Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa
File:                     90de3f14-232c-3342-94f7-6cd2964a2e21.roa (raw, json)
Hash identifier:          seIMziVOY47OYfdEy8JvNMIpxiABjHouJwvBf5Qt9dI=
Subject key identifier:   1F:F1:42:CF:18:A9:51:67:E2:82:56:C2:29:FF:45:A8:84:73:C6:C3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDC23A15FFE6E23A3E4380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:c2:3a:15:ff:e6:e2:3a:3e:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ff1fdd83-0b8f-4109-8db0-55f01459a285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:f1:24:9d:c0:83:ea:5e:19:3d:7a:34:89:
                    18:75:2c:2e:92:45:04:e2:19:88:cd:f8:bf:bb:7b:
                    b5:41:ee:4b:9c:f8:bb:b6:92:ee:c6:d1:c4:7c:75:
                    33:5f:3a:3c:26:b5:fa:a2:26:2d:6f:dc:25:d6:b8:
                    ea:ea:3a:8b:9d:ec:85:f1:56:32:08:b2:bd:7e:11:
                    9b:63:f5:10:ef:7f:8d:08:1c:5b:b2:f3:1e:68:a7:
                    c3:bb:4c:ab:f5:5c:4f:34:08:1f:f4:eb:34:4b:9d:
                    f7:3c:d5:04:45:30:cb:14:ae:e8:de:4d:0e:47:62:
                    22:8b:a9:ca:77:5c:68:5c:6a:eb:3d:b3:d5:1e:39:
                    0d:06:57:44:b2:99:25:c9:85:5c:b8:2f:1a:0e:f8:
                    9d:8a:d6:f2:04:16:d1:cf:2b:fb:9e:9b:08:f9:b0:
                    3f:36:eb:bf:1e:d7:73:61:e3:09:a8:05:88:98:da:
                    34:f4:9d:01:e1:00:13:35:51:2e:78:98:00:4c:b0:
                    4b:5e:92:cd:0c:9e:b6:8a:ca:02:88:17:ae:8d:f6:
                    81:35:f5:db:5d:76:1d:b9:5a:28:a7:dc:38:03:97:
                    7d:92:11:f8:3c:cb:dd:f7:04:9b:96:0b:a1:f2:9d:
                    ad:ca:ff:d5:c3:ab:04:ba:77:e9:b0:49:d7:88:e8:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F1:42:CF:18:A9:51:67:E2:82:56:C2:29:FF:45:A8:84:73:C6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90de3f14-232c-3342-94f7-6cd2964a2e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:4e:72:bb:13:01:02:bc:56:48:13:ba:a3:14:96:db:7a:
         4d:80:c0:ce:d6:7a:93:10:39:ec:97:3a:78:66:32:4f:0f:7c:
         c6:76:d7:4e:54:89:00:82:90:28:f4:ad:b0:56:05:c1:ac:cd:
         ed:31:b5:c2:1a:ac:43:8f:aa:31:58:3e:ab:4f:37:ba:c7:d2:
         3e:77:b6:c1:8c:7a:45:4b:eb:ff:a6:d7:9b:40:7b:3f:d5:3c:
         61:62:78:e8:df:95:3f:65:e5:0b:53:8e:5e:a1:52:bb:50:2e:
         00:3b:f1:a0:eb:f7:b8:7a:e2:de:22:62:eb:bf:3f:16:c0:a0:
         52:d4:37:23:33:be:0a:91:a3:58:37:b5:2d:24:c5:ef:18:7f:
         c9:89:73:d8:99:5a:0f:8e:a9:0f:c4:76:f2:9a:d9:83:4b:a9:
         9a:72:ea:6a:52:59:95:0e:46:28:84:d6:d0:a8:5a:05:69:9b:
         73:96:58:c4:3a:b7:68:aa:b0:a2:1e:47:71:f1:95:63:48:07:
         ca:31:ea:9d:e8:22:05:0a:25:ad:49:f0:83:d3:93:2e:53:3d:
         8a:59:19:19:11:63:31:60:df:a0:bc:82:bb:ba:d5:97:2a:74:
         e4:dc:be:e0:16:55:11:6e:d2:90:18:e3:aa:19:e9:a1:95:cb:
         08:34:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:00 2025 by rpki-client