Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2e6490c-e13d-32a6-8e8b-b846c750604a.roa
File:                     a2e6490c-e13d-32a6-8e8b-b846c750604a.roa (raw, json)
Hash identifier:          o6pVlHOdgTq6uY7bQCO4o+j/2IIqVOB/vhSO3s+M2n0=
Subject key identifier:   BF:88:DA:6A:06:4A:07:29:82:E8:7A:05:D9:BD:8F:05:0C:DB:0D:BE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCFE30856A3DE44FEB9280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2e6490c-e13d-32a6-8e8b-b846c750604a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.196.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:fe:30:85:6a:3d:e4:4f:eb:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0787bf15-a195-4cef-b48c-54cb6c49aa90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:d7:37:c5:da:41:47:5a:05:33:bc:ae:f2:
                    8e:ae:a2:e9:f8:6b:48:9b:81:33:b9:1e:a8:26:2e:
                    e2:f2:c6:2a:27:71:eb:45:78:2c:a6:b5:0f:57:0c:
                    dd:1d:67:c0:ff:07:af:f1:b6:88:5e:56:52:8e:af:
                    84:ab:89:a6:ad:6a:5f:8d:ed:3d:6b:bf:f0:c4:0b:
                    25:b6:0a:48:4b:bb:ce:37:25:5c:b7:05:1f:d2:9e:
                    d2:e2:99:f6:a7:cf:f2:d5:f3:41:e9:36:12:57:c3:
                    e6:28:4c:6c:a9:b9:5b:40:9a:f8:0a:99:65:ce:b6:
                    68:8f:d1:65:9c:cd:26:74:a4:bc:8e:31:50:13:c6:
                    fc:da:bc:73:82:43:93:42:42:dc:bc:1f:56:5c:21:
                    b6:3f:e5:c7:19:de:a4:a5:9d:22:dd:b3:9d:84:9c:
                    93:20:29:6d:71:23:17:1f:80:f9:07:ad:4f:d7:98:
                    6d:e7:57:3f:c7:d9:f9:b4:fd:24:14:8b:8b:4c:eb:
                    ad:3e:10:6f:33:4d:c4:62:4e:51:a3:09:b7:15:4f:
                    44:9e:a1:ce:9f:89:e4:1f:3b:6f:4f:26:6e:39:59:
                    ef:21:82:14:02:8e:85:63:83:05:c5:d9:65:2e:1b:
                    c8:0d:d5:33:35:98:d1:db:a0:cd:09:ed:ad:f1:b7:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:88:DA:6A:06:4A:07:29:82:E8:7A:05:D9:BD:8F:05:0C:DB:0D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2e6490c-e13d-32a6-8e8b-b846c750604a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:60:78:8b:0c:8c:0a:df:b9:a2:18:ff:31:f2:4a:9e:2a:
         99:b6:df:ae:87:e5:9a:c4:00:d1:2d:3e:72:03:de:cf:a6:75:
         ac:0e:0c:50:cb:81:f6:ec:00:cb:04:e5:44:9c:23:70:a5:df:
         40:3b:72:86:d0:d1:11:c2:f1:a7:ba:93:7b:82:e5:ab:2b:e1:
         24:9a:0d:d7:83:a8:0a:1b:93:91:40:59:3d:e5:be:95:9c:6a:
         55:d3:09:3a:cc:5f:3c:7f:36:02:07:04:b4:e2:2b:7a:1d:2d:
         7c:9f:c0:e9:ab:1e:33:f4:4b:be:a0:8e:4c:97:a7:e6:ef:05:
         26:db:26:8a:36:58:94:44:f2:fe:15:79:51:69:59:5c:fd:6d:
         55:96:c6:23:6f:58:ea:d1:7a:41:76:ba:52:7d:80:d2:3e:be:
         34:f2:2f:3c:8e:07:1a:da:be:86:bd:c5:f7:d1:8c:44:1f:90:
         71:80:c4:a1:69:b2:3b:fe:ff:1c:d6:70:d4:c9:c8:5e:87:b5:
         06:42:1a:f1:83:6f:53:ea:88:89:ed:2a:47:58:f7:a8:8c:f0:
         17:9c:5d:73:65:31:47:8a:92:32:8d:4e:79:18:bb:41:ea:94:
         2a:67:3c:60:af:82:41:75:04:6e:e8:17:35:a4:fb:14:ba:bb:
         3f:64:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:06 2025 by rpki-client