Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa
File:                     99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa (raw, json)
Hash identifier:          uM0GBqHHcnrpC9+znxm5e00YIN2gya9yvFSyJ3qDsRI=
Subject key identifier:   AF:1F:47:72:2D:E2:F6:FF:6A:B6:B2:14:9C:53:35:24:CE:8B:0B:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE075248FF17114BD55000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:07:52:48:ff:17:11:4b:d5:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=aec037b3-c593-4150-91fb-8825259e96ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:8c:a0:82:b3:55:df:5b:d0:b7:6b:b6:a7:
                    ff:31:fa:66:71:7d:0b:b9:37:64:ab:91:ba:03:cd:
                    4c:c3:02:8a:ff:7d:d4:0b:c5:23:c1:be:9e:31:b2:
                    62:ee:e6:b0:5e:1a:97:b7:4e:aa:c1:b6:19:35:f4:
                    a0:28:ef:3d:30:51:a3:6d:4a:12:52:5f:58:3e:22:
                    bc:64:09:6c:f5:73:56:57:a1:f2:23:64:14:35:89:
                    34:bd:b6:fc:0f:68:e4:69:00:2c:32:72:50:16:90:
                    fb:1b:b3:97:b6:05:da:4d:60:89:20:c8:ad:d7:6f:
                    fa:ea:f6:d6:62:5d:1c:04:eb:3b:3e:d6:56:f9:c9:
                    d3:9c:ac:81:2e:10:3c:07:db:3c:cf:fc:5e:6e:89:
                    09:a7:ef:0f:64:39:73:a5:8e:82:de:21:84:74:1d:
                    f0:46:14:74:ec:d3:b4:e8:6d:2f:1d:ba:a6:1d:e8:
                    ec:a6:e2:92:71:0d:31:4b:40:01:77:b3:6a:46:e9:
                    5b:87:b0:2e:b4:15:cd:d8:1e:de:5c:79:75:21:29:
                    41:91:d3:8f:84:96:3c:59:f4:1f:65:75:b1:b3:df:
                    02:94:f4:22:d7:d1:e6:71:c6:fd:21:8f:d8:de:c0:
                    4f:59:ab:cb:69:dc:b1:d5:2e:3e:ac:ba:31:b5:21:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:47:72:2D:E2:F6:FF:6A:B6:B2:14:9C:53:35:24:CE:8B:0B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b5:40:d2:07:40:d2:ba:89:85:0c:cf:6f:14:dd:75:89:24:
         e5:ac:1f:37:e3:61:06:4b:12:51:62:f6:59:d8:b8:c1:c0:91:
         85:03:7a:c2:75:61:6a:a1:20:fe:23:a8:21:06:1d:e1:f2:e8:
         7a:1f:c1:5a:a7:22:b3:3b:a5:24:ff:f8:71:a0:42:7f:8a:fb:
         1e:27:74:9f:f9:01:14:c0:a6:73:17:6c:89:44:52:4d:67:d5:
         bc:81:bc:bd:8a:15:8f:14:df:22:7d:52:5e:ef:4c:ff:dd:22:
         01:7e:1d:93:d2:ec:2e:67:84:73:90:01:db:42:2b:9e:cd:33:
         16:95:41:70:28:73:a8:34:a3:7f:13:58:29:2f:64:2c:4c:de:
         ca:04:17:cc:4c:20:98:6b:ea:82:37:fb:5e:ed:52:b5:57:6c:
         a3:46:a7:f7:e7:27:86:09:a9:86:1c:3d:52:19:14:22:57:62:
         6f:6e:62:83:61:1c:ba:5a:a7:c0:d0:2a:76:a2:a4:dc:c5:5a:
         c8:6a:78:47:52:8a:db:ae:8e:19:88:25:7d:1d:c2:a3:76:d1:
         de:ad:dd:7b:96:2a:4d:9c:a6:1b:fb:08:d6:d4:f5:ab:c8:80:
         c6:95:a8:c1:69:aa:8d:42:6b:b1:8d:64:e0:2d:db:00:5c:17:
         a4:91:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:58 2025 by rpki-client