Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b9ce67e-959d-3672-ab23-d81a3cd84715.roa
File:                     9b9ce67e-959d-3672-ab23-d81a3cd84715.roa (raw, json)
Hash identifier:          ZYsHPTmIY88lTImEBx+np8OHS3frx5w8Mq7fYWKVQaQ=
Subject key identifier:   49:59:BE:12:63:7F:C1:F0:AB:19:DE:53:2E:6C:70:5A:3A:AD:9B:83
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB9DE671EE2656825FD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b9ce67e-959d-3672-ab23-d81a3cd84715.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b9:de:67:1e:e2:65:68:25:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1bb99557-d1e0-4fbb-99b4-03f177ff305a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:2a:8d:88:f6:61:4e:0b:82:dd:a1:2f:8c:
                    25:2f:4f:d2:ba:a9:c8:23:04:c0:a8:f9:c6:c5:a9:
                    44:9e:fe:04:b2:ae:d6:8d:9a:1a:8b:00:9a:f9:f6:
                    d5:5c:2d:8d:71:f0:f9:e0:10:d6:c9:f5:25:4b:6f:
                    84:7e:1a:b2:05:d4:6e:d0:d9:7c:af:a4:cf:88:49:
                    f7:74:61:5e:ab:f6:6d:db:d5:07:1c:c3:50:6e:92:
                    2e:0c:56:02:38:8c:be:42:20:4f:0a:96:2e:ff:99:
                    99:84:ff:2f:df:0c:eb:45:23:52:0c:d8:b1:e7:3a:
                    c9:17:eb:b8:a5:75:8b:71:10:c3:79:c3:87:65:89:
                    9c:e1:54:23:3d:bc:6e:7f:4d:40:1f:93:98:69:12:
                    51:37:59:48:cb:f0:95:9e:9f:5f:80:d4:b3:eb:6d:
                    4e:6f:14:a1:3e:3c:30:79:fd:45:37:4f:26:23:6d:
                    44:4f:a3:ba:6d:f2:01:e4:10:b0:a3:51:16:df:f9:
                    af:87:43:3c:5c:7e:4e:38:58:9d:d5:5f:74:3e:be:
                    35:37:2b:b0:81:74:11:2b:3b:fb:55:81:49:c1:f0:
                    3a:ae:3f:2f:10:ca:b7:c1:e6:42:ea:65:01:d4:ee:
                    de:ee:7f:f9:06:75:ed:5c:e2:5d:7e:8c:a6:e3:c6:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:BE:12:63:7F:C1:F0:AB:19:DE:53:2E:6C:70:5A:3A:AD:9B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b9ce67e-959d-3672-ab23-d81a3cd84715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:c2:3a:2c:60:36:91:31:54:62:6b:b0:b2:d6:ce:33:9b:ca:
         5f:1e:16:66:28:25:f4:17:0c:13:0c:0e:d4:dd:ef:14:10:74:
         ae:d0:03:ca:30:81:1a:e9:60:82:e8:5c:bb:9d:85:da:be:80:
         d9:be:93:53:5d:24:c3:5b:a5:7b:c6:6e:b8:aa:7c:9c:bc:b9:
         95:a7:cd:5b:86:d4:f4:f6:a1:d4:8a:d4:68:b9:ec:8c:20:48:
         a7:f5:9f:fb:61:6f:33:41:4f:e7:92:1a:a5:92:d8:ce:bc:99:
         c8:e8:d5:a4:b7:d1:9a:82:f2:a1:2b:0d:5a:47:ed:1c:3d:e0:
         4b:1a:f4:88:68:a4:a7:b6:f7:76:6f:24:fb:88:cd:42:0d:61:
         0c:43:39:97:1f:92:9d:86:87:ba:3e:c8:ab:10:9a:ef:e6:b1:
         e4:0a:60:24:6b:e9:09:c3:54:05:d5:40:30:8c:97:a5:a7:0c:
         20:46:94:16:1e:d9:5d:ba:ec:1f:ad:56:94:4b:1e:60:ef:79:
         f9:7b:ba:14:1f:a4:75:19:61:2d:3b:98:69:09:58:76:e6:6a:
         4b:3a:7b:4f:64:4c:f1:95:2f:a7:91:e1:4d:c2:90:cd:f5:60:
         c0:ec:a9:7c:3e:d4:cd:5c:11:2f:72:21:9f:9e:34:2d:55:78:
         51:97:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:04 2025 by rpki-client