464.roa
File:                     83140b00-fa01-3716-9b48-329f6e15b464.roa (raw, json)
Hash identifier:          oJKywpfzPv+QHS/nWV59ML/Pm++T7YpEJUjwKpnKCoo=
Subject key identifier:   72:6B:EC:A7:BB:B0:45:59:A4:15:B4:1A:78:8D:F4:AD:A3:65:05:71
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC37D2B0EE9D80D504080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83140b00-fa01-3716-9b48-329f6e15b464.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c3:7d:2b:0e:e9:d8:0d:50:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f004c44f-d3c0-404f-bdd4-b2918da12c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b7:15:fa:a7:f1:57:ba:10:1a:60:fe:19:bd:
                    3b:63:e6:67:e1:50:64:ad:d7:b1:3c:d7:da:ff:15:
                    11:5a:e2:db:b3:dd:dd:a1:75:9b:d3:cb:23:36:ee:
                    1d:57:2f:a3:40:8b:59:19:c7:20:5a:18:c0:7a:53:
                    62:cc:35:3c:70:51:c7:4b:32:21:37:c4:26:91:a6:
                    3a:fc:06:d4:f8:25:52:be:f9:79:0e:d7:b9:49:b4:
                    e1:65:37:61:0e:4b:6d:f1:0a:63:67:05:72:26:da:
                    b7:59:07:7c:d9:c8:0e:e7:ac:84:d1:ef:c7:43:db:
                    52:cc:d0:d4:52:38:05:6e:78:b8:d3:96:e6:e8:d1:
                    c4:1c:86:82:c8:64:f1:00:dd:ab:8d:e3:15:d0:4c:
                    34:04:c6:13:8a:62:d3:cc:4d:d2:e1:8f:a7:3d:ca:
                    a4:8b:9d:e7:7c:42:ca:29:52:55:b5:b5:bc:bb:cc:
                    96:b7:7d:94:45:4a:d1:5c:23:ad:70:75:66:16:ee:
                    8b:d9:4d:37:9e:3d:32:15:c6:8c:3f:0e:5f:c2:14:
                    1e:4a:3b:6f:ba:8c:d4:42:0e:ae:de:b6:48:bc:dc:
                    11:d3:8a:4b:31:fb:ed:64:ec:2e:c3:2a:7c:a2:fb:
                    a7:23:8c:a4:6f:00:03:19:d9:c2:9e:0f:f2:a2:b1:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6B:EC:A7:BB:B0:45:59:A4:15:B4:1A:78:8D:F4:AD:A3:65:05:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83140b00-fa01-3716-9b48-329f6e15b464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:05:8b:71:08:05:37:d7:51:e0:c0:bd:d2:98:92:b5:26:07:
         37:85:c5:64:87:2b:e2:eb:e3:9c:28:3c:bd:6c:d0:f7:41:5d:
         2d:5e:44:a5:7a:cf:05:39:f8:6f:46:ea:a9:11:16:ad:21:04:
         08:97:19:d9:a0:dd:f1:70:fb:17:04:50:8e:e4:65:f8:06:93:
         77:87:a7:4b:4d:74:28:c5:51:a3:c1:ef:f5:8a:12:1d:a2:ca:
         e4:25:ed:fb:d6:ca:93:07:18:a2:4a:43:be:7c:26:ed:84:0d:
         90:cc:35:d5:db:6b:6f:21:59:1a:05:80:3a:ed:a4:9c:bb:bc:
         99:37:9c:d9:24:5a:e7:6e:b5:d1:0f:b3:88:7a:5a:b8:96:29:
         4f:55:4a:2c:f7:19:07:0c:be:9c:86:82:46:78:97:67:33:dd:
         42:c0:9a:73:6f:60:e4:6a:15:d2:9e:48:f6:c5:6a:7e:4c:09:
         0d:b6:c6:03:c9:1c:07:d2:42:1e:17:ff:ec:c8:81:41:87:a1:
         df:82:07:e3:af:9b:9a:d5:0c:54:55:18:f1:dc:9d:26:01:ac:
         00:63:b7:41:3c:7a:0a:1a:cc:d5:02:78:85:8b:08:2f:7a:08:
         e5:a0:f9:8b:fa:46:fd:ae:67:09:dd:f3:3c:a4:9d:16:54:34:
         4e:80:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:45 2025 by rpki-client